Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/926C3E440B4611EFB6AA8A39017001B1.roa
File: 926C3E440B4611EFB6AA8A39017001B1.roa (raw, json)
Hash identifier: VQ/GyTFZseOVsngVMoVtt4XnTuqwZclzrdCxy07u8Kc=
Subject key identifier: 95:4E:01:27:AD:72:5D:65:3D:EF:21:44:DC:12:E1:D5:BB:AA:26:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B446
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/926C3E440B4611EFB6AA8A39017001B1.roa
Signing time: Mon 06 May 2024 01:18:40 +0000
ROA not before: Mon 06 May 2024 01:18:37 +0000
ROA not after: Tue 14 May 2024 01:18:37 +0000
asID: 44559
IP address blocks: 154.220.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46150 (0xb446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 01:18:37 2024 GMT
Not After : May 14 01:18:37 2024 GMT
Subject: CN=66382ff0-6d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f1:8d:a3:2e:11:3d:cc:53:44:98:31:4c:8b:
5d:cf:45:2f:b7:6a:24:c4:05:ca:3c:75:ae:da:4d:
c0:4d:e5:28:f6:72:80:66:72:bb:1e:60:55:e1:11:
09:b6:85:e9:39:c5:84:19:69:84:71:91:b1:4d:0f:
4e:4a:33:02:bb:92:6d:e4:02:aa:ab:87:56:78:d5:
fa:6c:7f:02:f5:38:d9:0a:19:04:c4:97:c6:bb:1e:
52:66:c4:0a:b1:fe:a0:29:a9:d1:37:ec:ca:18:56:
bd:25:90:6f:5e:ff:00:19:ee:19:75:59:f9:02:b6:
07:ef:cb:03:d7:71:57:52:4e:cf:7a:24:19:ac:c6:
4d:f8:4b:42:b4:65:77:9e:e0:be:c9:6f:20:54:44:
40:37:03:55:78:7c:6a:8b:d5:ab:5f:3d:75:2c:dd:
56:e1:47:e9:fa:da:db:61:7c:37:20:c4:3f:83:e8:
e0:aa:34:1f:91:9a:3e:b0:dd:13:02:04:9a:63:62:
df:2d:42:ab:5d:8a:72:95:2c:65:e0:49:c9:82:90:
58:55:ba:7a:28:73:a9:07:cb:37:f6:2e:79:81:e6:
2f:3a:68:84:6f:24:8e:de:7d:20:2e:8d:67:10:ff:
4d:5d:20:dd:69:43:31:76:28:a2:4f:aa:ce:96:84:
e5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4E:01:27:AD:72:5D:65:3D:EF:21:44:DC:12:E1:D5:BB:AA:26:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/926C3E440B4611EFB6AA8A39017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.128.0/18
Signature Algorithm: sha256WithRSAEncryption
64:b9:e0:f3:17:c8:c4:b8:47:f8:c9:f3:d4:81:52:79:3c:a1:
bb:75:d8:f8:9f:cb:90:7e:56:2d:11:30:83:2f:a6:7a:67:f0:
f5:db:6e:03:bf:5d:f1:28:fe:b6:af:7a:fe:9f:4b:ab:78:15:
81:ae:6b:fb:ac:f3:78:83:d4:27:e3:a5:f6:8d:52:95:bd:c1:
a4:9b:a8:69:f5:9c:2f:98:5a:70:b7:f1:18:f1:65:49:a8:bb:
7f:06:43:1c:7f:23:1c:53:ae:d5:12:91:63:22:58:e8:77:c3:
4a:c7:a2:47:e8:52:4f:88:eb:c0:da:c6:67:c3:92:4c:f1:bd:
fd:9b:af:32:d3:04:e8:0d:df:ea:2c:19:81:fb:57:52:5f:9e:
52:cb:9f:91:bd:7d:fa:d4:58:48:a2:f1:9f:ec:ba:f0:e5:30:
22:fd:a9:45:fd:7b:46:51:9a:e9:3b:be:dc:fa:22:92:8c:ba:
86:db:16:17:33:4c:ca:34:98:e6:3f:c9:ad:48:39:15:86:bc:
5b:57:13:50:65:ca:11:0f:89:b8:2c:6b:08:6d:59:90:03:c0:
7e:be:3e:29:b9:ab:e9:7b:11:6b:da:97:be:11:79:95:b1:3a:
b1:d1:d7:77:d5:4b:42:9b:ea:17:f7:7b:0d:f2:2d:86:c7:2b:
43:78:9d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 03:09:41 2024 by rpki-client on console-fra.rpki-client.org