Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF01551207A911EFA6C58A5B017001B1.roa
File: AF01551207A911EFA6C58A5B017001B1.roa (raw, json)
Hash identifier: +fsjAAiCUb0S8cXyNjmvdECwrRwgfynr3wz9NwW2Uvs=
Subject key identifier: 80:0E:9F:FC:7D:50:EE:41:99:EB:1C:3D:D0:79:29:48:FF:1C:88:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B360
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF01551207A911EFA6C58A5B017001B1.roa
Signing time: Wed 01 May 2024 10:58:04 +0000
ROA not before: Wed 01 May 2024 10:58:01 +0000
ROA not after: Sat 11 May 2024 10:58:01 +0000
asID: 136950
IP address blocks: 154.213.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45920 (0xb360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 10:58:01 2024 GMT
Not After : May 11 10:58:01 2024 GMT
Subject: CN=6632203c-ad38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:d5:bb:a5:8e:5f:2f:67:64:1b:b5:f4:e3:
45:37:38:20:f8:95:58:ca:1d:2a:60:64:31:54:3d:
48:72:fd:57:c8:2c:d7:dd:11:5c:5b:f5:d1:a1:fb:
e8:67:57:7c:c3:a9:56:25:53:77:89:ec:3a:d2:78:
67:8f:aa:06:1c:6d:58:01:a7:9a:be:9a:0d:51:2c:
82:83:9f:2e:11:ad:c5:0b:42:68:3e:7d:7c:d0:c7:
79:70:05:ee:d7:36:db:1f:da:fa:ee:a4:cd:42:ba:
c0:e2:72:95:6b:b3:8d:f9:6c:99:09:28:a4:18:52:
fa:d5:1e:78:71:2e:cf:45:21:3e:bf:95:b3:6d:78:
bf:29:aa:1b:42:3b:7a:42:9a:75:2f:ab:3e:65:a8:
41:0d:a9:c6:3c:71:80:5a:6d:5e:89:9c:e9:70:98:
e1:79:72:c2:17:1c:5f:92:8f:5c:8f:1f:7d:75:d1:
39:9a:30:35:81:59:c1:bd:aa:3f:b1:6d:5d:93:25:
7f:43:8d:d5:ad:5b:0b:85:f3:99:88:77:c1:a1:50:
4f:2f:1f:d5:7d:9e:ce:62:21:8f:5f:dc:50:b2:a0:
f0:bc:35:7f:0b:cc:b6:e6:c5:bc:07:f1:37:4d:d5:
2a:a2:fb:a8:bf:ee:80:05:02:f9:48:26:c8:d3:58:
b0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0E:9F:FC:7D:50:EE:41:99:EB:1C:3D:D0:79:29:48:FF:1C:88:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF01551207A911EFA6C58A5B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.29.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:16:34:32:bd:09:b5:3f:83:0d:19:94:b2:f5:88:a5:34:79:
74:1f:4c:e1:bb:22:6d:25:47:50:06:2f:3d:83:ac:ce:05:9b:
7e:0f:b9:04:c8:4e:3b:ed:9a:68:82:ef:84:81:1a:8c:da:d5:
c3:e0:ed:c5:60:ab:42:c8:7a:95:89:90:9d:0b:a3:cb:31:7a:
82:23:33:41:60:9c:38:5f:50:f7:c5:d9:e8:29:fd:ce:b6:13:
10:20:68:ad:04:8a:7e:de:1c:44:98:aa:2b:c4:cb:73:31:d6:
93:1a:d9:53:73:48:68:18:6c:ee:d6:49:bd:a6:8c:de:3a:c8:
19:57:8b:67:fc:f4:6f:aa:bc:2d:78:be:a8:53:ef:1a:47:0a:
66:b7:52:77:73:0b:2b:48:f6:cb:9f:ff:da:44:d1:9b:90:a4:
08:fa:e3:e6:bf:7d:72:d4:82:69:5d:45:b4:76:e2:42:30:47:
5e:49:c8:d5:5b:c5:98:8a:77:c3:0a:b2:27:69:e6:7e:9f:94:
96:7e:4f:5c:a5:cb:8e:09:0a:0b:16:ba:4e:45:05:91:88:50:
05:b2:78:94:da:c0:20:0c:0f:e7:7d:ef:23:6d:47:84:25:24:
3f:83:7e:12:38:23:00:81:07:28:76:df:04:69:5a:39:3f:67:
67:34:0f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:21 2024 by rpki-client on console-ams.rpki-client.org