Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AF0EFC80CEB11EF82A6052C017001B1.roa
File: 9AF0EFC80CEB11EF82A6052C017001B1.roa (raw, json)
Hash identifier: 6I2lBXuVsX0HKenDfROJgNw61DHG8zPZjvZ3lK/r4t4=
Subject key identifier: 29:57:80:C8:DB:10:69:FB:26:D1:8F:AA:13:AD:85:57:5F:0A:03:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B582
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AF0EFC80CEB11EF82A6052C017001B1.roa
Signing time: Wed 08 May 2024 03:32:33 +0000
ROA not before: Wed 08 May 2024 03:32:30 +0000
ROA not after: Sat 18 May 2024 03:32:30 +0000
asID: 39600
IP address blocks: 154.202.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46466 (0xb582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 03:32:30 2024 GMT
Not After : May 18 03:32:30 2024 GMT
Subject: CN=663af251-3700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:03:32:36:b7:8f:3e:ad:f2:85:56:7b:92:
3a:35:c1:7f:77:01:cd:31:7a:0c:11:6c:d1:5d:c2:
df:92:cc:55:65:82:ca:84:8e:69:67:fd:02:85:80:
b4:9c:59:87:37:11:2f:9e:b2:44:dd:0b:e5:3a:0e:
91:da:58:57:47:2f:8b:5f:44:a1:41:73:8c:f8:54:
e2:ad:8a:0d:00:e8:9a:89:b6:b7:ca:d0:ba:3f:82:
5b:7d:cc:1b:ed:98:14:03:97:ca:c3:c1:66:2e:0c:
26:6e:54:c1:f6:4c:1e:48:e0:3b:8f:ae:0c:98:f1:
60:b0:62:ba:87:8d:32:e6:52:19:19:c2:c3:39:b2:
59:13:c9:e6:02:e9:dc:65:7b:4d:54:47:65:3e:d2:
6e:fb:72:6e:1e:8f:e8:f3:e6:49:09:29:99:58:dd:
53:04:b7:46:b6:12:c3:65:ee:fd:a2:e9:5d:d5:f0:
31:ce:3c:49:a3:f2:57:f2:a4:87:23:09:43:f0:4f:
01:4a:e5:f9:e6:87:10:c2:37:74:b0:2b:dc:e2:f7:
88:d8:f1:ed:3a:41:28:77:ff:e0:49:7b:b4:f8:31:
f7:00:a1:d7:64:ac:f0:73:39:e7:47:dc:34:53:2c:
8d:6e:77:52:7b:5a:cf:88:76:28:67:d3:e2:a1:ad:
2f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:57:80:C8:DB:10:69:FB:26:D1:8F:AA:13:AD:85:57:5F:0A:03:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AF0EFC80CEB11EF82A6052C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.16.0/21
Signature Algorithm: sha256WithRSAEncryption
d2:4e:0c:7a:3a:85:87:77:03:66:db:98:3a:b6:eb:e9:53:fc:
98:d6:33:63:a5:54:4d:a1:97:cf:99:e4:a4:de:d4:a5:85:bc:
ac:e0:97:b4:04:26:3c:47:b4:29:fd:7d:84:26:40:4b:6b:8a:
79:f4:89:ed:56:57:3c:25:4a:89:91:34:6e:0a:2f:ca:ff:19:
55:bf:1d:3c:c9:18:fd:79:90:e1:2b:e6:dc:da:26:94:c6:78:
9f:a3:03:dc:ce:6f:1c:5d:46:bf:c4:d3:2c:38:0b:1c:73:51:
6d:c5:0d:ce:bf:7c:d6:a3:c2:83:22:f7:a8:c1:84:7c:17:6f:
3c:6d:fe:26:2a:10:09:af:08:33:20:06:5d:bd:d4:a9:2c:55:
2b:3f:01:9f:92:7e:88:69:85:a1:d4:96:04:0c:88:72:ad:f1:
8c:2b:2e:db:8a:fd:1f:cf:b4:fe:00:0b:16:33:44:29:bd:e5:
b1:d6:ba:54:ac:7c:bf:39:9d:fa:26:40:23:b8:7b:78:d0:ee:
97:b1:10:dc:9a:26:be:7c:76:88:7b:b1:60:9a:b5:47:04:f0:
73:4b:7b:95:9e:45:22:19:cc:b2:28:cf:c1:9d:fb:0b:d2:28:
06:d6:48:71:be:3a:e5:9c:e4:ff:3d:4b:f0:93:3e:4f:2c:e2:
63:ed:db:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:03:34 2024 by rpki-client on console-fra.rpki-client.org