Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB7C938607A711EFA5BFDC4A017001B1.roa
File: AB7C938607A711EFA5BFDC4A017001B1.roa (raw, json)
Hash identifier: DzAjlT+CSzHW83kMPRfRTudfpRT4L+vZ4+JTS8H9I40=
Subject key identifier: 43:1E:25:24:16:0E:42:22:AB:0C:46:D0:53:91:25:E8:C0:CC:15:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B348
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB7C938607A711EFA5BFDC4A017001B1.roa
Signing time: Wed 01 May 2024 10:43:39 +0000
ROA not before: Wed 01 May 2024 10:43:36 +0000
ROA not after: Sat 11 May 2024 10:43:36 +0000
asID: 136950
IP address blocks: 154.213.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45896 (0xb348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 10:43:36 2024 GMT
Not After : May 11 10:43:36 2024 GMT
Subject: CN=66321cdb-0fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:44:cf:42:e5:18:f8:cf:0a:e6:9c:8c:65:96:
46:92:39:1f:98:90:c0:6d:85:08:e7:d6:8f:34:b0:
88:01:08:9e:67:71:ca:85:39:66:0c:2e:ad:3b:33:
f0:96:62:41:ed:82:c5:0d:93:d5:8c:9a:55:4b:39:
6f:0b:2c:f2:c4:44:4d:20:4f:f8:9c:ad:5c:22:e5:
18:79:f1:21:08:aa:bb:9d:5d:2a:74:27:41:8a:48:
f3:a0:33:1f:d1:49:b9:f0:32:3a:4d:c4:99:f8:04:
2e:17:86:4c:5f:4c:14:61:3a:6d:1f:89:4d:45:03:
b7:cd:65:9c:64:60:c4:2c:ea:1d:12:01:05:6e:5e:
8e:64:c2:9b:cf:03:2b:6d:7c:ce:ad:c5:5c:97:d6:
1d:ac:b5:92:89:90:a3:a3:ff:81:d8:4f:a8:3e:ff:
1d:12:ff:3d:ee:58:2d:74:0d:fd:d6:18:1a:d0:3e:
a7:b9:09:b7:6e:41:a3:c6:78:cd:d4:e1:42:25:73:
80:5b:f8:49:b0:7b:f2:8c:66:80:07:7b:c9:37:9b:
32:c5:55:40:67:52:06:66:c5:ef:d5:6a:2c:cc:d7:
c5:54:86:60:28:f1:78:24:fd:a1:bf:73:fc:ae:d2:
c2:ba:e3:dd:85:e7:82:41:38:eb:21:01:c9:e2:47:
03:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1E:25:24:16:0E:42:22:AB:0C:46:D0:53:91:25:E8:C0:CC:15:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB7C938607A711EFA5BFDC4A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.24.0/24
Signature Algorithm: sha256WithRSAEncryption
35:8e:e7:bc:05:e1:b5:60:87:22:a6:f0:9e:1a:1d:4c:8f:cc:
71:f0:b1:40:ca:ec:58:1b:94:d9:03:9f:23:60:63:a9:28:46:
5b:28:4c:ed:5b:ca:d6:70:08:a9:09:12:78:8e:90:27:62:03:
28:50:0e:ab:94:d4:e5:48:1c:c0:bf:78:4c:73:59:16:ed:8a:
d1:5f:0d:b8:07:bc:7e:65:83:88:68:b8:c3:64:6f:63:d3:56:
19:b3:15:d6:ba:62:f8:8e:33:fc:6c:df:33:60:d3:bc:8c:75:
98:9d:a8:1d:cf:bd:0c:ff:93:93:54:3c:07:f8:bd:85:9c:12:
52:99:5b:fd:a0:70:cd:ad:88:4b:e9:da:96:d6:58:f3:88:31:
c0:10:82:4e:43:f1:8b:6e:50:21:87:a2:aa:d0:f3:39:8d:cd:
15:b9:fa:c7:77:3e:38:ae:64:76:94:63:25:6b:0f:3c:99:0a:
a5:20:73:1d:08:83:86:4d:3b:ee:2b:f7:0b:56:ec:18:dd:d8:
f7:a8:d1:74:67:8c:27:6a:74:5a:13:fe:ba:90:40:12:8c:e1:
44:dd:31:a6:a6:e7:f9:99:2b:8f:f4:06:72:f7:f8:87:91:03:
71:bc:c5:6a:13:ad:f0:7e:bc:7d:92:45:da:86:80:64:89:9a:
6d:9d:f2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:48 2024 by rpki-client on console-fra.rpki-client.org