Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B26A3E2E060C11EFB562B737017001B1.roa
File: B26A3E2E060C11EFB562B737017001B1.roa (raw, json)
Hash identifier: c6M1t/pTFBtF66IUOXNxec5L+hXUYSy6gdldVWbUXN0=
Subject key identifier: E3:8C:2B:A2:65:A6:82:1E:D2:6E:DA:58:B9:41:A2:1B:50:B6:3F:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B204
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B26A3E2E060C11EFB562B737017001B1.roa
Signing time: Mon 29 Apr 2024 09:41:47 +0000
ROA not before: Mon 29 Apr 2024 09:41:44 +0000
ROA not after: Wed 15 May 2024 09:41:44 +0000
asID: 5065
IP address blocks: 154.222.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45572 (0xb204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 09:41:44 2024 GMT
Not After : May 15 09:41:44 2024 GMT
Subject: CN=662f6b5b-de51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a4:e1:09:dd:11:1a:c6:8e:b0:81:71:7c:e4:
3f:fd:03:16:b8:30:5a:6b:48:62:00:6f:94:2a:b9:
24:37:d5:00:d0:8a:90:09:f3:43:48:bf:bc:89:6b:
98:76:66:0c:3d:8a:7e:86:aa:16:9c:c7:e6:fd:1f:
49:3e:08:ca:36:65:9d:d8:72:a6:bb:69:d3:f6:15:
65:4d:18:f3:95:65:94:75:52:3d:8d:d7:7e:5c:36:
9d:f2:3c:3a:b1:cd:7b:09:10:c0:86:4f:dd:85:6d:
5a:d6:87:06:8c:f6:5e:c3:2a:67:5a:90:8d:a2:5e:
3c:5a:f7:6a:f8:36:f9:5d:7f:c7:a6:f3:18:1d:48:
cc:81:4d:a4:c8:31:e5:ba:f1:c8:35:9a:21:e9:7a:
89:25:e7:e4:c9:93:e1:5c:2e:8d:54:18:24:3f:2f:
e3:63:90:79:49:53:7d:75:cb:68:68:ae:6b:67:50:
c8:3b:6e:8a:5a:da:cf:24:20:7d:7a:01:19:56:e5:
ac:aa:49:6f:5e:c5:c2:69:4b:52:7a:6c:65:77:53:
bd:b0:9e:38:76:af:fb:0b:98:ca:0e:3e:af:69:a2:
9e:71:8b:e1:36:ca:9b:2b:f0:c1:b0:38:79:4a:e7:
ee:7d:90:4c:17:98:78:ea:d7:e6:bb:10:81:eb:21:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8C:2B:A2:65:A6:82:1E:D2:6E:DA:58:B9:41:A2:1B:50:B6:3F:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B26A3E2E060C11EFB562B737017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.8.0/22
Signature Algorithm: sha256WithRSAEncryption
16:94:fe:0c:93:c0:c1:34:2a:46:0d:cf:3a:e5:de:79:67:fd:
41:f8:ce:00:14:f1:90:4e:d5:82:fb:1f:ba:46:db:16:5d:f1:
55:25:58:13:4d:04:5a:3b:56:c2:03:c4:01:8c:31:20:eb:cd:
f9:6f:00:1a:ba:41:b7:8c:1b:10:98:5d:3e:5c:28:e7:37:0e:
42:b9:cd:fa:79:e7:c7:d3:f4:8d:58:0c:1d:5f:07:96:85:90:
f9:fa:b9:3a:81:dc:c4:34:1b:98:6e:69:bf:f6:5e:d2:3a:9a:
0a:84:19:7b:49:77:38:17:9b:38:53:a7:b0:4c:60:59:b6:7d:
07:ef:a8:4d:a4:8c:03:a5:97:8d:38:c1:af:12:03:74:8e:e4:
45:c8:b4:a4:d6:79:13:f6:ba:50:f6:f9:26:d3:fe:db:63:33:
48:c0:da:94:51:26:59:8c:c2:b3:71:47:57:66:7a:f2:d8:f8:
b4:11:87:42:b5:f7:5b:be:d0:7a:2b:2e:3a:0f:9a:6b:5e:f1:
ed:f8:d6:46:a5:fd:ac:0e:b6:c1:c2:be:2e:a8:47:0f:82:9c:
55:5d:3d:22:54:ee:10:32:75:92:b7:5f:ba:be:99:b7:79:55:
d1:aa:11:34:f8:e3:17:3e:cd:8d:70:64:5e:50:f2:06:e5:25:
6d:4e:5f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 02:12:10 2024 by rpki-client on console-ams.rpki-client.org