Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28ED3D989F9211EFBDD7F6BE762E951A.roa
File: 28ED3D989F9211EFBDD7F6BE762E951A.roa (raw, json)
Hash identifier: NKxG5cKrHVV1xUkZ9K0LIMleQmq2F7ab/I/SPt/Wt8Q=
Subject key identifier: CD:71:BA:81:63:3F:35:F1:E0:9A:28:F1:9C:D9:37:7A:9F:6F:6A:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010B7A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28ED3D989F9211EFBDD7F6BE762E951A.roa
Signing time: Sun 10 Nov 2024 18:32:37 +0000
ROA not before: Sun 10 Nov 2024 18:32:34 +0000
ROA not after: Thu 21 Nov 2024 18:32:34 +0000
asID: 63139
IP address blocks: 154.223.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68474 (0x10b7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 10 18:32:34 2024 GMT
Not After : Nov 21 18:32:34 2024 GMT
Subject: CN=6730fc45-fc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:6f:66:32:6d:30:f7:db:34:9e:c0:7c:1e:
3c:6f:8c:3f:fb:42:7c:fd:26:0f:d7:16:46:af:ee:
7c:e7:8f:18:5f:f5:b7:0d:7e:d1:b8:1a:04:2b:6a:
c8:f6:6c:c3:1f:b4:48:ca:05:9f:6d:40:52:14:21:
06:81:81:ed:3c:b9:3f:ea:56:40:ef:41:16:01:b3:
36:4c:7a:50:98:88:37:25:d4:23:af:b8:30:9c:db:
22:83:db:ad:84:85:b0:50:fc:cd:36:f0:29:df:33:
a6:67:e4:53:f6:2a:c9:11:b1:8c:cb:9d:86:4e:88:
3f:5c:69:ea:ae:c0:99:5a:75:5d:c3:b3:a4:88:7e:
5b:b9:58:ca:74:bb:dc:68:5c:38:0e:20:03:04:df:
c0:9b:61:9b:ac:b9:81:3d:dd:4c:5c:28:ef:38:70:
b9:e5:4a:0e:c2:b6:d8:b4:b3:4c:81:21:32:00:ba:
88:aa:7b:20:4d:fe:e7:cf:40:4c:4d:3d:b6:07:45:
11:93:ee:80:b5:f5:92:78:8c:25:45:46:96:cd:46:
37:4b:9b:53:03:20:7d:86:5e:74:f6:fc:c7:3d:c0:
81:cd:a4:35:33:7d:f6:76:97:62:67:97:60:cb:7e:
99:bb:02:fa:72:2d:df:13:a0:ce:85:72:e2:9b:1a:
0f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:71:BA:81:63:3F:35:F1:E0:9A:28:F1:9C:D9:37:7A:9F:6F:6A:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28ED3D989F9211EFBDD7F6BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.27.0/24
Signature Algorithm: sha256WithRSAEncryption
24:3f:8c:df:a8:5f:f9:0b:6d:23:a8:9d:f0:ad:59:1e:02:ec:
5e:54:35:0e:67:a2:10:f9:01:93:cf:34:d5:05:4c:c9:5b:0e:
e6:47:9c:86:54:7b:ab:cc:16:bc:74:ad:d5:53:70:94:37:09:
25:0b:39:67:26:b5:c3:8e:64:0a:cc:f9:2d:22:7c:da:08:4c:
1d:c7:00:a2:35:13:43:30:4f:fc:43:ad:58:a8:fa:63:a4:05:
d0:ea:05:d1:28:f8:35:04:30:de:98:8b:8b:c0:2d:18:9e:cd:
1f:be:02:2f:55:93:b8:e8:e9:cc:30:db:ca:1d:ab:e3:f3:eb:
91:b7:f7:4f:9f:e3:5a:26:5d:f9:9e:90:5a:0a:a3:2e:b9:26:
ca:34:0f:66:d4:57:ef:75:90:7b:21:a1:e7:0a:fb:0d:ee:05:
dc:da:69:b5:4f:08:62:de:5c:17:ed:2d:43:57:eb:5b:3a:c9:
c6:e6:c0:2c:95:2a:37:3a:f3:da:d4:f6:8f:ce:73:a9:9c:40:
d2:a7:7b:eb:3e:29:8e:84:25:06:7a:1d:67:03:fd:8f:48:55:
05:e9:49:54:d7:01:e6:65:df:26:c8:cd:bc:0f:e8:aa:ed:56:
82:8c:44:a8:0f:bd:7e:fd:ac:98:ee:13:e6:a6:a1:72:88:5b:
af:69:f3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:47:22 2024 by rpki-client on console-fra.rpki-client.org