Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E429D63E0DCF11EF8307C8F4007001B1.roa
File: E429D63E0DCF11EF8307C8F4007001B1.roa (raw, json)
Hash identifier: ZIzn2SStN9YXsWeP9ffoWHbOE6l+tYL3dqWdX2tB3LQ=
Subject key identifier: AB:7F:BC:48:C4:AC:39:17:E7:D9:CF:63:D2:29:E6:80:1D:D8:70:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B627
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E429D63E0DCF11EF8307C8F4007001B1.roa
Signing time: Thu 09 May 2024 06:46:41 +0000
ROA not before: Thu 09 May 2024 06:46:37 +0000
ROA not after: Wed 29 May 2024 06:46:37 +0000
asID: 139646
IP address blocks: 154.208.14.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46631 (0xb627)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 06:46:37 2024 GMT
Not After : May 29 06:46:37 2024 GMT
Subject: CN=663c7151-05eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:4f:8b:b9:3e:6c:65:97:48:df:65:61:ab:
b1:30:20:be:c7:57:41:4b:3b:84:2b:1d:e3:5d:17:
f9:89:97:42:f7:29:02:74:cd:d9:57:4d:54:19:9f:
53:24:c4:09:45:0a:b4:5e:36:ca:24:b6:66:51:2a:
c0:1a:52:8e:39:d5:52:a1:d1:c4:75:a5:1a:20:ce:
d9:04:2a:94:df:5f:66:4a:cc:26:17:a8:6e:5e:dc:
0d:ac:1b:13:df:cf:79:11:fa:48:f2:73:50:0a:0f:
47:78:94:87:1e:dd:a5:ac:39:90:62:3d:34:08:2f:
42:00:45:fc:e2:6c:4b:a5:ed:fa:de:17:ff:2c:40:
54:64:f1:3b:33:21:e4:cb:d4:d4:47:81:9b:51:4a:
10:ba:cf:c8:73:79:e1:81:37:d1:0d:d5:b7:c7:26:
cf:03:ff:03:08:c5:b8:be:c3:c8:03:33:8a:58:76:
26:bc:d6:58:9a:c7:06:16:47:87:9e:a5:cd:81:bf:
c6:8a:a0:07:8b:81:28:46:22:91:3e:2d:33:89:00:
4d:3e:9b:20:f6:d2:ee:9f:5d:75:94:c2:84:a2:3b:
59:dc:70:46:fe:a9:c6:43:3a:16:60:5b:d4:d3:88:
ef:26:dd:70:ca:de:4e:e9:9c:48:b0:ef:50:36:56:
7f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7F:BC:48:C4:AC:39:17:E7:D9:CF:63:D2:29:E6:80:1D:D8:70:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E429D63E0DCF11EF8307C8F4007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.14.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:74:ec:51:39:4f:69:bd:60:d3:ca:38:fa:33:1d:7a:d8:b0:
80:2a:9e:16:b6:36:60:06:fc:86:6a:a7:fe:ee:93:6a:8f:06:
5d:9e:e4:52:1d:2d:fb:2b:c6:c7:e1:c3:81:9a:98:08:af:13:
f3:31:b3:db:e6:25:fa:56:e7:91:7b:f8:36:14:47:b1:e2:ff:
44:a4:6a:ee:c8:78:38:eb:b9:0e:bd:63:9f:05:6a:6a:f9:f8:
1c:11:4a:32:1e:51:52:67:1e:ad:79:6c:1d:90:04:c1:2a:4e:
0d:15:a4:8b:80:fc:63:ba:84:d6:fa:65:1a:1a:66:3e:1a:4e:
9c:fd:33:94:dd:9d:e8:c7:6d:1f:e0:a9:b1:db:db:ed:85:46:
b8:92:e3:19:d7:15:f1:ea:c8:24:8c:bf:3f:83:e3:4b:56:e5:
9c:c8:d4:97:3d:df:d3:02:e3:c6:0f:4d:62:44:72:59:33:82:
a2:96:56:cc:3f:f3:56:8d:e6:7d:c3:50:ba:c7:61:cb:52:9c:
f0:8d:6d:3e:21:5f:12:a0:63:94:f0:2b:33:be:57:56:a7:17:
cb:f2:45:fa:2e:02:aa:15:69:75:b0:f3:3a:f4:d7:12:5a:f1:
f4:3f:8d:38:2c:17:06:49:67:11:10:30:e1:24:e7:33:0d:04:
d4:6f:95:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 12:51:23 2024 by rpki-client on console-ams.rpki-client.org