Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22FA78F20F3111EFA608C42B017001B1.roa
File: 22FA78F20F3111EFA608C42B017001B1.roa (raw, json)
Hash identifier: XIxcXJKjYeLtBW2QqMdCxmEq241a9M6Bcyw4GkwJdtM=
Subject key identifier: 09:C2:44:D1:CA:BF:41:15:57:DB:61:11:A6:B0:E0:5B:CC:27:C8:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B6D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22FA78F20F3111EFA608C42B017001B1.roa
Signing time: Sat 11 May 2024 00:55:19 +0000
ROA not before: Sat 11 May 2024 00:00:15 +0000
ROA not after: Tue 21 May 2024 00:00:15 +0000
asID: 44559
IP address blocks: 154.208.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46807 (0xb6d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 00:00:15 2024 GMT
Not After : May 21 00:00:15 2024 GMT
Subject: CN=663ec1f7-3f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:57:10:77:f5:47:ce:82:7e:e9:95:ed:64:8a:
cf:da:e9:37:ea:c7:00:d1:77:2b:d3:4d:8b:d4:f3:
33:36:de:4b:97:b0:40:28:1b:ff:70:1a:16:08:2b:
ad:63:d9:5a:3b:98:6f:61:8e:7f:fd:02:df:96:ad:
e2:b0:21:91:f8:a9:ca:e1:fe:6e:9e:c1:45:c5:28:
5c:58:12:43:79:05:62:c7:1a:ee:f5:6b:6a:c3:13:
5a:7f:bd:db:fa:d7:13:1b:1b:13:9f:cb:a7:23:a4:
6d:d4:22:41:da:58:de:a5:e8:52:a4:9d:d4:04:2b:
88:28:23:ae:b0:61:c5:de:f3:fd:6a:77:a7:6c:5a:
5a:f2:69:9d:7d:1c:76:f9:12:99:56:e5:28:ec:3f:
0f:d8:e7:73:98:dd:61:56:10:f9:dd:e2:8f:c1:f5:
09:e7:cd:b5:27:52:94:95:b4:f3:c2:b5:7c:25:67:
7f:15:92:26:57:b7:67:7a:e1:b3:81:de:80:f0:85:
bf:2b:b4:84:ea:ff:8a:5e:c0:73:5e:82:dc:06:2e:
36:9c:e4:fa:24:d1:13:2b:8d:a7:90:55:39:51:91:
63:da:80:ff:cf:e3:60:d6:a5:ac:93:84:9a:b2:cd:
3b:20:82:90:7e:25:da:4b:2a:bf:e5:3e:5c:6a:ff:
a8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C2:44:D1:CA:BF:41:15:57:DB:61:11:A6:B0:E0:5B:CC:27:C8:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22FA78F20F3111EFA608C42B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.176.0/20
Signature Algorithm: sha256WithRSAEncryption
c3:61:d3:72:d9:30:a7:35:c4:32:9f:30:bc:fa:f2:3b:e4:30:
fd:89:6a:46:19:80:cc:23:bf:15:b1:5d:6f:c0:d2:d3:5b:09:
58:e7:3d:b3:79:4e:52:06:83:69:da:e4:2b:5b:4a:73:9f:90:
b1:55:1f:5c:cb:29:ea:c0:b7:bb:6b:a1:a8:9f:53:97:5e:d4:
60:7f:ee:e4:fd:07:0a:ba:f2:cf:4e:ac:68:f3:ba:0d:b6:17:
16:a0:16:f7:e7:7e:e0:d7:3d:36:85:65:d3:ea:91:a0:83:49:
e6:6b:c9:cb:4b:fe:59:a0:4d:b7:cb:90:21:24:54:80:56:11:
ca:da:63:83:5c:d8:c6:76:aa:18:07:38:75:03:65:b7:6f:50:
e8:fe:23:5c:ac:67:7a:7b:0f:26:5a:64:59:1e:52:f4:d3:15:
03:a9:e2:3c:ae:31:95:bb:8e:ea:57:48:40:64:25:53:54:14:
a5:55:54:79:13:a9:af:0e:f7:a6:81:68:d1:e8:c3:94:eb:06:
00:e8:b0:06:46:43:ec:30:f7:38:2d:51:ad:e4:15:26:06:bb:
fd:ee:e1:9b:39:ea:9f:3e:86:c9:2b:a5:d7:4f:76:3c:1b:98:
d4:99:a3:c9:5f:80:da:54:5a:7c:40:01:de:a6:20:05:1f:8e:
dd:3f:00:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:43 2024 by rpki-client on console-fra.rpki-client.org