Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25644E564A6411EF98ADBFA9762E951A.roa
File: 25644E564A6411EF98ADBFA9762E951A.roa (raw, json)
Hash identifier: xkGIusnS5IItlOVc+Bs/6rzuUQdGpj2v9CG2EKOZpdQ=
Subject key identifier: 27:06:31:4F:00:9E:06:25:DA:DF:2B:AD:12:85:22:B6:68:0F:E5:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D706
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25644E564A6411EF98ADBFA9762E951A.roa
Signing time: Thu 25 Jul 2024 08:59:06 +0000
ROA not before: Thu 25 Jul 2024 08:59:02 +0000
ROA not after: Sat 03 Aug 2024 08:59:02 +0000
asID: 22773
IP address blocks: 154.88.18.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55046 (0xd706)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 08:59:02 2024 GMT
Not After : Aug 3 08:59:02 2024 GMT
Subject: CN=66a213da-8dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:68:c6:8f:52:4a:78:fe:3a:41:a8:0b:50:
76:92:d1:93:e2:cd:ff:0c:1c:1b:51:4c:61:87:77:
70:f9:8d:ef:21:38:d6:9b:ae:56:99:38:e4:c3:5b:
6f:30:b2:01:aa:f5:a1:de:09:c0:77:fc:43:ad:ea:
0a:61:bc:64:01:06:93:95:a1:f1:52:99:a9:05:5d:
1f:f4:f0:06:5c:50:1d:2d:e2:41:84:7a:d4:fc:36:
0f:a5:fe:5d:b6:65:ba:23:39:c8:b8:2c:f1:4c:13:
31:a3:3e:aa:c5:fc:31:5a:6f:bc:9d:f8:e3:bc:64:
6a:65:85:8e:6c:79:32:27:f3:f1:05:2a:72:8a:bc:
df:8d:6f:43:ae:02:d4:42:20:6d:4a:f8:09:be:6e:
bf:a8:9e:95:16:e8:07:26:02:7e:50:14:79:aa:b1:
c0:1c:a1:fe:c5:19:eb:96:17:01:a8:9f:9d:0c:47:
9b:60:d2:f2:be:f6:69:79:69:aa:11:0a:b6:2f:1b:
cf:5a:62:6e:88:f0:a9:21:e5:9f:1b:44:50:40:9e:
ef:43:6e:82:e2:f9:5d:1c:ff:4f:cf:4e:bf:fc:91:
5d:27:d4:74:e3:20:8d:d9:b0:84:55:91:3f:7c:aa:
be:23:7c:d9:16:99:aa:f7:cc:bd:c6:cf:95:75:84:
61:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:06:31:4F:00:9E:06:25:DA:DF:2B:AD:12:85:22:B6:68:0F:E5:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25644E564A6411EF98ADBFA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.18.0/23
Signature Algorithm: sha256WithRSAEncryption
67:86:41:0b:12:bf:67:cd:53:e7:da:10:49:26:e0:da:13:ee:
b6:cb:ab:52:c8:01:b9:59:36:b3:95:19:35:8a:7f:14:69:72:
c1:e5:e0:19:9b:40:13:1c:0c:19:53:a8:38:aa:6a:1e:a3:2b:
23:f8:39:eb:ff:2e:69:11:72:2d:5f:a4:67:c8:bf:8b:6c:ae:
af:1d:de:3a:f0:37:49:27:9c:3f:65:16:ab:8c:04:a0:ae:ae:
67:9b:0e:62:b1:76:b4:e9:6b:1f:dc:60:fd:8b:93:ae:43:2c:
36:c1:64:ab:bd:d6:2c:2d:7b:62:9b:a9:d1:ea:ca:95:4e:a6:
1e:be:02:57:e8:3c:af:b7:a1:ab:82:50:d9:c9:c4:69:e8:08:
8f:82:7b:cb:5f:01:d2:01:81:5e:a6:86:5a:b2:f4:f6:e9:c2:
21:6c:8d:9e:73:a3:69:73:3c:54:8e:e4:5f:6d:d4:3e:98:da:
5b:ce:e1:9c:d9:81:d8:df:18:96:0a:81:61:03:f7:a9:af:41:
43:3d:b7:39:17:55:a2:9f:4c:78:f0:11:f7:40:fa:04:4b:1a:
56:30:f0:16:3d:d2:d9:1e:c1:e8:eb:9e:b8:5d:96:17:7d:c6:
4f:ba:5c:5e:b4:8d:88:ca:69:af:30:19:7c:cf:40:43:5e:af:
d2:a3:72:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:51 2024 by rpki-client on console-ams.rpki-client.org