Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEFA71E60DB111EFB2D25BFE007001B1.roa
File: DEFA71E60DB111EFB2D25BFE007001B1.roa (raw, json)
Hash identifier: ZJ+bjcaV9edbz4WrcLtPYoPmBf9OtwUQxUJXxHNVJIE=
Subject key identifier: 81:95:EB:1B:8D:B2:DD:98:08:5E:E4:68:37:88:DF:1E:96:C6:AD:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B5A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEFA71E60DB111EFB2D25BFE007001B1.roa
Signing time: Thu 09 May 2024 03:11:47 +0000
ROA not before: Thu 09 May 2024 03:11:44 +0000
ROA not after: Sat 18 May 2024 03:11:44 +0000
asID: 44559
IP address blocks: 154.203.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46499 (0xb5a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 03:11:44 2024 GMT
Not After : May 18 03:11:44 2024 GMT
Subject: CN=663c3ef3-db57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:a2:15:48:91:ec:a6:11:82:23:dd:cb:16:
ad:8f:79:01:7e:de:9c:da:fc:25:ab:98:18:ab:d9:
4e:e7:90:7f:be:3f:1e:89:28:69:33:c1:0d:0e:ac:
7a:7a:fa:53:55:7f:2f:29:0e:57:fc:55:eb:40:30:
be:05:4c:e4:f1:d5:7b:c9:bb:b1:e1:90:af:64:c9:
f6:ab:88:19:93:78:14:6f:dc:12:13:a0:bb:54:1b:
73:e7:ac:6d:de:cc:fd:de:48:83:81:25:2c:e4:61:
c9:bc:e3:74:d4:f2:64:0b:40:68:6b:e2:7c:81:dd:
3b:43:05:ff:94:05:d1:3b:1a:f7:9f:7a:9d:b7:b2:
65:37:94:3a:76:14:6b:4e:09:ed:f2:85:da:75:51:
35:a9:4e:28:8c:cd:db:fd:d9:7f:fd:be:9b:7a:5c:
f3:6e:b8:e2:68:7d:b5:7c:97:21:06:3b:55:cd:d8:
fd:f2:61:54:25:59:2d:15:82:a7:af:f4:08:bf:6b:
84:3c:18:40:1b:41:2b:af:26:2b:f0:fb:a9:69:b2:
3f:f7:ee:e4:e3:7b:71:c1:fd:ec:91:2e:e3:63:45:
8d:a1:e0:a7:74:1f:7e:95:80:cd:aa:14:1a:72:eb:
6d:b0:bc:59:a0:f3:a1:60:f7:da:b8:be:85:a0:68:
0e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:95:EB:1B:8D:B2:DD:98:08:5E:E4:68:37:88:DF:1E:96:C6:AD:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEFA71E60DB111EFB2D25BFE007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.192.0/19
Signature Algorithm: sha256WithRSAEncryption
a9:92:20:fa:bd:7f:ed:17:34:31:70:6b:0f:10:79:58:c5:1f:
52:ca:76:b8:a2:35:a5:3f:5d:77:40:06:22:19:bf:87:27:34:
6a:bb:95:a8:b2:f8:84:60:86:f2:6a:3b:b1:d7:80:23:b7:c8:
f3:1b:e4:a8:0e:2a:46:75:9b:30:c5:23:e6:b3:29:6f:ce:db:
bc:06:21:27:65:f5:74:64:c2:73:8e:23:2e:30:23:fb:f6:69:
37:9b:71:5b:3b:3a:27:40:e4:7d:18:68:5b:49:22:6d:b3:3f:
f6:73:82:aa:21:8c:e8:43:1c:cc:f7:7d:f9:9c:7d:bc:cc:af:
de:a5:77:55:2c:90:82:4e:14:6b:af:ef:46:b1:a4:cc:47:1f:
6e:9a:ac:7e:07:0b:77:07:e0:b0:85:5a:af:10:cd:74:90:a0:
7b:48:b1:2d:9e:6b:b1:e8:df:98:a0:a0:4a:e8:94:43:69:e3:
07:39:b4:52:67:12:12:cb:4c:e7:cb:cb:e4:be:04:21:4f:e0:
e9:0f:2d:cf:b0:16:48:6b:08:bd:91:23:e0:3f:11:40:51:97:
03:2b:2c:d0:99:11:a8:80:c5:b4:ae:a4:ae:83:d5:b7:0a:10:
6b:83:16:d9:53:f4:ca:74:be:cb:d8:3b:ee:40:e9:0e:7b:07:
02:70:4a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:08:29 2024 by rpki-client on console-ams.rpki-client.org