Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B15F5836014B11EF84BF5CF3007001B1.roa
File: B15F5836014B11EF84BF5CF3007001B1.roa (raw, json)
Hash identifier: wTHmkpB+lnqLnztrEnXl/VpIBqI4pNT91DzUNFpfdb0=
Subject key identifier: 88:2A:28:0A:06:57:1C:9A:10:18:87:2D:68:43:D0:DE:41:23:F3:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AF0B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B15F5836014B11EF84BF5CF3007001B1.roa
Signing time: Tue 23 Apr 2024 08:30:08 +0000
ROA not before: Tue 23 Apr 2024 08:30:05 +0000
ROA not after: Sun 26 May 2024 08:30:05 +0000
asID: 395886
IP address blocks: 154.201.92.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44811 (0xaf0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 08:30:05 2024 GMT
Not After : May 26 08:30:05 2024 GMT
Subject: CN=66277190-fce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:61:fd:6a:f5:e3:a5:ac:1f:5d:76:a1:7a:
e2:bc:da:85:78:42:f9:a1:db:ab:0d:ef:8e:5d:fa:
1b:5d:a8:99:56:4f:71:a6:1b:8a:c1:0e:ed:67:48:
7f:50:34:ac:26:c8:8e:02:d6:b0:29:f0:df:d9:63:
86:7d:40:21:4f:f3:d3:45:84:98:1c:84:96:1e:04:
53:0f:84:40:87:ee:74:15:c8:25:57:53:5f:86:f0:
9c:08:88:56:b0:d4:01:67:8c:74:93:43:2f:a9:52:
4b:95:48:61:f0:b8:89:ae:f5:f7:01:59:b4:84:bc:
5f:92:e2:b6:db:2d:39:2d:73:fa:d4:1b:56:de:d3:
92:41:e8:40:2f:2d:95:2d:01:8b:9e:13:12:0e:54:
f0:ce:79:91:a6:73:83:37:97:97:26:23:87:f3:59:
35:86:43:ff:7a:2d:e5:90:99:a6:0a:80:68:e3:59:
6a:04:27:dc:66:8c:a3:1f:c1:18:68:18:57:8b:bc:
a3:83:a5:d2:91:e0:8d:cf:43:fb:bd:1c:8d:d2:79:
b6:1d:e5:c9:68:e2:41:88:60:ea:94:85:99:95:08:
62:34:37:5d:ec:f5:4e:67:0f:66:cf:20:4e:13:a8:
85:b8:f7:36:6c:11:a2:bb:59:d6:4a:91:3e:c3:d8:
d0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2A:28:0A:06:57:1C:9A:10:18:87:2D:68:43:D0:DE:41:23:F3:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B15F5836014B11EF84BF5CF3007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.92.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:c7:76:c8:72:ae:e2:8b:72:54:40:34:fa:5a:f3:df:33:ce:
57:e4:2b:14:d4:dc:e8:a7:46:1c:dc:19:76:f3:57:ce:be:35:
49:06:a5:3a:1a:b2:a4:67:ed:4b:67:c2:ce:76:2b:0f:ad:41:
8a:e5:64:1b:0a:f2:36:76:59:f4:91:ec:8d:e7:50:4a:25:27:
dd:de:2c:97:2b:5d:f7:3a:42:00:4a:d5:b3:10:49:2c:b0:a3:
73:b4:33:ab:8e:d3:64:e0:b3:78:54:ce:e1:33:c1:4e:fc:f4:
2c:5f:c1:ac:88:1f:55:84:37:ce:28:dd:ef:45:4b:7a:a5:9f:
90:59:78:b6:5f:06:74:3c:dd:5e:62:8c:bb:79:a5:c0:2b:6c:
49:f4:5e:3a:ba:50:be:9a:7f:9f:7d:da:4c:a0:20:cb:74:a1:
e3:94:67:03:6b:d1:35:40:a7:1c:66:26:4d:9e:7a:59:a7:e8:
c1:4c:16:96:6f:84:81:d6:40:ca:39:8a:ce:1c:48:0c:89:53:
01:ca:ba:ba:ae:0b:30:fd:39:99:1b:56:90:ac:3f:05:bc:33:
31:94:87:58:67:8b:7c:c2:60:38:e4:1e:de:a4:52:25:ce:3c:
e3:b6:f8:92:3f:86:3b:15:07:6a:ab:12:dc:28:e1:20:8f:ee:
2c:33:a9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 02:19:00 2024 by rpki-client on console-fra.rpki-client.org