Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13920390128211EFB3DE1B41017001B1.roa
File: 13920390128211EFB3DE1B41017001B1.roa (raw, json)
Hash identifier: JeXquXYN+tLxtTFvBQqAAzjq64n1FadqWuCSFk4izFs=
Subject key identifier: 2C:75:6D:77:55:3A:F0:95:5D:6F:5D:D0:7B:4C:16:FC:BD:94:E9:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B787
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13920390128211EFB3DE1B41017001B1.roa
Signing time: Wed 15 May 2024 06:12:16 +0000
ROA not before: Wed 15 May 2024 06:12:12 +0000
ROA not after: Sun 26 May 2024 06:12:12 +0000
asID: 139471
IP address blocks: 154.215.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46983 (0xb787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 06:12:12 2024 GMT
Not After : May 26 06:12:12 2024 GMT
Subject: CN=6644523f-0b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:21:df:45:e5:b9:27:81:58:a4:0d:b8:07:
e9:18:a1:2c:ce:29:22:35:82:f3:9d:a1:9e:cd:2c:
e3:00:e0:de:b1:ce:a6:be:99:38:61:f6:40:a7:35:
01:40:ed:07:cf:92:0a:0d:d5:33:f9:4e:3d:e6:9a:
f9:36:ba:3e:05:b5:c9:5c:dd:b4:0e:ba:f8:f7:eb:
7c:cd:30:40:7a:bc:83:35:fd:f6:df:7a:8f:bb:8e:
dd:92:62:f4:c3:3a:4d:43:ef:2b:6b:e0:12:a8:35:
4b:58:4d:1c:6e:ab:d5:37:bf:89:54:40:22:9c:eb:
e1:a0:7d:79:86:84:0b:49:11:d5:d4:b3:e0:fc:2a:
1b:d7:2a:68:92:15:19:49:98:8d:98:02:ae:0c:ea:
fd:04:b2:6d:29:54:8e:6c:df:e9:df:8b:8c:60:a8:
94:05:9e:23:fe:eb:ed:92:17:9a:a0:14:1b:7a:c8:
27:cb:cc:c6:62:5f:c2:48:99:4e:fc:0b:bb:eb:ac:
2d:93:4c:33:38:23:1c:e9:df:24:59:b7:8a:c6:44:
4c:8f:c7:12:4b:2a:8e:8f:0e:63:59:16:18:79:b7:
2c:48:b1:9e:6f:74:95:4f:6e:1b:4a:ed:ee:05:e5:
b3:d0:ac:6b:bc:8d:0e:02:3c:86:70:fd:6d:cd:78:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:75:6D:77:55:3A:F0:95:5D:6F:5D:D0:7B:4C:16:FC:BD:94:E9:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13920390128211EFB3DE1B41017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.16.0/20
Signature Algorithm: sha256WithRSAEncryption
38:1f:49:81:f8:9c:76:c7:46:e8:d6:9a:1e:65:b8:37:b7:b0:
03:80:c2:b5:47:03:1b:ec:ab:a5:b3:3e:d2:be:19:d5:97:39:
93:4b:ee:06:16:f0:73:28:98:a8:32:23:dd:c9:b0:ee:6e:cc:
9a:dd:83:ba:1d:79:2a:90:31:a2:f2:95:c5:5d:a2:50:1f:96:
39:ff:1b:a3:c5:f6:7e:06:7a:fe:74:fe:7d:59:17:62:1b:64:
bd:97:6d:ef:9e:37:dd:b8:43:b8:29:a1:6c:8d:fd:56:a2:7d:
70:40:ab:83:22:12:a1:0e:90:78:f1:b9:78:c9:de:87:e1:35:
01:83:75:cf:a7:44:fb:8c:9e:50:ca:d7:55:3c:91:21:d1:33:
96:c0:a2:58:56:1e:32:95:38:76:83:5c:78:ac:54:29:3e:2f:
e9:7c:7b:17:5b:35:af:20:09:8a:b5:42:75:fe:92:29:b4:32:
1c:d9:77:94:45:ae:78:2d:4e:8f:72:c2:a8:64:41:a2:1e:8d:
25:68:64:a8:4d:23:05:09:ff:72:f9:38:1a:72:cf:b6:15:e5:
7d:62:e6:e8:b9:11:d7:16:97:52:74:5d:b7:f2:e6:d1:3b:a6:
3d:ea:5a:25:93:29:90:76:1a:13:51:32:df:fb:69:aa:c4:c2:
01:28:fc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 02:18:59 2024 by rpki-client on console-fra.rpki-client.org