Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F80858A627C911EFAA2E25DE7CDC24C2.roa
File: F80858A627C911EFAA2E25DE7CDC24C2.roa (raw, json)
Hash identifier: iDKn8VDFL5JbEJlKV17D7v/oxYfIU3FvDc5GvuURrDw=
Subject key identifier: A7:04:84:D0:08:45:CF:1D:44:A9:61:41:C3:03:23:4F:70:E4:DF:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C1A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F80858A627C911EFAA2E25DE7CDC24C2.roa
Signing time: Tue 11 Jun 2024 08:09:47 +0000
ROA not before: Tue 11 Jun 2024 08:09:44 +0000
ROA not after: Tue 25 Jun 2024 08:09:44 +0000
asID: 44559
IP address blocks: 154.83.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49572 (0xc1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 11 08:09:44 2024 GMT
Not After : Jun 25 08:09:44 2024 GMT
Subject: CN=6668064b-5e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:e2:75:28:fe:e4:37:2a:eb:18:37:4c:12:
bc:49:96:c8:6f:04:c1:07:cd:82:e9:79:c6:54:0d:
c2:3e:47:d9:ac:82:61:f0:a2:ec:2d:88:f1:9c:a2:
ff:37:8a:f5:76:1f:eb:6d:21:88:5a:69:9d:44:d7:
8d:aa:9b:46:7f:70:0c:f3:f3:f1:20:87:3e:dc:90:
40:b4:7c:b1:7a:d1:b1:57:93:0c:22:94:6b:de:f8:
62:7c:82:80:1a:9b:ad:7a:4e:4b:40:79:ac:bd:c2:
90:b4:f9:c0:73:bc:72:9f:03:e5:97:e8:8b:6f:75:
78:bf:ad:20:dd:8a:2f:f6:cd:e1:db:9e:e0:b3:37:
ef:2f:0d:25:e0:8e:de:07:29:e6:3b:9a:6a:b4:9c:
41:5f:fb:13:e8:39:06:98:21:f0:f9:aa:e7:86:f9:
93:5e:db:03:3f:d2:65:b3:fe:b6:b5:0d:0c:23:31:
28:ef:5e:bb:ec:49:00:43:11:61:87:09:7f:9e:78:
46:d1:7b:97:a4:90:06:1e:62:01:5f:58:9f:d3:ea:
8e:91:65:c0:9b:02:13:f3:1a:a7:cb:2f:f1:f6:fb:
84:5d:e7:ac:ea:4c:64:b6:76:84:81:24:1a:e7:68:
f2:2f:26:28:97:ea:5a:85:4d:02:3b:54:0f:9b:98:
a5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:04:84:D0:08:45:CF:1D:44:A9:61:41:C3:03:23:4F:70:E4:DF:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F80858A627C911EFAA2E25DE7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.128.0/18
Signature Algorithm: sha256WithRSAEncryption
61:89:2a:73:9f:a4:84:9b:9b:c5:ff:18:8f:73:1c:f4:b3:9f:
7e:4f:80:14:de:41:65:23:e2:08:a7:83:82:d8:9f:c7:92:df:
59:bc:32:fe:00:bc:8a:ff:84:47:b1:2e:fc:81:8e:16:4c:27:
ab:f8:94:ff:e0:c0:fb:44:0f:28:32:e5:d6:aa:64:eb:7e:cc:
43:7f:57:a0:1c:3e:5a:2e:84:ec:fb:89:d8:60:d7:20:39:df:
b2:71:43:0b:7d:6a:ba:40:06:1c:12:02:9a:9d:28:74:ad:36:
17:5f:9b:0e:0f:c5:38:47:7f:b6:35:07:8c:2e:f7:06:74:c8:
74:6f:6f:c2:4f:09:06:b8:fc:c0:c2:1b:fc:9e:0a:0f:92:74:
e2:79:f1:0d:fa:93:c3:e5:bf:c1:36:04:cb:57:a2:c6:d1:7e:
7b:06:1e:da:b4:c1:73:04:b4:16:61:78:55:5a:72:83:d1:45:
e1:5a:d0:5a:63:9f:2f:a1:62:ee:a0:0b:78:75:89:57:ff:90:
f7:3a:bc:7b:68:4c:ba:63:7c:4c:7f:47:08:0f:d9:1b:cb:fd:
ab:71:69:b0:f4:9d:da:3d:34:b6:a5:83:8e:3f:bf:ea:0d:b0:
5f:ac:cd:66:11:fa:19:83:15:c6:2b:d7:1b:7e:fe:42:c8:d7:
52:51:98:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 12:08:03 2024 by rpki-client on console-fra.rpki-client.org