Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3981870060D11EF92CD5A42017001B1.roa
File: F3981870060D11EF92CD5A42017001B1.roa (raw, json)
Hash identifier: QAcZyDzGnD5nim2JtE7WKFnLQf7yzm4EzMWjj1Ej6go=
Subject key identifier: 87:52:67:D0:03:CF:8C:E0:94:BA:97:4C:23:EF:AC:2F:D0:4B:78:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B216
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3981870060D11EF92CD5A42017001B1.roa
Signing time: Mon 29 Apr 2024 09:50:46 +0000
ROA not before: Mon 29 Apr 2024 09:50:43 +0000
ROA not after: Wed 15 May 2024 09:50:43 +0000
asID: 5065
IP address blocks: 154.95.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45590 (0xb216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 09:50:43 2024 GMT
Not After : May 15 09:50:43 2024 GMT
Subject: CN=662f6d76-4a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:8b:54:9f:f9:a1:82:cf:1a:2c:d7:2a:0a:
fa:fc:bb:a7:4b:b5:d0:0b:9e:97:53:cd:87:50:ce:
f5:fa:e0:60:fb:50:2a:34:fa:70:a8:1e:08:06:48:
e5:88:00:d8:f3:22:b8:c3:ca:a7:0e:75:f2:c5:f4:
82:ba:2c:3d:bb:52:5f:fc:bc:96:05:bb:ca:49:00:
17:14:cc:cd:2b:db:84:65:aa:75:88:6b:94:70:89:
af:c6:27:8d:1c:f7:9a:54:70:58:de:1c:ed:50:e4:
4e:62:7a:8e:0d:c4:c7:40:5b:ea:12:1b:9c:05:04:
b7:1e:96:a2:33:53:32:52:08:bc:8a:06:6f:24:18:
6c:e7:f6:29:da:2d:55:35:11:42:99:ed:3d:98:8d:
21:ce:f0:90:06:09:e8:f1:76:68:ac:88:11:35:d9:
21:a9:7a:b4:ba:ee:ae:d8:2f:41:90:43:3c:4b:dd:
5a:11:a3:be:e2:76:43:3e:96:37:6d:42:87:07:a4:
1b:8e:6f:4e:db:7d:02:e2:e8:33:83:1a:e3:79:19:
9c:36:34:34:d7:6c:25:0f:7c:9d:57:ac:ce:4a:e8:
d7:94:ab:a2:68:b8:ac:f9:7b:ac:ac:08:4d:57:56:
9f:a5:74:54:a0:23:7c:bb:07:82:d7:69:e1:29:be:
63:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:52:67:D0:03:CF:8C:E0:94:BA:97:4C:23:EF:AC:2F:D0:4B:78:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3981870060D11EF92CD5A42017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.20.0/22
Signature Algorithm: sha256WithRSAEncryption
86:fa:04:a2:b6:0e:e6:24:a2:73:26:eb:89:d0:06:28:d3:e2:
4b:8c:fc:28:63:b9:59:d2:01:b3:f3:15:b1:b3:91:ed:e8:c3:
f2:39:ab:4e:5f:b7:b5:25:f4:72:45:b0:cd:94:be:70:e8:e4:
1a:09:1c:00:44:3b:9b:1f:4e:61:72:68:a8:34:51:16:9d:e2:
a9:b4:6e:d4:f6:1b:90:3f:3e:37:d7:5b:41:3b:fc:37:4c:7d:
44:fe:97:38:35:5d:fd:8b:9d:43:59:93:b4:00:53:fe:50:f6:
7d:98:a1:12:bb:49:e0:a4:b6:2f:0f:16:41:a1:fa:84:46:cf:
d6:46:2e:11:15:31:e6:1e:53:32:df:41:5e:dd:17:d9:8c:87:
65:3c:40:e4:d3:0c:cd:08:a0:30:0e:12:43:69:83:41:22:62:
f8:af:d7:e1:11:21:7d:75:25:38:94:ad:f6:53:74:f3:b9:9b:
42:0c:1a:6b:d3:a5:4a:ad:19:da:66:dc:9f:d4:9c:d4:b5:4a:
d7:af:87:65:b9:aa:17:5b:44:e1:29:4f:9d:7a:26:91:f5:c9:
f6:e9:ce:c9:57:3d:76:62:e4:1b:0d:0c:8a:9a:4c:95:f0:6d:
05:08:50:79:d1:26:88:12:73:6c:2f:4e:66:27:40:a3:40:37:
62:ac:0f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 01:35:16 2024 by rpki-client on console-fra.rpki-client.org