Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1582829C4A6311EF98351EA1762E951A.roa
File: 1582829C4A6311EF98351EA1762E951A.roa (raw, json)
Hash identifier: zKfbCADcAvMT70z7BYsUhtR99/dcx7SSMCX3hSS2U0A=
Subject key identifier: 5F:DF:A2:16:4C:07:FD:C8:B3:CA:46:64:53:6E:A6:20:CA:62:46:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D6F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1582829C4A6311EF98351EA1762E951A.roa
Signing time: Thu 25 Jul 2024 08:51:29 +0000
ROA not before: Thu 25 Jul 2024 08:51:26 +0000
ROA not after: Sat 03 Aug 2024 08:51:26 +0000
asID: 22773
IP address blocks: 154.212.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55032 (0xd6f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 08:51:26 2024 GMT
Not After : Aug 3 08:51:26 2024 GMT
Subject: CN=66a21211-908c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:02:02:05:5a:c5:23:7b:4a:55:0e:46:d3:80:
8c:a1:7e:a0:cc:5c:5c:cf:3c:53:e5:4f:61:25:dc:
78:1c:04:77:59:a8:af:cf:22:c6:e6:80:ac:2c:cb:
27:8c:0c:65:4c:d3:2a:08:ec:c9:e6:0e:aa:75:18:
8a:65:c7:c7:be:ec:bf:98:a1:97:33:36:45:d1:84:
70:40:60:ec:7b:4f:05:dd:b4:51:c8:d7:27:ee:09:
f5:f2:0d:39:6c:fe:44:ab:ba:24:73:2c:99:38:a2:
93:37:ef:12:db:f2:78:49:52:0b:30:71:52:12:ea:
53:a1:40:62:89:21:d3:29:5a:a2:0c:0d:b4:9c:68:
52:0c:74:d3:1d:69:04:e4:50:5d:23:e1:ae:2a:08:
7c:68:9e:8d:12:06:b4:e3:9d:9f:21:5b:0a:fc:59:
fa:b0:28:d8:82:c8:9d:13:43:3b:1b:75:6d:e7:43:
00:36:f6:b8:09:ea:5e:6d:42:0c:c8:ad:71:67:1d:
f3:41:34:13:f2:0a:9b:93:87:72:4e:b5:b8:93:57:
cd:1b:3c:9e:08:bc:23:62:46:b5:1a:be:b5:a0:93:
fa:70:b1:df:66:70:ff:4a:19:2e:01:c8:9d:ca:05:
3c:61:3d:48:cb:27:c8:7b:08:fb:82:a8:23:fd:6a:
ee:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DF:A2:16:4C:07:FD:C8:B3:CA:46:64:53:6E:A6:20:CA:62:46:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1582829C4A6311EF98351EA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.16.0/22
Signature Algorithm: sha256WithRSAEncryption
20:07:0e:22:99:aa:ea:e1:ad:00:f1:97:a0:ff:b8:cb:cc:d9:
95:b5:75:f0:0e:b1:a7:16:99:9a:63:ac:39:4e:a7:7a:03:65:
e0:a4:20:87:d0:ce:c4:e8:7a:a3:85:d6:88:9e:20:1a:b4:ed:
c7:19:af:86:81:f7:71:50:9e:e9:3a:39:12:fb:27:13:4d:36:
3f:71:b8:1d:e8:91:a4:b8:dc:b2:b9:34:21:4c:33:97:4a:24:
4e:13:22:28:45:94:2a:42:8c:10:cc:41:3c:ee:53:ab:c0:4e:
2c:47:82:fe:97:8b:1f:80:09:ce:06:bd:02:c7:86:58:df:6c:
55:60:fc:77:02:a2:a7:c3:33:95:f6:c7:d4:03:49:42:ee:d6:
b5:37:3a:2c:71:2f:13:34:43:09:1a:c0:20:f1:6e:05:7d:49:
28:6a:cd:80:94:0b:d3:cf:7f:d2:2c:90:34:e4:06:80:eb:cb:
0c:b2:45:0b:37:6b:b7:dd:c5:81:3e:e8:ed:d0:57:62:18:7b:
99:03:5c:5a:05:9c:52:8c:d4:1a:78:eb:9a:5b:24:bb:ca:ca:
9c:74:31:bb:29:e1:f4:8c:a8:40:00:f8:71:b4:8f:c4:c7:ab:
11:dc:23:09:f0:07:2a:b0:4b:ef:0e:f9:19:3e:b5:52:1e:cf:
d3:3f:92:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:57:22 2024 by rpki-client on console-fra.rpki-client.org