Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15B3E7AAFF9B11EEB1137430017001B1.roa
File: 15B3E7AAFF9B11EEB1137430017001B1.roa (raw, json)
Hash identifier: 2LN9qRnreqCELyqjfhAGtoyY+qCIOl96qhhhFXuj6EA=
Subject key identifier: 29:11:45:4A:A5:E6:74:C7:94:5E:4F:02:D3:1E:EA:96:9C:3E:55:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE80
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15B3E7AAFF9B11EEB1137430017001B1.roa
Signing time: Sun 21 Apr 2024 04:53:24 +0000
ROA not before: Sun 21 Apr 2024 04:53:21 +0000
ROA not after: Sun 28 Apr 2024 04:53:21 +0000
asID: 140403
IP address blocks: 154.89.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44672 (0xae80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 21 04:53:21 2024 GMT
Not After : Apr 28 04:53:21 2024 GMT
Subject: CN=66249bc4-f6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:73:b3:bc:73:be:70:a2:d6:a8:26:7c:c1:
a0:ec:da:c9:57:91:56:84:f2:9e:fd:ab:0e:4a:9f:
f4:ca:6d:0a:43:50:5d:47:17:fb:21:b4:19:3a:6a:
d5:f2:4e:dc:b1:a2:24:fa:a6:fc:19:6f:00:98:4f:
47:36:2b:d1:e8:dc:7e:4f:02:3c:02:90:19:d7:ae:
4c:57:2c:b6:27:7f:07:c7:e2:ca:2b:bc:5c:a7:58:
32:75:b9:66:bf:7d:0a:34:73:08:3c:b0:61:20:d5:
71:32:09:5a:75:b9:8a:1a:44:cf:0b:b8:25:b5:ab:
c7:5e:6e:58:b2:5e:03:c6:d5:74:81:e8:80:54:af:
95:9e:2e:96:6f:81:88:7a:c0:ec:06:de:3e:6e:91:
9c:e4:0d:6c:ee:1c:19:7a:1e:1d:4d:9b:3a:cb:0a:
77:2a:6f:f5:16:71:11:86:56:64:d1:fc:d7:2a:78:
2a:12:a6:da:53:9e:ad:df:a3:6b:3f:a7:2f:a8:f1:
68:75:7d:0f:40:8c:04:28:9b:34:55:44:ab:39:83:
6d:8f:88:9c:d0:78:4e:1a:a6:42:95:09:15:ba:87:
71:ab:65:55:cf:3f:9d:56:b6:1b:0c:49:71:d9:13:
f2:d1:d1:fe:1b:16:81:0c:62:1d:17:70:18:f7:68:
bb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:11:45:4A:A5:E6:74:C7:94:5E:4F:02:D3:1E:EA:96:9C:3E:55:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15B3E7AAFF9B11EEB1137430017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.3.0/24
Signature Algorithm: sha256WithRSAEncryption
00:3e:e9:5a:f9:de:75:b9:94:73:9c:8f:46:17:4f:18:dd:e9:
9e:d0:38:55:2a:0b:49:1f:cf:37:00:bf:7a:25:0e:f9:7a:68:
1b:30:21:88:86:38:c5:ad:e3:ed:58:61:23:ec:5e:44:01:30:
4d:48:2d:04:ee:39:1f:d5:83:56:f5:f2:38:d4:05:a7:3c:2b:
60:92:ac:92:82:81:09:e2:6f:f7:46:8f:49:48:15:c6:03:78:
b8:a0:93:49:44:56:dd:49:f7:6e:7e:59:d0:9c:88:4c:ee:dc:
b7:84:b4:77:ea:28:47:9c:1e:26:76:89:8c:7c:54:fd:53:a2:
1c:de:da:26:6c:d5:05:f2:d8:bb:6c:ee:25:8d:18:cf:a3:50:
a1:b8:89:d5:d5:11:f9:ff:90:b4:2a:a4:ba:cd:9a:4f:12:df:
a9:5f:fb:b9:1c:d9:07:a7:a2:d4:ee:30:ed:e0:02:6f:39:01:
78:8d:ea:ee:35:4b:1c:67:85:20:d2:05:ad:87:37:1a:d1:b1:
4b:5e:57:be:84:db:b5:ec:81:03:88:fc:fd:5c:85:e0:95:68:
b3:d0:0e:c5:2d:cb:fd:ee:9b:b7:6e:3b:f7:75:7f:71:ac:c5:
2b:1b:84:96:23:d4:a6:16:3d:54:03:2a:52:3c:09:f8:2d:29:
f2:b9:cd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:55:41 2024 by rpki-client on console-ams.rpki-client.org