Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9745ECBA089111EF9A73D83A017001B1.roa
File: 9745ECBA089111EF9A73D83A017001B1.roa (raw, json)
Hash identifier: Cvcu99syoQylY1iAyPMHaiThgOYV+6n3k9HXmQ0yPtw=
Subject key identifier: FD:86:B3:B4:96:7B:77:8F:31:C4:58:67:02:46:FF:DF:A1:84:0D:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B40C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9745ECBA089111EF9A73D83A017001B1.roa
Signing time: Thu 02 May 2024 14:38:07 +0000
ROA not before: Thu 02 May 2024 14:38:04 +0000
ROA not after: Sat 11 May 2024 14:38:04 +0000
asID: 39600
IP address blocks: 154.205.160.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46092 (0xb40c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 14:38:04 2024 GMT
Not After : May 11 14:38:04 2024 GMT
Subject: CN=6633a54f-b110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:f5:f0:d3:53:f3:9e:c8:0a:35:88:f6:e9:
06:c5:2f:18:7b:80:29:86:3a:f4:3f:63:12:bb:d0:
75:96:b7:fe:11:58:9d:1a:42:d7:52:7a:24:31:8e:
03:9e:a2:99:ff:ac:f4:6d:0c:d8:80:11:2e:6e:05:
28:eb:46:ca:57:14:0d:ab:8f:e5:49:24:f7:f5:85:
19:f7:44:7e:81:2b:82:7e:e9:34:2b:0f:77:68:00:
41:82:2b:17:a2:98:99:62:7a:ad:f2:be:31:01:2f:
ba:4c:dc:42:81:53:9d:53:ab:d6:77:44:00:9c:77:
56:c1:9c:fb:2d:d2:7b:00:e6:1c:42:89:4d:b5:40:
c2:72:98:45:8d:2a:8c:11:87:25:70:a9:c1:8a:57:
f8:b0:13:ef:2c:a5:8c:f8:e5:b0:c3:9b:cd:b2:2e:
b5:84:c4:f7:47:71:05:51:4e:30:23:27:38:a5:04:
dd:e1:aa:43:78:44:a6:93:84:c3:5f:9b:54:60:53:
06:7c:c4:2e:35:bc:bd:39:00:88:95:15:42:f3:78:
9e:38:d6:01:4b:8c:39:19:05:72:76:19:b8:95:ac:
da:15:3c:23:1b:f4:a8:73:aa:54:eb:5a:23:29:fb:
88:db:5a:7f:4f:9a:d3:6f:fc:9f:b8:e7:e4:74:b2:
b9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:86:B3:B4:96:7B:77:8F:31:C4:58:67:02:46:FF:DF:A1:84:0D:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9745ECBA089111EF9A73D83A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.160.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:90:33:2f:b5:02:c2:b7:84:9b:39:e8:c3:be:e3:37:b1:51:
1a:80:2b:60:91:81:3c:93:e9:4f:db:f1:8c:94:6c:ef:c6:e0:
f1:70:70:1c:7f:65:6c:05:b4:6d:dd:6e:1e:c0:a4:c6:ef:16:
c4:0f:25:b8:b2:59:45:10:a2:d7:05:de:0e:1a:3a:b7:da:84:
1a:04:ed:33:f4:04:ad:4d:bb:5f:12:44:22:ab:97:d4:6f:47:
71:1d:9d:b2:5c:11:c3:49:59:89:42:fa:1c:b0:22:cb:8a:a9:
d6:81:07:60:c9:b4:fd:b0:1b:70:d8:c2:4f:48:c1:f2:e6:6e:
64:62:08:a8:19:c0:19:5c:f4:2d:24:3e:c2:ec:72:c2:28:37:
8b:08:52:3c:53:80:ec:15:2b:e4:b3:71:31:38:c2:8f:aa:00:
37:eb:dd:ea:b9:48:28:75:3c:01:8e:36:30:d8:6f:bf:00:37:
39:80:7d:aa:0e:ea:87:d9:92:3a:fb:8f:d0:ac:8a:20:07:cf:
9f:88:32:cc:ab:2b:36:fe:11:2c:21:2b:59:5e:76:e4:90:93:
54:04:15:32:2d:f7:ef:46:d2:e9:6e:7c:72:b4:f5:df:a8:fe:
9c:3a:b4:24:e7:e4:a9:53:42:52:8d:e1:9d:97:11:2d:b5:b5:
db:fc:91:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:21 2024 by rpki-client on console-ams.rpki-client.org