Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B91CCE8441411EFAD7F74BC762E951A.roa
File: 0B91CCE8441411EFAD7F74BC762E951A.roa (raw, json)
Hash identifier: 8lBKe81n3fdweJxmZjiaoepn9auuwyZRObjVYaCC8bw=
Subject key identifier: 0F:DB:46:16:34:C4:7C:BD:71:EE:74:02:25:A4:0A:04:E6:21:CB:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D30F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B91CCE8441411EFAD7F74BC762E951A.roa
Signing time: Wed 17 Jul 2024 08:10:36 +0000
ROA not before: Wed 17 Jul 2024 08:10:32 +0000
ROA not after: Sat 27 Jul 2024 08:10:32 +0000
asID: 22773
IP address blocks: 154.202.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54031 (0xd30f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 08:10:32 2024 GMT
Not After : Jul 27 08:10:32 2024 GMT
Subject: CN=66977c7c-e223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8d:77:9c:dc:1f:59:1b:0d:1f:28:c3:d4:d7:
bd:42:ec:46:80:85:a0:b5:7f:09:37:9e:c8:f9:89:
bd:c4:af:8d:f1:6a:88:5c:37:f1:29:7e:ab:97:5c:
ea:2d:a2:37:c3:80:1b:74:71:fa:cd:9a:29:91:04:
8d:ad:81:e1:3f:77:fa:b7:99:e2:a6:28:45:ed:4b:
8d:c1:8f:88:98:ce:3f:2e:85:65:50:00:a5:48:e3:
43:69:27:89:bd:4b:b9:71:34:5a:83:be:23:a7:68:
7c:fe:6b:79:b1:12:cf:02:4a:cd:eb:32:6b:09:37:
70:8e:a7:05:5d:c7:a9:fc:f0:c5:ff:fa:cd:4d:00:
84:d2:fd:b1:ef:87:ba:3d:29:d9:fd:66:3a:03:1e:
e5:1c:92:20:ee:75:ef:a5:84:3b:3b:26:3c:8e:92:
65:b5:eb:42:b4:67:d9:91:ce:2b:d0:11:55:4d:ee:
b6:cf:c7:76:45:7e:97:63:38:c5:5c:e9:b3:76:cf:
92:38:ed:f6:36:1b:5e:a3:bf:90:a3:a8:17:ea:f7:
80:80:f3:8c:75:9d:3f:f6:8d:ed:49:0b:4c:d6:3c:
c6:7d:1f:1a:a3:1c:25:47:05:7e:2f:a8:0f:b7:a7:
92:2f:e8:fa:b0:39:f9:30:20:0f:f6:7a:a9:53:9c:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DB:46:16:34:C4:7C:BD:71:EE:74:02:25:A4:0A:04:E6:21:CB:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B91CCE8441411EFAD7F74BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.24.0/21
Signature Algorithm: sha256WithRSAEncryption
c6:30:b4:d5:e2:21:f9:ae:82:e3:02:3f:14:43:61:8c:aa:c3:
2b:86:58:9e:f9:a3:39:40:21:14:00:c6:c7:8d:f1:e5:0d:33:
ef:2f:e5:ca:d5:3e:0b:85:7f:a2:5d:45:c0:89:a8:d5:04:b6:
a1:c1:79:92:ed:6e:9d:cf:8d:b9:8b:83:55:8a:d9:b8:53:de:
1a:41:0b:8c:ed:60:43:26:82:b5:8a:bf:c2:6a:4b:72:4b:3b:
17:bd:59:a2:47:ff:fe:79:38:c7:3e:62:bb:cf:9e:96:46:b9:
89:db:bb:eb:69:eb:84:e8:8b:27:47:99:40:14:30:1b:4f:a9:
da:af:43:08:d9:b6:99:55:42:39:f3:5e:00:65:97:ea:2a:16:
81:d1:a6:b9:12:2a:86:ed:8a:68:96:76:47:fb:dc:8d:75:5f:
7e:19:f0:c4:91:c7:54:aa:a8:57:61:09:ca:10:c8:2a:76:7e:
73:ee:e2:16:ba:c6:5c:f5:1b:87:75:43:f5:51:bc:05:1e:93:
c5:9c:5d:b9:b3:a8:4a:d5:59:0c:11:6f:b2:f8:fe:88:fd:58:
b4:99:5b:ed:01:1a:40:50:45:d8:52:b7:2d:2f:77:23:3a:78:
87:b1:d0:b5:37:19:f0:cd:10:3d:16:6b:94:98:87:3d:92:4b:
6d:a7:d4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:06:40 2024 by rpki-client on console-fra.rpki-client.org