Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/952BFE3607A811EF97CB1951017001B1.roa
File: 952BFE3607A811EF97CB1951017001B1.roa (raw, json)
Hash identifier: /puGZcOZ8Nt9z+j+a47SKB2vb1vAFa2NHr31FYQE3XI=
Subject key identifier: 60:EE:9F:8D:49:B9:C8:48:A0:B5:71:46:55:9C:0E:5F:D2:9D:4C:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B350
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/952BFE3607A811EF97CB1951017001B1.roa
Signing time: Wed 01 May 2024 10:50:11 +0000
ROA not before: Wed 01 May 2024 10:50:08 +0000
ROA not after: Sat 11 May 2024 10:50:08 +0000
asID: 139471
IP address blocks: 154.213.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45904 (0xb350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 10:50:08 2024 GMT
Not After : May 11 10:50:08 2024 GMT
Subject: CN=66321e63-f82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:86:23:35:2d:5a:71:79:51:a9:9e:4c:9a:
8f:f2:a3:37:ed:11:ef:d8:3c:f7:82:8b:a0:fe:3f:
72:d9:81:69:22:b5:c5:42:84:f6:85:34:13:a6:64:
c2:bb:df:28:5a:a5:1f:8f:e9:28:3d:1d:20:9c:aa:
d6:b1:92:44:99:a1:1f:02:61:43:b9:f6:44:62:ba:
6f:e4:84:6f:aa:61:58:1a:6d:d6:81:96:66:82:90:
7f:03:08:e7:97:45:e9:26:44:ea:32:ff:38:56:75:
0b:1f:1c:de:7b:71:d4:6f:34:4f:d5:f1:a9:96:a5:
35:b5:5a:52:b0:d5:ed:67:03:32:53:3b:33:14:27:
70:e4:e4:52:f0:45:b2:e1:09:13:aa:76:7c:41:80:
dc:3d:78:5c:ee:72:84:c7:b7:65:f9:5a:75:da:bf:
1c:17:a9:55:89:19:e0:c6:1b:90:22:5a:a8:33:40:
53:72:17:5c:cd:9d:34:5c:da:0e:47:3e:21:3f:35:
fd:d7:ad:ae:0e:f0:07:0d:24:59:ad:9b:ed:ac:5b:
98:0b:3a:9f:ff:bf:00:81:b1:88:db:3c:b0:f2:97:
d9:be:6c:19:d5:44:91:73:8d:af:b3:15:34:ad:1e:
6f:38:ec:fb:03:f1:33:c1:2f:61:63:f8:22:a8:a2:
9e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EE:9F:8D:49:B9:C8:48:A0:B5:71:46:55:9C:0E:5F:D2:9D:4C:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/952BFE3607A811EF97CB1951017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.23.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:3f:38:d6:0f:b5:ab:8e:2c:4f:52:1d:81:6a:6c:9c:d8:68:
0d:4e:72:fe:ee:d6:05:24:13:4e:4b:65:0d:7e:ca:41:d1:ef:
4d:0c:5b:66:b2:cb:1e:be:5c:ba:16:57:67:b6:b1:2d:ee:fb:
c2:be:d9:b0:c7:a4:b5:5f:2e:ed:c7:08:c4:97:54:66:24:5a:
2a:c0:aa:33:96:f1:89:d1:b1:1f:0c:92:ca:6f:9c:b4:2f:4e:
40:ee:33:79:d6:65:96:87:9c:b3:62:9d:26:4b:9e:23:d3:6f:
5b:b8:85:4b:f8:3d:c7:84:3a:9c:bb:04:c7:cd:2b:60:fe:4b:
ce:dd:c9:11:c6:60:41:0d:2f:c8:77:27:0c:8a:0a:a2:9c:3c:
f8:13:1f:55:aa:fc:18:c1:1c:f4:71:b8:6d:60:23:c6:6d:71:
6a:ab:86:7d:c5:fa:4b:26:92:d6:f9:08:c0:52:04:a9:c7:ad:
1f:0c:e5:ec:78:13:07:0a:88:e1:53:34:c6:76:e8:61:c3:0d:
83:5c:0b:db:73:8e:51:37:26:65:94:9d:02:08:1d:91:ec:b0:
94:25:b7:14:a5:32:43:cd:bc:1f:21:16:22:62:6e:e6:2f:37:
95:d5:22:a3:a9:3b:4a:d6:05:a3:3d:be:7d:f0:3d:1a:86:92:
fa:bc:86:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:48 2024 by rpki-client on console-fra.rpki-client.org