Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9B7474607AF11EFB3FBB40F017001B1.roa
File: F9B7474607AF11EFB3FBB40F017001B1.roa (raw, json)
Hash identifier: NRNwhRc7j4pVlk+56MW9IQGeStXA+GY0h4WmZOsgQlw=
Subject key identifier: 5A:37:71:78:BB:33:C3:2F:59:84:4F:42:A1:F9:36:99:BC:31:4E:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B39D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9B7474607AF11EFB3FBB40F017001B1.roa
Signing time: Wed 01 May 2024 11:43:06 +0000
ROA not before: Wed 01 May 2024 11:43:03 +0000
ROA not after: Fri 17 May 2024 11:43:03 +0000
asID: 151800
IP address blocks: 154.197.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45981 (0xb39d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:43:03 2024 GMT
Not After : May 17 11:43:03 2024 GMT
Subject: CN=66322aca-86d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:2c:77:fd:50:59:82:a9:14:40:8a:53:9f:
a6:1f:8c:0e:57:89:5b:3c:f2:de:74:1d:8a:d9:c7:
69:47:4e:ee:f9:10:c5:ed:18:23:b4:4d:af:ca:5e:
0f:a1:10:53:98:dd:8a:3f:47:87:73:6c:12:e6:ce:
7d:a4:94:25:69:00:37:46:61:f9:f4:af:e5:32:8c:
81:fe:3a:83:a0:20:8b:07:08:07:8f:da:24:a4:0a:
b7:58:79:7d:8a:5b:a6:0e:8e:6f:83:ca:13:c0:5e:
bd:7d:5c:e9:35:b4:38:44:2f:f3:92:97:f5:3e:1b:
14:d5:d7:7c:ba:41:8d:95:86:61:fd:b9:07:20:76:
44:f0:1a:57:6d:3d:e5:29:7d:37:55:b8:c6:a8:a7:
4c:d3:29:5c:40:54:d3:d3:18:0d:bd:f6:bf:a6:06:
a5:a5:8b:7a:e1:78:54:2d:3f:0d:1b:30:46:df:90:
1f:5a:75:54:b8:b3:a6:7c:06:25:59:bc:07:96:42:
49:5a:31:8c:2c:c5:ca:45:8c:40:7a:fb:16:4e:cb:
0a:f3:73:f7:7a:da:b1:84:9b:47:03:7e:f3:27:85:
df:b4:e3:3c:86:d5:f0:76:d6:d1:d0:4f:59:9b:2d:
67:a1:1a:a7:6b:b8:28:ed:95:b7:91:f9:43:e2:36:
67:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:37:71:78:BB:33:C3:2F:59:84:4F:42:A1:F9:36:99:BC:31:4E:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9B7474607AF11EFB3FBB40F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.81.0/24
Signature Algorithm: sha256WithRSAEncryption
22:c9:e7:fd:91:5d:da:fa:c8:7c:b8:94:02:80:d8:0e:5d:f4:
84:92:37:2b:88:5a:c2:12:f6:cf:27:0b:c5:9e:f2:7e:d5:3e:
cf:88:5e:b1:7c:a9:31:a3:8b:f4:66:47:4c:77:6e:4b:df:9b:
19:a4:9c:b3:29:72:80:c8:be:97:2b:d5:2b:dd:55:da:ea:d5:
b6:0b:94:b5:ba:e9:16:bd:c7:bb:8e:60:ea:18:02:1b:59:4b:
a0:31:5e:41:d0:e6:4f:96:7c:da:50:19:0d:95:4a:8a:dc:9c:
b2:db:86:7a:6d:df:3f:96:3d:70:96:57:57:bf:6f:8b:12:f0:
89:23:fd:10:d8:80:8c:fb:88:14:33:e4:64:f7:1d:65:5f:09:
fc:47:e3:29:ec:73:a4:71:35:da:9e:46:30:5f:96:cd:35:52:
7f:db:38:12:7f:c9:11:57:4b:66:1f:56:b9:ed:79:16:63:a1:
85:1a:fa:c4:f7:db:c3:a9:2b:6d:49:a3:35:55:58:fc:38:c4:
bf:f1:ff:3b:e9:4e:26:82:93:bb:6e:05:9b:b3:5f:b7:32:f5:
cd:60:5e:00:4e:25:b1:ce:65:c3:08:1e:a5:a2:e8:9e:3e:f5:
8d:80:98:c7:7b:e1:7f:97:b5:ba:b2:d5:76:8f:db:24:9c:41:
98:1e:32:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:36:44 2024 by rpki-client on console-fra.rpki-client.org