Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35C57D34A44511EF81845A7E762E951A.roa
File: 35C57D34A44511EF81845A7E762E951A.roa (raw, json)
Hash identifier: xB0ItdN1ku2HcJaXcB22xvpkx4ThaiinwKBTw1gmNv8=
Subject key identifier: BE:C7:AA:D7:36:1B:92:6F:08:45:6F:55:C4:34:83:B6:77:E5:13:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010DE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35C57D34A44511EF81845A7E762E951A.roa
Signing time: Sat 16 Nov 2024 18:04:23 +0000
ROA not before: Sat 16 Nov 2024 18:04:20 +0000
ROA not after: Sun 24 Nov 2024 18:04:20 +0000
asID: 139880
IP address blocks: 154.209.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69091 (0x10de3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 18:04:20 2024 GMT
Not After : Nov 24 18:04:20 2024 GMT
Subject: CN=6738dea7-56bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:b5:50:88:c0:f6:54:39:c3:8e:83:a3:6b:
09:e5:72:5b:db:dd:fc:76:3f:93:f6:c1:1b:d0:55:
59:54:56:2c:16:f8:96:1d:d7:38:80:78:b6:e6:02:
a5:2c:60:9e:2e:3e:03:38:23:ee:81:c2:9a:b4:69:
a7:2f:83:77:a8:b5:2d:ad:5b:03:66:1d:02:80:e9:
d5:b2:87:03:11:bb:ba:2a:69:ea:f6:5c:60:80:6e:
ba:a9:92:7f:6c:a4:70:73:df:64:dc:6c:13:7c:9b:
9e:ac:2e:23:dc:30:8b:be:58:c8:df:07:99:a0:77:
df:eb:9f:90:07:e5:29:8c:54:70:03:82:99:b2:d7:
79:72:30:44:2e:9c:c5:b5:92:86:85:28:3f:ee:74:
35:95:8d:eb:c4:99:ca:b8:80:93:62:27:55:55:72:
33:e4:95:31:63:f8:60:75:e2:aa:f5:17:c0:48:7d:
3c:aa:3c:48:6c:fe:cf:50:72:09:67:13:99:bf:25:
c9:ff:69:25:1d:d8:65:28:04:5a:95:3e:e5:fe:cb:
41:a7:1b:16:65:82:5a:a2:1c:52:61:82:b4:83:72:
06:02:e1:68:c0:b0:de:e0:35:7a:de:ce:e7:89:83:
94:c8:6f:68:10:16:67:b1:cf:a3:b8:6b:ee:26:6e:
6a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C7:AA:D7:36:1B:92:6F:08:45:6F:55:C4:34:83:B6:77:E5:13:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35C57D34A44511EF81845A7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.160.0/19
Signature Algorithm: sha256WithRSAEncryption
02:1b:9b:ec:be:9e:1f:7f:9b:e9:51:a7:7b:7a:05:e1:fc:b3:
83:44:29:fd:b1:35:c5:1f:7c:e0:55:7b:2c:96:c4:76:83:34:
02:5e:7c:87:89:22:e1:92:a7:c6:7b:56:5b:0b:be:2f:71:57:
58:02:60:9a:9f:ec:ff:7c:fc:da:e0:59:79:bb:60:dd:70:c2:
c1:0b:06:fd:36:49:92:c6:e1:4e:e9:82:eb:56:5e:4e:63:a8:
4f:ff:66:70:68:b8:23:d8:be:96:2a:28:c4:ac:00:4a:70:85:
01:0c:7f:69:64:af:04:e2:dc:e3:d6:10:3b:ac:69:c6:43:6c:
e1:e0:07:4f:58:11:84:a8:91:93:c1:7b:05:42:c2:2a:e0:54:
af:ac:50:bc:8a:86:f0:88:82:96:f3:c0:e8:ed:a4:af:98:75:
8a:cc:a5:17:6a:9f:f3:45:46:06:15:cb:0b:42:d0:77:3d:ab:
b6:09:d2:f5:a9:87:76:b2:38:22:6b:0c:aa:11:97:ce:91:5d:
f6:99:0f:7c:1d:b8:37:3f:88:58:23:b8:c1:66:91:9f:10:f7:
1b:c3:bb:9d:d3:b1:cb:ee:6f:dc:b3:05:53:60:d3:bb:6c:b2:
ae:eb:db:e9:37:42:00:54:5f:df:83:a4:5f:b6:23:b9:24:64:
51:7e:07:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:33:25 2024 by rpki-client on console-ams.rpki-client.org