Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3047B562441311EF89C57FB7762E951A.roa
File: 3047B562441311EF89C57FB7762E951A.roa (raw, json)
Hash identifier: +O5vX1uQvhOBPtMQoYL/H2mPsAAh5YYhA38nCufsZ8o=
Subject key identifier: 3A:06:E2:52:C4:DA:99:94:CB:4E:9C:49:1D:77:34:86:88:51:18:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D303
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3047B562441311EF89C57FB7762E951A.roa
Signing time: Wed 17 Jul 2024 08:04:28 +0000
ROA not before: Wed 17 Jul 2024 08:04:24 +0000
ROA not after: Sat 27 Jul 2024 08:04:24 +0000
asID: 22773
IP address blocks: 154.219.6.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54019 (0xd303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 08:04:24 2024 GMT
Not After : Jul 27 08:04:24 2024 GMT
Subject: CN=66977b0c-b2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:67:6e:dd:9f:a3:15:05:28:f4:cb:04:95:
00:b5:ad:4c:11:81:b7:70:2d:8a:13:8a:74:21:7a:
0d:d9:24:a0:f6:e9:7c:d2:12:46:0e:1a:9f:50:b4:
e2:50:c3:70:e2:2f:e4:0c:25:95:3b:e2:f1:19:35:
9d:1e:5b:a6:15:d5:ee:99:ae:3b:b7:23:46:88:be:
c3:89:ea:c4:97:fa:c3:cc:02:09:68:f4:79:f1:27:
00:19:c9:c0:59:a3:04:c5:9e:be:25:60:49:cb:8c:
c9:71:e3:30:f4:6f:c7:db:b7:11:64:a5:7a:52:df:
e0:a9:61:78:f5:11:c4:ce:0a:a3:79:fd:70:07:01:
61:e3:d7:44:1f:61:03:e1:c3:7c:2d:3c:ff:dd:8b:
2a:df:80:97:12:96:ff:08:77:cb:46:e8:bd:54:07:
a2:3a:30:72:45:71:bc:7b:20:40:50:b7:c5:35:76:
0b:19:2d:d4:b0:6e:a5:dc:87:7f:34:0b:7b:86:a7:
22:d7:6d:39:ab:ec:bd:36:36:89:d9:02:66:1b:4f:
31:30:40:0e:40:25:96:eb:9b:1f:6b:b9:9d:57:94:
45:37:a0:08:95:f4:a5:ca:4d:80:19:43:c6:de:93:
1e:af:7d:ba:1c:44:5a:1d:cb:3e:41:47:36:a8:c0:
a9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:06:E2:52:C4:DA:99:94:CB:4E:9C:49:1D:77:34:86:88:51:18:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3047B562441311EF89C57FB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.6.0/23
Signature Algorithm: sha256WithRSAEncryption
78:91:55:ac:13:c3:47:50:14:c1:ec:7d:a7:eb:c7:90:c4:64:
1b:b7:da:00:89:5b:2f:0f:81:3c:21:0c:28:8b:2b:56:91:15:
e5:3d:7d:d8:43:1a:d3:2d:34:cf:59:57:77:8d:88:ff:35:ef:
a3:dc:51:af:0b:b6:75:f9:76:b2:e9:6d:05:fe:34:59:00:8e:
cb:2c:f3:7c:ce:8e:eb:d8:08:9f:b4:ad:e4:ef:2b:77:3e:00:
d8:46:6f:89:95:ac:00:16:00:76:19:67:7e:e2:ed:96:6f:3b:
8e:ee:83:af:12:92:5f:31:26:86:45:6c:ec:76:2f:a5:f7:f7:
14:ce:ee:0b:f4:ea:29:c8:30:70:e5:57:dc:a5:d6:89:64:de:
5c:fc:60:4d:d5:20:94:d6:70:9c:d6:29:7a:57:4c:fc:13:6e:
52:a4:9d:51:46:8d:5a:08:d8:84:e4:e4:74:74:8e:78:41:96:
43:1d:ce:61:92:2a:ca:db:1d:bf:b7:7a:08:d8:2f:0f:43:50:
ca:c2:96:32:d0:96:29:2c:0a:cb:ef:1e:43:d8:f7:91:70:0c:
e2:32:f2:13:8a:7b:08:bf:0e:40:54:c5:12:4e:23:80:13:b6:
27:e2:95:77:8f:8f:7e:f1:5a:a9:9e:8b:9b:d1:76:b9:bc:8f:
e2:bb:77:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:06:40 2024 by rpki-client on console-fra.rpki-client.org