Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB9ACB460B7811EF86658F5C017001B1.roa
File: BB9ACB460B7811EF86658F5C017001B1.roa (raw, json)
Hash identifier: WmkkTvNh6bv8fjOH1GkZzo1ovZRNP9yoamdgEqe4Br0=
Subject key identifier: DD:8B:03:30:32:F0:0D:71:54:E5:A2:E8:26:AA:4E:A8:1E:75:1A:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B528
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB9ACB460B7811EF86658F5C017001B1.roa
Signing time: Mon 06 May 2024 07:17:44 +0000
ROA not before: Mon 06 May 2024 07:17:41 +0000
ROA not after: Thu 16 May 2024 07:17:41 +0000
asID: 141883
IP address blocks: 154.216.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46376 (0xb528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 07:17:41 2024 GMT
Not After : May 16 07:17:41 2024 GMT
Subject: CN=66388418-b426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:3a:25:c5:83:9d:ed:85:2c:8f:1f:9f:80:
01:4d:fe:8b:6b:c3:99:f6:7a:75:e1:25:9f:b4:da:
31:37:70:0b:9c:9f:ca:32:8e:cb:64:ef:fb:b4:c7:
a0:51:57:02:35:8e:65:5a:40:d4:ab:9a:5f:c3:ca:
78:f7:94:ea:4a:9c:a0:1f:6d:38:e8:57:e4:a1:f7:
fd:f5:2a:82:96:b7:a6:3d:97:e8:7b:4a:33:b0:07:
df:be:cf:80:9a:f4:f7:2f:4d:6f:e9:b9:a4:79:80:
8a:f8:9b:95:8d:5a:34:36:23:60:d4:4a:8e:89:77:
9a:97:0a:31:72:62:9d:17:36:5d:c2:17:3d:d3:d2:
4d:29:e2:e7:4e:4d:0a:37:3a:8a:8d:60:9d:9d:51:
59:8d:63:a7:bf:34:99:6d:55:6c:10:34:6e:b7:cc:
5f:91:12:33:71:5d:58:cf:3c:84:6f:1c:d2:7a:f2:
1c:7f:43:f5:89:ca:49:82:4a:00:94:14:18:58:99:
56:ce:46:3c:ec:9f:cb:2d:09:ba:4b:4e:50:95:fa:
5a:3a:6b:c4:7d:05:5a:75:3c:b1:fa:fe:c4:d4:72:
9c:6f:e5:31:69:5b:98:8e:41:58:24:27:1f:b2:87:
04:e2:f1:10:83:01:93:0a:b4:3d:ec:13:5a:d4:80:
93:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8B:03:30:32:F0:0D:71:54:E5:A2:E8:26:AA:4E:A8:1E:75:1A:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB9ACB460B7811EF86658F5C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.128.0/18
Signature Algorithm: sha256WithRSAEncryption
4f:61:9d:66:91:f6:db:6d:88:4a:fe:b6:53:7b:70:0e:b8:bb:
50:13:4b:28:bb:b4:c2:e3:52:c7:6c:eb:4b:3f:a8:4a:ea:54:
e3:d8:99:7b:07:54:30:f6:55:13:dd:5a:7f:a9:fd:93:92:78:
6a:2c:8e:93:17:54:4d:8f:31:c2:c8:1f:b9:53:12:ab:5e:18:
d7:22:9c:6c:62:1a:f2:47:2a:81:89:0e:54:3a:c1:f4:3a:83:
b8:2e:3d:33:3e:22:d4:96:61:89:cb:be:b6:b4:6b:e2:dd:a2:
1c:8d:9b:a3:ba:a3:e3:e8:62:0c:dd:6c:23:a7:d5:66:09:81:
e2:10:e6:bc:2b:7b:66:1c:fd:0d:21:9b:e4:1e:f8:82:39:a0:
be:56:58:66:c3:8d:fb:29:ce:8c:31:f7:32:bf:d0:71:95:f2:
60:0b:40:30:1a:df:f7:f8:e8:de:9e:74:f1:21:a5:b7:1e:0c:
d3:9f:0b:77:4c:f6:64:b0:39:2e:19:86:39:44:80:cd:65:0d:
8b:6f:22:5d:c4:43:b7:7f:fc:c2:b0:b7:1d:f8:5b:a0:de:3a:
e5:65:e3:43:9c:49:58:81:a2:23:4b:e5:2b:74:f3:f0:0b:8f:
10:34:82:b4:47:60:ba:f9:9f:c7:12:21:47:7a:01:6d:3b:3b:
00:de:10:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:04:04 2024 by rpki-client on console-fra.rpki-client.org