Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/244D1D321A3A11EE8A9915104AD9E6FC.roa
File: 244D1D321A3A11EE8A9915104AD9E6FC.roa (raw, json)
Hash identifier: 4hw4zBQgJiz8Vf6CG3vQEnIjWurtmi/8tbY7kRovxig=
Subject key identifier: 40:AF:14:B8:FD:3F:3C:23:00:35:26:74:4E:B4:2E:48:54:8A:7C:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3003
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/244D1D321A3A11EE8A9915104AD9E6FC.roa
Signing time: Tue 04 Jul 2023 07:12:32 +0000
ROA not before: Tue 04 Jul 2023 07:12:28 +0000
ROA not after: Wed 24 Apr 2024 07:12:28 +0000
asID: 63888
IP address blocks: 154.205.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12291 (0x3003)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 07:12:28 2023 GMT
Not After : Apr 24 07:12:28 2024 GMT
Subject: CN=64a3c65f-579f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:72:32:4d:a9:18:ac:7e:6f:a8:20:83:45:98:
dc:da:03:0f:ff:f9:62:ec:4d:a7:05:92:1b:a3:46:
0c:bd:06:ab:1f:4d:98:e6:9a:35:6e:24:0c:70:c4:
5b:61:f3:69:a3:1d:4f:c9:4a:75:70:5f:01:0b:71:
9e:34:93:0d:18:67:d0:02:50:6d:06:02:ac:8c:48:
3f:17:7a:22:46:18:a6:90:40:84:f2:86:7d:1b:ff:
47:6d:71:6a:57:15:25:c8:72:de:77:cf:32:29:7b:
de:f0:7f:c1:1c:5d:44:b0:30:0d:57:e6:b5:7b:99:
ad:54:c7:68:98:67:7b:09:4a:87:8d:06:bc:30:67:
98:28:3f:99:7c:b0:5e:04:5a:cb:39:e4:e0:44:65:
e1:f1:a2:4c:0e:ef:e9:41:a6:c0:d6:88:5c:b7:e5:
f3:2d:5e:ee:8f:b8:cb:48:2e:61:07:21:ea:b6:93:
53:df:36:c4:6d:de:6c:ca:73:e7:57:4a:ec:51:58:
05:c6:aa:c1:a7:0b:bc:5e:ae:0d:60:98:e1:dc:76:
aa:2b:7f:63:79:44:16:25:e7:97:02:76:70:06:04:
fe:42:88:aa:14:fa:e9:4e:b9:fd:34:c0:4a:8d:7b:
b7:61:2b:d4:35:c5:13:d3:70:e5:db:9f:7f:f9:7e:
ce:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AF:14:B8:FD:3F:3C:23:00:35:26:74:4E:B4:2E:48:54:8A:7C:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/244D1D321A3A11EE8A9915104AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.42.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:cc:6a:32:4c:6e:0c:cb:00:b3:60:91:bc:30:87:bc:a7:68:
ed:cb:21:36:24:de:8c:e0:47:8e:de:6a:e7:6a:f2:fd:98:19:
28:c8:1b:32:f7:91:0f:3c:57:70:1f:d4:1d:43:91:ae:c9:1d:
19:02:a4:6c:6c:58:e0:d5:eb:56:81:ca:9c:4e:54:42:1f:16:
17:a0:d8:42:98:15:33:be:b5:53:b9:30:b9:56:2b:91:fc:e9:
e3:d9:e4:2a:5f:9e:d7:60:92:5d:22:a8:8f:24:99:c7:30:ea:
22:29:ed:88:66:7c:bd:37:10:ce:1a:75:76:54:bb:22:5e:46:
53:c1:d0:8c:f9:ec:80:54:59:8f:eb:23:4b:76:fc:60:6f:72:
6f:45:e9:e0:3a:d4:ed:ac:36:ff:cd:19:3b:ab:ed:70:64:39:
70:5a:24:02:9e:ad:0c:0b:9d:f5:02:25:bb:2c:0d:8b:90:78:
bc:3b:5b:2f:5c:32:cf:28:a3:b6:de:b6:bd:cb:41:5c:4b:d1:
94:d2:f0:12:54:11:35:b0:d8:ef:34:b1:66:cc:ac:58:af:5e:
e4:2e:c9:57:8b:62:46:9c:97:64:e3:41:02:eb:fc:14:97:42:
cc:c8:5e:8d:66:de:62:75:a8:84:22:e2:84:a0:9c:ee:31:a4:
77:e8:11:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:43 2024 by rpki-client on console-ams.rpki-client.org