Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D14C654F0BD11EEA3BD5557775412E6.roa
File: 2D14C654F0BD11EEA3BD5557775412E6.roa (raw, json)
Hash identifier: hNHkLjT4bYK2cOFaVN+hNha0/xYHpvxMBjeNYCcAya4=
Subject key identifier: 7C:FD:44:A6:05:D3:56:43:19:F3:A4:B6:DE:4A:56:2A:0F:F9:D5:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A8BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D14C654F0BD11EEA3BD5557775412E6.roa
Signing time: Tue 02 Apr 2024 06:49:39 +0000
ROA not before: Tue 02 Apr 2024 06:49:36 +0000
ROA not after: Mon 29 Apr 2024 06:49:36 +0000
asID: 139646
IP address blocks: 154.208.24.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43197 (0xa8bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 06:49:36 2024 GMT
Not After : Apr 29 06:49:36 2024 GMT
Subject: CN=660baa83-c40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3f:4a:84:bb:5e:ff:f4:71:17:85:a1:1d:75:
41:7f:88:db:84:09:41:4d:f1:aa:6c:99:e1:87:ac:
73:11:41:68:1e:00:3f:12:72:1f:1a:1a:4b:96:63:
72:47:26:eb:f6:38:c0:cf:a6:e9:c2:b7:14:ed:96:
69:f8:de:98:81:50:19:35:6d:82:e6:59:11:21:ac:
80:f3:3a:5e:d6:68:14:74:ec:25:a3:e2:52:8f:2f:
1d:36:8e:80:d9:d1:f8:8c:7c:18:08:74:56:72:d1:
3c:03:c2:e3:6f:db:2d:f6:14:f6:dc:b0:10:3e:3e:
62:75:66:88:ea:30:17:e1:bb:17:2e:13:a6:17:35:
9a:6f:a2:cb:e3:db:69:2d:4c:f1:5a:b7:98:1f:46:
e0:94:59:13:f0:36:00:a3:08:b3:12:37:fa:06:99:
92:6e:7c:88:d4:bf:30:fe:9c:9c:f2:4e:b5:63:3b:
50:10:b5:df:76:cd:c9:00:7d:81:d9:eb:ee:03:c0:
3e:fc:34:c1:f5:84:0a:b6:3c:2a:db:36:59:92:54:
55:23:7b:75:75:f9:7b:27:60:64:57:4e:db:54:37:
f6:29:87:89:17:89:46:d6:8c:2a:65:cc:9f:77:7d:
71:7b:21:05:15:79:f9:25:36:3c:e0:73:51:1c:de:
44:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FD:44:A6:05:D3:56:43:19:F3:A4:B6:DE:4A:56:2A:0F:F9:D5:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D14C654F0BD11EEA3BD5557775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.24.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:66:e5:16:11:7e:13:d7:70:ca:49:44:3e:9d:d5:25:79:04:
ca:1c:3e:ac:e9:b5:0c:d5:ce:fd:ff:0a:ef:25:98:10:3d:e4:
cd:c7:a8:a2:03:83:af:a3:c5:f4:00:c8:fd:cf:98:cc:f0:14:
cf:df:36:98:08:76:ee:41:21:a6:76:c2:fc:68:1e:42:af:88:
5a:25:7a:82:66:3c:63:db:b4:b0:8f:d3:f7:41:fe:bd:dd:01:
c4:40:82:15:2d:9e:05:cc:ea:08:e8:8e:30:f6:82:9a:e5:0e:
1b:83:ff:38:7d:8b:84:11:06:63:a8:7d:f9:15:67:f9:c1:b4:
11:61:01:20:65:c2:42:94:49:5b:5d:24:fc:09:e6:99:a0:be:
3c:ae:4b:c0:67:38:77:31:47:3b:be:7e:d9:5f:dc:df:af:99:
57:77:5a:e3:6e:da:02:cf:c2:39:dd:46:85:55:35:35:de:f3:
ed:d9:54:1b:21:2d:08:0e:ea:9f:ae:f0:cd:8f:81:0a:88:6d:
d5:93:5f:4c:2c:ca:cf:62:94:28:08:30:e8:74:4c:ea:17:5b:
dc:03:0b:b1:1d:67:6a:53:e1:a2:48:c2:82:5a:7f:4c:63:89:
ae:a8:bb:23:01:78:55:fe:7c:40:10:95:93:0b:b7:96:e5:1d:
41:f5:f0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:24 2024 by rpki-client on console-fra.rpki-client.org