Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F16398B0021411EF8EDBFA5C017001B1.roa
File: F16398B0021411EF8EDBFA5C017001B1.roa (raw, json)
Hash identifier: F5y7Nt0MIGctzCq87DVM6sUUO3iApq8PsIuqf7v2x1E=
Subject key identifier: 95:25:76:C9:8D:E9:CF:36:1A:CC:22:67:73:9B:EF:C7:2D:FC:47:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AFFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F16398B0021411EF8EDBFA5C017001B1.roa
Signing time: Wed 24 Apr 2024 08:30:44 +0000
ROA not before: Wed 24 Apr 2024 08:30:39 +0000
ROA not after: Thu 30 May 2024 08:30:39 +0000
asID: 328608
IP address blocks: 154.194.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45050 (0xaffa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 08:30:39 2024 GMT
Not After : May 30 08:30:39 2024 GMT
Subject: CN=6628c334-f2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:c4:f1:91:70:a3:1f:b5:ad:24:c8:ff:9a:
8b:cb:b7:fb:f4:3f:d9:db:7d:d0:d7:cb:54:cb:0f:
c2:66:0e:8f:c8:0f:b8:83:7c:83:a0:e6:7d:e9:f4:
0b:c5:ee:1c:74:e9:c0:5c:05:4e:5e:39:dd:77:60:
a3:66:f7:45:5a:1c:26:38:c2:4e:3c:1e:1b:6b:2e:
d6:be:46:1b:bc:5a:15:aa:96:c6:d2:ee:65:8b:ab:
94:ec:22:48:0f:c9:65:62:77:98:57:36:d9:b4:fd:
3e:c4:ae:da:52:6c:79:31:e9:17:d9:fa:c2:28:0d:
f5:0d:c3:59:69:5f:3d:d5:b1:70:95:c7:c9:5b:2a:
c1:f1:cb:52:83:3f:38:c9:79:31:03:ac:c4:91:85:
9b:54:8c:9e:14:4d:e9:00:42:ef:3b:0f:12:2b:ff:
fb:72:64:bb:42:3c:ff:c2:ae:47:41:84:a0:74:8d:
3a:11:29:43:f8:68:31:ab:24:25:81:c5:69:8f:35:
67:c5:00:22:64:d2:0a:a0:d9:ff:85:51:7e:83:2d:
60:68:3e:d5:fd:7a:b1:9b:c2:fc:0b:7b:f3:ce:60:
5c:a5:ed:91:c0:94:0e:89:55:44:93:cd:83:8d:c4:
7d:2c:38:eb:c3:18:eb:5e:82:bf:a2:f7:c2:11:28:
87:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:25:76:C9:8D:E9:CF:36:1A:CC:22:67:73:9B:EF:C7:2D:FC:47:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F16398B0021411EF8EDBFA5C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.59.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:de:7b:3d:b3:81:7d:a7:ee:67:24:40:16:15:84:ce:16:67:
f0:ba:c1:63:54:22:e4:f0:6d:9b:8d:a4:44:6b:cb:9b:57:6c:
00:56:dd:c3:03:8e:1e:bc:c8:60:fb:ed:ab:7e:0b:24:75:e8:
d7:d0:8c:45:92:ee:a7:b4:38:77:05:5e:9c:0b:20:70:c6:e8:
5c:c9:51:f6:08:49:a5:0e:f2:5f:21:c1:2a:cd:89:b7:82:4d:
12:12:57:df:ab:28:35:3f:ef:cd:da:b2:69:3d:bd:b2:13:39:
66:56:55:1d:cc:51:c6:de:19:e3:39:75:8e:bd:c0:3a:f3:a2:
96:95:e8:ad:32:37:39:e9:38:32:a3:ed:66:2b:e0:06:0f:e2:
5a:f5:50:b8:b2:2c:07:d8:97:c1:99:d9:45:f1:ca:3e:eb:02:
27:71:44:6a:bc:a9:84:19:db:0f:b2:43:20:5d:3b:11:ea:a9:
a4:6b:35:d2:68:a9:7d:1a:a9:0c:66:f3:f0:d7:67:e7:c4:5c:
1c:86:ca:13:0c:56:d4:92:2c:25:24:bd:d8:10:57:57:e1:8f:
2c:8f:fb:aa:eb:d8:09:12:77:56:b4:81:42:2c:c4:a3:f4:a3:
a4:11:9d:d8:7f:4a:97:40:67:db:65:ba:bd:45:86:50:0d:0e:
c0:ab:6c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 15:25:23 2024 by rpki-client on console-fra.rpki-client.org