Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C433D58427C211EFA9EB092D7DDC24C2.roa
File: C433D58427C211EFA9EB092D7DDC24C2.roa (raw, json)
Hash identifier: QYIm6cWIPp8Ef7g5L6aHDufT1BEv2kjRuXrBrAGXT8I=
Subject key identifier: DC:0A:89:5E:F7:88:09:12:DA:DF:90:3D:69:12:82:8C:9A:9B:AB:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C180
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C433D58427C211EFA9EB092D7DDC24C2.roa
Signing time: Tue 11 Jun 2024 07:18:14 +0000
ROA not before: Tue 11 Jun 2024 07:18:11 +0000
ROA not after: Thu 20 Jun 2024 07:18:11 +0000
asID: 139811
IP address blocks: 154.205.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49536 (0xc180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 11 07:18:11 2024 GMT
Not After : Jun 20 07:18:11 2024 GMT
Subject: CN=6667fa36-eae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4b:97:e1:3d:00:80:54:83:b2:6e:66:21:ba:
be:7d:17:fe:39:cf:15:db:14:e9:80:e6:a6:b5:29:
91:27:2c:31:e4:47:97:70:ff:0e:2e:13:2b:c0:7a:
c5:65:68:b9:dc:50:f6:7a:8b:8c:30:2f:d4:ac:61:
48:b4:33:f2:ae:14:5f:04:4b:3c:c2:32:1b:83:a8:
31:54:13:90:a0:5d:02:b2:5b:be:d7:bc:10:e6:de:
d3:a7:23:c9:88:a6:51:fc:fb:7f:a9:7f:55:85:f8:
34:f9:12:89:68:b9:7e:14:4f:6e:72:b2:11:12:03:
cc:9e:1d:ce:b2:47:d6:88:b5:61:30:44:9c:27:be:
75:ec:48:38:c3:c9:e7:e7:94:5e:79:58:47:d0:2b:
8f:ad:fe:18:22:94:61:1a:c4:f6:75:eb:f4:99:b1:
8b:3f:5e:e9:45:09:41:45:29:77:fe:0c:a9:d6:7a:
5c:34:04:f8:8a:52:8d:5a:fa:e8:1a:2a:9b:40:e5:
3a:d3:e3:63:67:d1:91:95:fb:3b:7a:c1:f8:9a:17:
81:9f:d2:1c:2b:e9:d3:ae:24:d0:e3:68:bf:35:67:
09:1a:fd:26:ea:b6:7e:5d:c2:85:fb:b6:41:87:69:
85:87:91:dd:2d:c8:9f:90:0a:3d:54:b5:26:3b:37:
91:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0A:89:5E:F7:88:09:12:DA:DF:90:3D:69:12:82:8C:9A:9B:AB:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C433D58427C211EFA9EB092D7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.5.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:17:7b:0f:73:02:c1:60:98:46:10:15:24:d4:e2:b4:c0:7c:
ba:db:4f:43:cb:fa:63:7c:18:b0:b2:5d:06:2c:75:ba:d4:ff:
30:f1:bd:d7:57:1b:a8:5c:f3:5e:c3:68:57:a6:df:4b:13:7d:
1f:e9:f2:4d:8b:2d:f2:8d:c8:a0:92:36:8b:8a:3c:d6:a4:f4:
a2:3d:a6:46:42:6c:58:2c:97:cb:cf:a7:d3:f6:ea:83:ad:c8:
b8:35:8f:21:af:d3:91:b3:c0:59:86:3b:71:97:50:ee:f8:aa:
ad:c9:13:44:83:f5:dc:c7:16:32:d1:09:87:2b:cd:9d:0c:b6:
9e:be:e0:fb:c7:94:94:99:dd:8f:6a:8e:c2:c5:c3:c2:b1:83:
76:ce:8a:b3:95:c2:af:32:86:11:e6:15:47:2d:54:f5:32:84:
f1:3a:21:03:5f:30:d2:85:ee:41:55:5c:21:db:8d:2c:5f:74:
ac:8e:f4:95:3d:77:e1:20:d2:37:9c:23:01:6b:a8:37:94:9e:
4f:e4:d5:ef:38:fe:01:2c:23:85:4c:53:14:df:e2:38:0e:c3:
78:4b:54:c1:a7:92:f7:87:73:0e:6e:53:62:45:af:70:fd:b0:
5f:86:4b:ec:7b:5a:8e:71:bd:f5:3e:43:58:b1:5a:7c:ba:c0:
59:be:f1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:21:00 2024 by rpki-client on console-fra.rpki-client.org