Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D14E3CFE03A111EF8C45C0FF007001B1.roa
File: D14E3CFE03A111EF8C45C0FF007001B1.roa (raw, json)
Hash identifier: 6OCTNV76keGE7NiYlraey1kdwJ0nAYP86YnY1JbfGOQ=
Subject key identifier: FE:88:AE:95:C8:A2:9E:95:83:42:31:1E:8D:90:7F:68:3F:08:55:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B19E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D14E3CFE03A111EF8C45C0FF007001B1.roa
Signing time: Fri 26 Apr 2024 07:51:41 +0000
ROA not before: Fri 26 Apr 2024 07:51:37 +0000
ROA not after: Thu 09 May 2024 07:51:37 +0000
asID: 44559
IP address blocks: 154.81.62.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45470 (0xb19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 07:51:37 2024 GMT
Not After : May 9 07:51:37 2024 GMT
Subject: CN=662b5d0d-e6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:83:1b:a8:8d:19:92:98:29:60:3c:56:46:
2f:3b:bc:bb:2f:4d:fc:cb:14:22:e8:79:f8:e8:0b:
e1:80:62:c4:64:32:53:ed:74:3a:c3:f4:55:e2:a1:
e1:8a:09:db:87:5b:99:53:a8:c3:46:30:05:da:7c:
9d:7b:04:95:b9:0e:5a:85:39:fe:fc:b3:f1:bd:55:
67:cd:d1:bf:44:66:fe:8d:7b:3e:87:0d:68:f8:21:
28:12:e7:0d:59:c3:39:06:3f:89:af:dd:58:cd:2c:
53:47:bd:28:09:b1:43:d3:d0:1f:82:39:0e:46:19:
be:2b:a6:f1:f9:94:64:44:f3:2a:f5:c3:51:eb:ef:
eb:6e:ec:6c:82:a9:45:9b:b7:0c:7b:59:c6:84:87:
b8:90:dc:58:1f:91:25:1e:54:63:87:08:cb:ca:0d:
c4:55:56:dd:aa:a0:7e:74:4c:ac:b7:b8:a4:9c:1a:
ba:2d:55:75:d1:85:eb:ec:02:a0:8c:39:1b:1d:08:
1c:85:9d:5f:59:3c:f8:1c:46:38:7b:e7:28:2a:2d:
e9:55:49:8b:09:33:17:97:2d:92:e5:3d:74:56:48:
10:85:29:f0:a5:a0:ee:a8:b7:3b:55:91:e2:bb:d0:
da:de:9c:44:5a:b9:30:28:88:07:39:90:1d:74:14:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:88:AE:95:C8:A2:9E:95:83:42:31:1E:8D:90:7F:68:3F:08:55:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D14E3CFE03A111EF8C45C0FF007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.62.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:a3:13:71:b8:29:c8:be:49:11:a1:47:ff:b5:4c:aa:8d:fe:
25:2c:a4:42:60:d7:3c:65:01:bb:e4:f0:85:1b:59:2e:29:61:
7d:22:13:ba:14:73:52:4b:a1:b0:d5:f8:40:11:cd:16:6e:78:
d2:8d:d2:e3:ea:bc:e4:2f:6e:1c:ab:6e:21:d9:69:4a:67:c3:
61:ed:1b:bf:dc:53:8a:b4:f8:07:c4:af:e8:29:98:ed:bf:8d:
46:f3:a4:3b:0b:8e:9d:22:81:1c:e2:7b:b8:f3:1f:d7:1f:d7:
e2:6a:48:8d:a1:25:fc:9b:9d:9a:d0:1e:bf:05:1b:62:20:19:
df:6b:63:4f:d1:7b:f5:8f:3f:34:10:4f:43:2a:78:16:26:5d:
ff:3c:e6:60:fd:e1:23:b3:1b:3b:57:07:bd:4d:86:51:9d:c9:
a7:bb:0f:5d:46:33:0b:69:aa:89:fc:17:a7:0b:5e:9d:31:58:
c6:13:bd:dd:60:5a:02:25:44:6d:39:58:8e:d6:b9:6e:41:2c:
6b:40:49:db:aa:fa:f0:e9:e3:37:d5:9c:83:59:53:fa:51:ad:
ec:ef:e2:5d:14:e9:f0:f0:3b:34:24:05:78:28:09:53:c7:c4:
53:62:fb:8c:0c:2e:8e:d4:ac:97:7c:a4:33:d3:30:29:21:8e:
5f:2b:63:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:48:02 2024 by rpki-client on console-fra.rpki-client.org