Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/020194684A6511EF9C3EDEAE762E951A.roa
File: 020194684A6511EF9C3EDEAE762E951A.roa (raw, json)
Hash identifier: Rb00C8IMy6/ktHRS+o7kSgqf5xFEueC3O0/6xjuVDlc=
Subject key identifier: E5:A2:DE:77:45:EC:AA:67:5D:EA:E5:39:74:31:75:59:6C:17:4E:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D70E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/020194684A6511EF9C3EDEAE762E951A.roa
Signing time: Thu 25 Jul 2024 09:05:16 +0000
ROA not before: Thu 25 Jul 2024 09:05:13 +0000
ROA not after: Sat 03 Aug 2024 09:05:13 +0000
asID: 22773
IP address blocks: 154.84.168.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55054 (0xd70e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 09:05:13 2024 GMT
Not After : Aug 3 09:05:13 2024 GMT
Subject: CN=66a2154c-334d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:17:39:82:82:e8:3c:c1:45:99:cd:65:7a:
57:8b:f3:85:a2:56:c1:6b:d0:93:34:25:97:3b:12:
e0:a7:01:09:a4:cd:5d:f6:72:48:8b:06:57:96:a2:
39:5b:db:ad:58:a1:50:82:7a:cf:35:88:06:5b:65:
c2:e7:14:0d:35:9e:19:32:ab:70:85:f2:f7:2e:43:
0e:e7:db:fd:f6:4f:1b:82:9c:49:4d:08:0f:62:29:
f6:52:da:04:88:46:7c:44:06:59:c4:7c:aa:8f:a9:
f9:f0:f9:d7:26:e5:c1:2b:9b:79:bd:b1:93:04:b4:
2a:26:e8:d7:c2:46:89:cf:97:6a:9d:7e:44:cd:e3:
88:25:37:53:0c:d7:5c:cb:b6:8c:dc:73:07:eb:73:
bf:0a:b3:79:5f:14:f0:2f:6d:2f:7f:cc:ba:9d:d2:
d9:5d:18:9a:51:93:fe:0a:33:46:d2:d2:70:37:05:
b1:25:06:33:7b:82:82:16:01:0a:21:36:f3:2b:23:
b5:93:02:ed:09:27:de:ad:58:de:7c:5a:ed:b8:21:
98:c3:7e:c0:01:4f:7e:50:e9:b3:c4:e8:37:ba:2a:
a3:c3:0f:b0:0b:22:06:0f:dd:71:12:29:59:25:72:
da:17:6f:ae:23:21:ca:f5:4d:be:e8:e5:e6:00:0a:
8d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A2:DE:77:45:EC:AA:67:5D:EA:E5:39:74:31:75:59:6C:17:4E:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/020194684A6511EF9C3EDEAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.168.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:aa:47:c8:df:41:7d:55:fb:ad:6b:a3:7c:62:e0:bc:2e:e7:
ee:5d:48:7a:89:9c:0b:bc:1a:39:97:0b:70:22:86:3a:58:02:
02:17:04:da:a5:e7:6f:9d:53:00:1d:d0:64:9d:e7:26:b8:5e:
93:41:30:e5:67:b2:c6:41:96:41:90:ea:5f:c2:cb:bf:20:53:
2d:02:8a:b1:15:32:07:59:67:97:27:e0:02:f8:6a:36:dd:a4:
ae:e6:ad:ba:ac:57:f4:a6:fb:90:e0:35:6e:9e:e3:1f:14:78:
b6:f5:8e:a5:5f:44:99:f0:ac:57:66:19:22:0d:fd:30:71:72:
70:f2:6a:b4:65:6f:44:5f:e5:d9:63:37:b1:e3:6d:a2:81:82:
84:3f:c1:16:ca:24:a9:fd:99:e0:88:7b:c7:69:64:c6:85:c7:
e4:3c:d6:b3:96:e5:35:a7:fe:2c:16:a2:20:39:bc:5d:b7:3b:
c8:85:b7:6d:2e:a5:b8:66:a5:80:22:33:06:19:ff:3f:b3:2a:
5c:d6:18:c6:bf:19:81:bd:5a:67:76:bd:ac:e4:af:3e:a2:02:
4b:9e:a4:a9:0f:31:f3:af:64:56:fa:50:55:75:fb:f9:e6:63:
80:2a:42:46:4a:23:e5:0e:73:e0:6d:4e:d5:79:2f:e7:fd:a5:
89:ce:95:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:57:22 2024 by rpki-client on console-fra.rpki-client.org