Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E616EF32295811EF89B981FB7CDC24C2.roa
File: E616EF32295811EF89B981FB7CDC24C2.roa (raw, json)
Hash identifier: xjDm2YZwu7ipBR+tibVP6Jic2fAGlQmzv4lfijpvOpI=
Subject key identifier: 05:57:91:54:EF:85:25:65:B7:36:66:DA:39:A1:E9:A1:6E:5C:F9:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C271
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E616EF32295811EF89B981FB7CDC24C2.roa
Signing time: Thu 13 Jun 2024 07:45:27 +0000
ROA not before: Thu 13 Jun 2024 07:45:23 +0000
ROA not after: Fri 21 Jun 2024 07:45:23 +0000
asID: 44559
IP address blocks: 154.203.240.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49777 (0xc271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 07:45:23 2024 GMT
Not After : Jun 21 07:45:23 2024 GMT
Subject: CN=666aa397-2abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:d6:c8:e5:ef:9c:76:c8:45:c4:3e:97:4b:
e5:77:ea:f2:9c:2f:1c:27:3a:a3:90:90:78:d0:c3:
72:d9:de:4d:dd:72:30:60:8e:a1:5a:23:92:15:3f:
ef:c1:c1:3f:1d:5c:08:ae:2d:d9:a4:27:08:fc:43:
a0:5d:d4:43:02:54:8e:1a:10:34:ee:95:ef:5d:08:
38:92:55:17:99:80:92:ff:be:59:17:44:9c:c2:53:
3e:3f:7d:1b:16:8f:47:77:ba:4f:bc:40:f9:d1:f2:
28:c1:2b:99:5b:f2:8e:58:c2:39:58:20:f2:8a:80:
a4:96:67:59:30:c0:a9:1d:6f:ad:04:00:2a:6c:b8:
06:a8:b5:06:50:af:1e:a6:4a:61:28:7d:52:3a:20:
c7:bb:fe:28:0f:96:65:57:c5:c4:04:c5:f2:ff:16:
43:b7:aa:a5:92:f6:b3:cd:ce:37:3a:f8:f0:90:18:
f4:15:aa:65:4a:b6:43:83:8e:2f:8a:6e:d5:4a:4c:
74:f0:b6:9a:bd:01:9e:c6:e9:36:6c:d1:fe:e6:68:
97:6f:2b:22:2d:85:0b:50:a4:17:c0:81:06:64:7f:
a8:4d:ac:70:8d:15:2c:21:d7:d1:48:00:e0:fc:0a:
a6:ea:7c:c2:bf:1f:75:d9:71:3e:fb:c4:22:7a:c9:
b2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:57:91:54:EF:85:25:65:B7:36:66:DA:39:A1:E9:A1:6E:5C:F9:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E616EF32295811EF89B981FB7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.240.0/21
Signature Algorithm: sha256WithRSAEncryption
55:f1:1d:8f:28:8b:58:bc:a6:6d:b4:b9:39:fe:19:c2:a4:b8:
61:cd:29:c6:76:82:be:99:d2:15:af:d0:62:db:90:aa:b9:55:
19:3f:c2:11:51:2e:bf:7d:54:a5:6d:02:c8:ae:7b:c0:25:20:
ef:ca:b7:36:0a:96:65:d7:be:e5:fc:c6:e4:35:37:87:99:7c:
3f:53:6c:c0:26:21:02:6c:e8:a3:60:52:f7:a2:72:d7:59:9a:
69:d5:cb:ad:ac:42:39:26:ce:9e:4d:6b:2a:99:83:96:2c:89:
52:9e:af:73:6b:4b:9d:1b:bd:19:cb:78:77:b8:f1:b2:14:79:
ef:c9:7a:6b:5a:b9:e0:36:22:a1:8d:27:4d:12:4e:69:c1:90:
00:ab:82:a7:6b:fd:ca:7d:5d:c9:a3:e3:3a:c4:97:89:e4:3c:
36:95:ec:70:7c:53:04:d6:c1:68:bd:c5:b1:95:af:5f:22:35:
7a:9a:84:0e:d7:0c:b5:d8:f9:fc:a0:9a:76:57:e7:b6:0f:63:
43:07:65:97:09:aa:cd:e8:fd:b4:5d:e7:16:17:96:9f:32:13:
e6:e8:30:22:c4:f9:db:df:8b:a8:5d:31:fd:69:b8:6e:f4:2b:
a3:a2:da:7d:21:3f:84:ba:ae:01:eb:fa:55:30:33:9c:0a:1c:
05:a4:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 03:46:01 2024 by rpki-client on console-fra.rpki-client.org