Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E78E849A0B4611EF876DCB3A017001B1.roa
File: E78E849A0B4611EF876DCB3A017001B1.roa (raw, json)
Hash identifier: TBFwdyjsUnBUVjmnoZLqSYaNh4G02KKU6PZhPsQ5Oxg=
Subject key identifier: 63:3D:E6:88:F0:D7:C7:0D:48:5D:F4:39:56:AF:DD:1B:ED:29:0B:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B44A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E78E849A0B4611EF876DCB3A017001B1.roa
Signing time: Mon 06 May 2024 01:21:03 +0000
ROA not before: Mon 06 May 2024 01:21:00 +0000
ROA not after: Tue 14 May 2024 01:21:00 +0000
asID: 44559
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46154 (0xb44a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 01:21:00 2024 GMT
Not After : May 14 01:21:00 2024 GMT
Subject: CN=6638307f-3d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:5e:d3:38:f1:a6:5e:f8:10:7d:f7:ba:9a:
4d:eb:c0:85:2d:84:d1:f9:a6:df:1b:ee:51:83:33:
07:28:43:9b:b6:e6:5a:73:80:30:ff:c4:d5:b5:05:
1b:ae:2c:28:65:c2:b8:3b:4e:36:fd:c4:ef:f7:76:
91:5f:84:da:ff:bf:bd:73:45:df:47:0a:47:f3:cd:
20:f3:dd:31:93:5e:5c:24:e5:e2:e2:a7:b0:6b:28:
da:fc:36:dc:54:7b:27:cb:7f:65:55:b2:f5:2a:d8:
66:a8:58:b7:47:2f:23:88:85:9a:39:74:8c:af:a7:
58:6c:e9:2e:59:6a:49:66:5d:8c:ec:fa:b7:07:d8:
7f:e8:77:37:c3:65:14:0a:fe:37:dd:c6:a8:3f:d2:
55:36:16:9f:ff:1b:0a:54:f8:96:b9:53:b1:a1:12:
ce:b8:c2:8d:d5:89:27:ca:8f:70:3c:73:37:2e:13:
39:58:d3:76:44:6d:7b:e1:73:ee:e0:a2:b0:ab:e4:
b1:0e:f8:8c:70:f8:5a:1b:15:f7:98:2e:c0:0d:c9:
9f:8a:8e:56:1f:93:01:03:c6:94:b4:fd:41:ff:dc:
e0:9e:75:23:e0:96:31:a6:c7:cb:8d:95:98:2b:c4:
ba:21:d3:12:83:f5:d7:41:a3:8c:6b:ec:10:69:78:
98:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3D:E6:88:F0:D7:C7:0D:48:5D:F4:39:56:AF:DD:1B:ED:29:0B:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E78E849A0B4611EF876DCB3A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
30:3d:05:65:99:26:31:e1:8a:64:f3:b9:21:77:e2:ff:98:f8:
cb:3a:20:f5:d7:f9:6f:14:de:59:2f:98:7e:53:86:7d:6d:0b:
59:80:bf:89:19:a9:ab:e1:11:d2:78:ad:1a:89:c0:fe:09:fc:
42:a0:ad:12:70:9b:bd:0f:e2:36:04:68:c7:51:92:36:72:8e:
8d:8f:01:bc:b0:1f:a3:c0:b7:4c:6d:eb:a1:a2:9f:25:e0:e7:
7f:ce:0c:ac:54:94:94:7f:49:7a:bf:16:ac:02:f9:31:96:95:
0f:fd:ba:7a:3d:55:fe:d5:d9:1f:9c:be:68:59:25:ed:3b:c7:
cc:d9:6e:8f:fb:38:6d:7f:00:23:7a:ea:bd:8d:c6:39:21:6f:
86:36:bd:24:48:40:a4:a4:e0:1e:ca:ea:f6:a3:54:60:53:6d:
8d:05:07:50:bd:53:0c:f7:c9:ac:08:39:56:c9:27:45:c0:c3:
4b:cc:61:8a:93:02:5e:2b:4c:4e:2b:40:7b:0e:d8:86:ea:58:
09:38:03:f7:1b:21:16:14:b5:2e:61:ff:cc:b5:eb:ea:28:86:
96:59:e4:46:1b:45:38:78:b3:a5:30:4d:48:5e:18:9b:e4:dc:
46:ef:b2:e0:95:1f:74:58:93:1c:60:2a:09:7c:0e:75:0d:71:
65:5c:68:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 03:25:15 2024 by rpki-client on console-ams.rpki-client.org