Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B671EF2014311EFADFDB22D017001B1.roa
File: 1B671EF2014311EFADFDB22D017001B1.roa (raw, json)
Hash identifier: fWzh7LjKzMhbnmyNTIk3w6rH6yXnVX6u0l1+v6IEDVM=
Subject key identifier: 12:C0:F8:FB:56:DD:66:E9:06:1D:97:4B:18:C2:C5:EB:10:EB:4B:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AEE1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B671EF2014311EFADFDB22D017001B1.roa
Signing time: Tue 23 Apr 2024 07:28:41 +0000
ROA not before: Tue 23 Apr 2024 07:28:37 +0000
ROA not after: Sat 11 May 2024 07:28:37 +0000
asID: 5650
IP address blocks: 154.205.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44769 (0xaee1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 07:28:37 2024 GMT
Not After : May 11 07:28:37 2024 GMT
Subject: CN=66276328-a4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:6e:18:4a:a6:ee:48:a5:69:bd:e4:74:88:
d7:90:8f:02:d8:aa:34:1f:33:4d:07:8f:ac:8b:ba:
16:a9:da:4c:51:3b:20:67:ee:18:43:90:19:11:d9:
c0:c2:0d:13:29:9b:dd:e1:5a:d5:85:eb:86:f9:48:
db:e2:41:40:31:43:09:b9:8c:08:dc:a6:de:be:16:
f9:33:76:3d:e6:4d:50:b6:19:f3:fc:0d:ab:49:96:
4e:d9:05:82:99:86:cb:ee:fa:5a:39:7a:4a:7e:e1:
dc:cd:c1:01:28:e8:f8:65:94:2c:d3:5f:2d:2e:51:
73:19:59:b6:76:fe:af:cf:fb:c2:16:3c:0b:e4:34:
1b:83:ee:23:c9:fb:91:02:49:e8:90:f0:ac:ef:64:
a2:98:80:40:7e:14:6b:c8:b7:c9:6b:f3:5a:4c:ce:
a1:88:f5:ee:a9:c3:81:39:a1:4b:31:91:61:d8:48:
c1:43:84:3b:b4:25:43:ad:81:1c:71:1b:cb:65:69:
c3:c5:b3:39:c5:e4:07:42:02:8f:0e:5a:4c:f4:13:
e7:20:76:df:22:ad:20:dc:8b:fb:f1:2c:4c:ac:3e:
61:db:4a:73:f6:fe:e8:5e:fa:d6:41:24:9f:89:5c:
9e:c4:14:a4:16:b5:62:f7:67:a5:26:3a:a1:13:a9:
b3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C0:F8:FB:56:DD:66:E9:06:1D:97:4B:18:C2:C5:EB:10:EB:4B:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B671EF2014311EFADFDB22D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.176.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:e1:be:bf:88:21:e3:52:3a:33:78:18:00:53:a2:af:a2:3a:
04:c8:3b:ae:63:d0:c9:39:68:76:28:23:6c:f6:20:d1:a7:9a:
3c:f5:c3:61:d7:6e:73:a0:2f:f5:a4:55:e7:64:57:86:75:60:
52:44:31:6b:ef:63:07:db:1a:d0:e0:f0:35:b1:02:f3:97:e9:
f2:27:9b:63:b7:0b:29:27:5e:06:d6:84:9e:0b:58:30:55:13:
2a:69:b1:15:70:37:7f:a9:19:e9:f8:0e:67:89:f1:4c:eb:64:
b6:5e:b0:8a:6e:a7:06:0a:e7:34:a2:19:b8:6b:7f:78:5b:be:
61:fd:1d:04:cc:1a:af:51:bf:5f:59:5e:d4:6e:89:57:20:53:
dd:bc:07:d3:10:03:60:24:92:cf:ff:61:8d:4b:3e:9f:9f:ed:
b8:f9:39:58:31:22:a1:41:85:1b:01:91:2b:8d:cf:e4:09:9c:
9e:0f:16:2c:55:d7:42:a7:df:1e:5e:d4:9f:03:9c:a7:59:26:
48:e7:c9:aa:d1:bf:5d:ee:b2:1c:75:66:41:fb:4a:21:b4:02:
63:fd:21:f3:0b:3f:9d:4a:96:e5:cb:8e:4e:98:67:be:3b:2e:
e9:4e:bf:6a:3e:3e:10:1a:3e:f8:c8:c4:3b:17:83:04:0f:d6:
47:ad:27:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:46 2024 by rpki-client on console-fra.rpki-client.org