Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/269C822C155711EEA32E52364AD9E6FC.roa
File: 269C822C155711EEA32E52364AD9E6FC.roa (raw, json)
Hash identifier: 4YIT5RSRuE02Fl5yaM8KNiQgUoUumaWcMXmLdJeZy4g=
Subject key identifier: 25:4C:0A:B2:36:66:7F:67:37:19:1B:18:7A:36:08:59:98:EF:3B:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2E27
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/269C822C155711EEA32E52364AD9E6FC.roa
Signing time: Wed 28 Jun 2023 01:57:35 +0000
ROA not before: Wed 28 Jun 2023 01:57:31 +0000
ROA not after: Wed 24 Apr 2024 01:57:31 +0000
asID: 63888
IP address blocks: 154.209.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11815 (0x2e27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 01:57:31 2023 GMT
Not After : Apr 24 01:57:31 2024 GMT
Subject: CN=649b938f-c423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:32:cc:aa:02:76:d0:ec:19:c7:81:be:6c:
b8:bd:b0:b1:bd:a9:57:be:90:7b:dd:98:d1:4c:7b:
4f:df:e9:0d:87:6c:08:19:00:52:18:89:19:53:f3:
29:62:35:61:4f:98:a8:9d:dc:b0:61:d2:ba:70:d2:
ca:dc:60:88:a9:f2:1c:a6:61:41:80:c4:20:93:78:
59:e9:08:dc:6d:f4:ff:87:d1:43:f0:f2:d9:6b:3f:
fd:78:b3:e3:cc:67:48:95:ed:14:72:8a:1d:5a:3e:
f9:a6:34:19:3d:59:56:0e:9f:57:41:31:f1:8a:c2:
e1:3f:c0:2e:e5:ba:be:f6:e1:f8:91:79:0d:9b:32:
07:a5:3b:4f:cc:49:21:54:79:1f:cb:37:3d:fc:c1:
4f:ff:04:94:c2:28:96:5e:6a:f5:a3:7c:94:e8:64:
7d:25:15:c1:aa:59:40:49:21:18:67:01:c8:67:12:
ef:34:44:b5:a6:a3:fe:c4:8a:0b:40:13:48:6a:37:
f6:39:c6:6b:10:7b:65:79:62:4a:b7:82:c4:27:b4:
4c:e4:79:4e:8a:a8:f9:fa:ac:73:61:70:9c:05:f3:
e0:ba:8d:80:de:82:4f:65:a3:83:34:e8:e6:06:a4:
f0:0a:24:17:e4:40:89:c4:75:fe:bd:77:f8:62:f6:
65:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4C:0A:B2:36:66:7F:67:37:19:1B:18:7A:36:08:59:98:EF:3B:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/269C822C155711EEA32E52364AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.67.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:21:80:70:b1:5b:17:bd:d6:05:83:06:4f:cd:44:56:4e:ce:
2f:ea:2b:86:67:07:0a:ba:3c:64:65:b5:bc:2d:d5:2d:93:66:
ef:aa:df:f9:01:06:a1:a2:46:65:44:d2:e2:4d:a4:d3:c1:c8:
1a:1b:f9:25:b5:b8:ab:ee:7a:13:00:1d:5e:f4:32:9a:a3:6c:
68:ec:f6:0c:9a:d4:b9:09:bc:6c:3e:39:2e:c6:ab:10:ef:c2:
2d:72:bf:fa:d5:4b:f6:bd:4b:6e:9a:70:fa:25:a3:1e:45:91:
d7:05:98:33:16:59:1b:2a:bc:df:2e:5e:a7:35:8a:86:73:25:
98:45:a5:05:42:20:22:98:10:44:d2:84:35:ed:b2:52:36:c6:
2e:32:45:21:55:5f:1a:d8:9d:3d:b6:c3:ad:ff:f0:c8:0c:00:
4c:83:d1:83:19:aa:76:e1:73:94:20:bc:77:a0:6c:4c:e0:fd:
d2:ca:0c:ad:5f:e1:15:17:c2:94:bc:39:80:fb:96:96:3c:ac:
4d:d2:21:24:61:ca:5c:53:21:d6:7d:7a:1f:37:b2:1d:6b:a7:
d6:95:1e:a4:7a:d3:58:8d:54:5f:8b:52:53:21:ab:47:47:05:
04:53:a7:ae:66:43:44:5e:d9:45:f7:f2:1d:0e:f2:f3:f5:99:
26:e2:ef:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:43 2024 by rpki-client on console-ams.rpki-client.org