Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4B88020295811EF8DF658FB7CDC24C2.roa
File: D4B88020295811EF8DF658FB7CDC24C2.roa (raw, json)
Hash identifier: VWUPpUlD7nK+/gA+/Alj66EsfZhaZQ4d2L9xSBvt24s=
Subject key identifier: 4D:42:B3:BF:CA:98:49:06:A6:D3:0A:EE:45:D5:ED:E5:9D:62:33:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C26F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4B88020295811EF8DF658FB7CDC24C2.roa
Signing time: Thu 13 Jun 2024 07:44:58 +0000
ROA not before: Thu 13 Jun 2024 07:44:54 +0000
ROA not after: Fri 21 Jun 2024 07:44:54 +0000
asID: 44559
IP address blocks: 154.203.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49775 (0xc26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 07:44:54 2024 GMT
Not After : Jun 21 07:44:54 2024 GMT
Subject: CN=666aa379-28af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:b5:35:46:53:30:74:e7:09:d1:e8:45:86:
02:c5:04:0f:3d:46:e6:c3:7b:05:0b:47:08:61:19:
2d:80:75:db:8d:a2:12:87:f7:7f:eb:11:85:c8:13:
2d:5a:24:e1:46:5b:e1:6e:87:85:b4:3e:a9:27:34:
cb:b9:13:9e:30:6a:da:a4:66:0a:d5:cc:75:90:97:
4b:89:bc:eb:3d:3c:5c:88:73:ef:6b:23:99:b6:2f:
6c:18:8f:0b:14:f9:45:66:66:94:b8:f2:2e:b2:5e:
5f:10:4c:49:af:c2:70:a6:d2:93:bf:16:7b:3c:6b:
fe:50:b1:2a:7a:12:cd:44:d5:aa:1a:6f:b7:e2:04:
8a:c2:f8:79:06:95:f9:13:78:16:e9:b8:67:fc:06:
b2:71:34:13:85:48:13:ac:51:9d:27:1a:cc:ed:32:
be:c1:14:d9:58:a4:e7:c5:2e:e1:82:34:53:98:4a:
1d:9e:17:8c:58:d7:7b:15:ef:06:a7:2b:20:e1:2e:
ba:8f:20:70:51:d4:7a:61:c5:1e:97:93:a2:14:f8:
db:18:e4:70:56:0b:af:c7:75:ab:a0:ba:c9:87:f3:
4b:be:72:b9:a7:87:fc:97:09:bb:16:4a:1e:c3:df:
5e:1b:3e:74:bb:73:82:8f:55:e5:07:5d:83:b5:e1:
04:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:42:B3:BF:CA:98:49:06:A6:D3:0A:EE:45:D5:ED:E5:9D:62:33:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4B88020295811EF8DF658FB7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.224.0/20
Signature Algorithm: sha256WithRSAEncryption
c8:99:8e:cb:ab:f8:9d:50:16:23:46:f1:fa:1c:ec:49:a8:c3:
8c:d0:10:b5:c7:d0:70:f7:04:d6:b8:70:7d:bf:27:fd:14:80:
5e:92:be:68:e1:e4:7a:ea:f9:2a:1f:f1:f6:95:42:35:93:44:
d6:f4:d9:9a:eb:00:05:11:37:da:e3:20:e8:b8:14:c6:e3:08:
83:52:d9:c2:20:20:05:23:a5:b0:e5:8a:e8:58:c7:ff:bb:4e:
99:06:7a:a3:70:93:8e:93:b6:03:6d:58:d0:e4:e3:6e:43:e4:
35:37:3b:e8:c0:be:3d:b5:0f:fc:28:cb:16:19:02:fe:1c:c5:
ac:e8:05:39:c5:88:6c:23:24:8c:eb:51:1c:8a:aa:27:fe:09:
9c:12:d2:36:3f:0c:af:c9:9c:12:ee:ef:24:b1:f7:7f:49:18:
60:4f:26:d2:6f:b8:71:26:d4:89:2a:08:6d:31:c0:2b:de:b9:
54:60:25:b8:9a:4b:4c:71:10:1e:7b:c1:e6:a3:13:cd:45:5e:
b0:57:52:60:fd:77:1a:ff:64:66:1a:aa:ee:ad:b8:90:37:5b:
0e:5d:1f:9e:7d:dd:f7:6b:9c:b3:5f:59:71:c8:cd:d7:f1:43:
8b:e8:f6:8c:3b:83:9c:47:db:45:01:6e:33:62:29:fa:5e:1d:
4d:3c:c0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 03:57:32 2024 by rpki-client on console-ams.rpki-client.org