Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEEC0622294A11EF9526991B7DDC24C2.roa
File: AEEC0622294A11EF9526991B7DDC24C2.roa (raw, json)
Hash identifier: iAo3GbSZkrwg39JfmIYrZnHpikFthLEnw6bFulBjyqU=
Subject key identifier: EF:E6:2C:16:43:F4:BE:70:EB:61:44:B9:EA:CF:9B:2F:9D:CC:76:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C204
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEEC0622294A11EF9526991B7DDC24C2.roa
Signing time: Thu 13 Jun 2024 06:03:41 +0000
ROA not before: Thu 13 Jun 2024 06:03:38 +0000
ROA not after: Fri 21 Jun 2024 06:03:38 +0000
asID: 44559
IP address blocks: 154.218.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49668 (0xc204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 06:03:38 2024 GMT
Not After : Jun 21 06:03:38 2024 GMT
Subject: CN=666a8bbd-cc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:a5:e9:0c:d8:68:dd:34:8d:b9:3a:2f:32:
20:02:11:c1:09:29:b0:b0:89:b1:5e:df:85:24:79:
5a:ab:f5:cf:58:7f:9e:ca:d3:a4:e1:e2:90:0f:d5:
45:a8:ab:c2:d7:8d:48:10:35:68:79:b4:5c:2d:5b:
6c:73:0a:c9:b5:f3:28:ac:77:65:cd:b1:a8:ce:ad:
b2:79:fc:ef:0c:6d:b7:79:2d:9b:3d:9f:13:6e:46:
82:22:b8:40:99:b7:92:54:b8:09:8a:92:b6:26:cf:
cb:27:e6:a3:78:ce:a3:d0:72:57:9b:c4:fc:75:49:
75:a8:d2:53:fc:a7:6b:41:78:59:40:50:70:48:12:
04:ae:9b:94:ad:92:a0:15:d5:8c:4b:5b:7a:04:39:
5f:b7:76:6b:8d:f0:ca:26:28:14:dc:7c:69:25:9f:
cd:7f:cd:cb:62:a3:a7:91:8d:5f:b9:32:63:8a:3b:
f6:11:11:45:7c:23:22:a1:63:f5:95:9e:c6:02:34:
28:13:58:73:8c:87:8d:44:d2:03:0a:ff:97:5f:13:
9d:ca:26:0b:ea:b6:b5:21:e3:98:5c:2a:c0:4a:92:
6e:33:04:bc:db:75:87:bc:3e:86:8e:8b:12:14:a6:
d1:53:9e:fc:a7:00:61:96:0b:e0:68:d9:cb:9c:9f:
43:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E6:2C:16:43:F4:BE:70:EB:61:44:B9:EA:CF:9B:2F:9D:CC:76:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEEC0622294A11EF9526991B7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.32.0/19
Signature Algorithm: sha256WithRSAEncryption
44:34:ad:24:da:23:7e:32:ac:1d:61:8b:01:77:52:e3:ee:75:
4c:a9:df:04:26:30:89:0e:3b:fa:6c:bc:1e:57:d1:a2:19:0c:
a8:2a:97:ea:b5:99:ba:34:f8:33:5e:fd:8b:75:78:08:c7:06:
d9:00:5a:ca:98:c9:09:68:18:31:84:a3:cb:74:4c:f8:bf:dc:
21:bd:4b:27:cf:9c:d8:9d:25:6e:37:8b:0f:8e:4a:1c:da:0e:
04:c9:8e:36:9c:82:f1:7e:ca:9f:77:4b:17:a8:23:6a:dc:fd:
d9:11:4d:3d:02:3e:16:2b:75:a1:2e:35:dc:26:c6:09:6f:3d:
9a:24:9b:88:bc:34:6c:a7:64:db:6e:b6:1e:b8:e4:51:2b:a5:
82:ad:44:97:50:71:7b:39:db:64:23:2a:fc:d3:b3:53:fa:86:
8d:58:ae:88:c0:cd:fb:5c:c4:fa:bd:7c:0a:7f:43:f8:33:2f:
d9:d5:57:69:13:d8:11:dd:98:23:cc:84:e0:e5:fb:27:8f:12:
cd:87:1e:8c:8e:48:d5:35:46:0b:01:08:5c:b6:c9:6c:53:2d:
bb:5e:65:fa:99:35:d6:31:36:70:de:8f:fb:8c:ef:ab:04:85:
20:f0:bc:5c:6a:bd:21:91:76:6f:9f:1a:88:71:fb:ee:d0:7f:
83:41:00:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 03:57:31 2024 by rpki-client on console-ams.rpki-client.org