Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9E5C0B20DB211EF8754220A017001B1.roa
File: B9E5C0B20DB211EF8754220A017001B1.roa (raw, json)
Hash identifier: cg3dM4GvBu1bJ1SzBPm+SVGalhv9LzsBg56eVXjyb+I=
Subject key identifier: C9:BB:8F:32:E3:5E:D6:C8:70:EC:AC:1D:87:5B:DF:DD:2C:FF:9D:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B5AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9E5C0B20DB211EF8754220A017001B1.roa
Signing time: Thu 09 May 2024 03:17:55 +0000
ROA not before: Thu 09 May 2024 03:17:51 +0000
ROA not after: Sat 18 May 2024 03:17:51 +0000
asID: 44559
IP address blocks: 154.223.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46509 (0xb5ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 03:17:51 2024 GMT
Not After : May 18 03:17:51 2024 GMT
Subject: CN=663c4062-4065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:00:bb:a6:60:dc:aa:56:11:08:f9:f9:ea:dd:
7d:36:cf:d3:8e:7e:d1:d6:9f:74:88:97:9e:fb:6d:
1a:50:51:6e:cd:fa:48:3b:fc:75:cf:b3:c9:75:18:
1e:c3:dc:c9:db:7b:b8:d9:32:7a:b0:6b:2d:cd:33:
c1:21:f8:6f:40:ce:04:5e:ac:27:b5:da:6b:60:01:
81:5a:48:b4:82:32:ee:67:e0:16:b5:31:79:cc:26:
f4:0e:44:45:1e:f7:80:71:5c:79:e3:37:2d:2c:d5:
40:4c:cf:ef:d9:9b:8c:b7:31:66:1f:0e:76:92:f7:
6d:7a:d2:86:fe:f7:c8:4d:61:58:7a:0e:0c:3f:80:
85:5e:c9:a9:67:3e:67:ae:2d:fa:51:9b:74:cf:c2:
5c:f1:f0:d0:61:4a:69:2c:47:53:b3:ed:c9:d9:de:
f3:bd:1d:26:67:3f:3f:3e:c0:e6:97:50:db:47:22:
06:90:a5:a8:20:64:78:6d:f1:ec:27:c2:2a:a6:6c:
f6:67:19:94:62:25:c5:fc:26:dd:17:86:eb:5d:10:
a6:04:b1:53:1f:1f:06:fb:e4:98:b0:2c:87:c2:17:
76:0a:a1:29:f0:81:f2:10:cd:ee:94:4e:e5:c6:08:
e4:35:4a:07:1c:a7:f3:98:3f:11:61:24:0f:90:bc:
82:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BB:8F:32:E3:5E:D6:C8:70:EC:AC:1D:87:5B:DF:DD:2C:FF:9D:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9E5C0B20DB211EF8754220A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.192.0/18
Signature Algorithm: sha256WithRSAEncryption
8f:27:e7:ba:f1:c7:1a:59:30:ee:82:8f:33:f1:4d:49:d6:20:
18:82:13:6e:aa:d0:4e:56:02:09:d1:52:4e:2e:fb:2a:01:49:
24:9d:2b:b8:71:a9:0e:e5:0e:64:fb:ac:b8:f0:41:68:1e:7a:
ee:10:14:c7:25:93:76:4e:39:95:fa:26:f3:38:95:9d:2d:96:
30:b0:ea:af:e0:b2:e5:e6:c3:f5:76:58:39:29:a7:64:d5:e7:
9e:3f:a6:f6:fc:38:f5:79:f6:2d:d1:5a:d0:24:09:7f:d7:b6:
cb:56:fd:e5:ba:79:10:c4:5d:0b:85:92:d9:5a:5c:50:1e:b2:
87:db:79:b5:aa:54:9f:09:d8:1a:32:d7:1f:17:d8:7d:58:60:
3a:dd:af:8f:2f:da:da:2f:d7:3e:32:d2:05:b5:e9:0c:51:c8:
ba:64:3e:06:50:ca:7e:7c:3d:88:d4:ac:6e:55:b7:b7:8b:78:
8c:82:c5:f2:5e:94:73:3b:5c:13:c1:ff:92:4c:fb:1e:32:c8:
f5:92:da:e8:25:e9:33:e1:11:9f:26:f1:c9:47:9b:42:87:3a:
a2:e1:38:f5:1e:f2:4a:1f:10:96:16:9c:80:29:6e:e8:85:ff:
7a:92:1b:f0:e1:bc:08:6a:bd:e4:ad:2a:42:e3:cb:ac:02:b2:
3c:3f:7a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:03:34 2024 by rpki-client on console-fra.rpki-client.org