Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C22821C4A6311EF952B52A1762E951A.roa
File: 3C22821C4A6311EF952B52A1762E951A.roa (raw, json)
Hash identifier: ykkukdr6wCKNHjUY+wHulH6XwObdKRibAi6dfZfg+Iw=
Subject key identifier: 8A:CB:2A:3B:B8:0F:B2:77:C3:F7:E4:EC:83:F9:E2:7E:88:5A:BF:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D6FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C22821C4A6311EF952B52A1762E951A.roa
Signing time: Thu 25 Jul 2024 08:52:34 +0000
ROA not before: Thu 25 Jul 2024 08:52:31 +0000
ROA not after: Sat 03 Aug 2024 08:52:31 +0000
asID: 22773
IP address blocks: 154.212.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55034 (0xd6fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 08:52:31 2024 GMT
Not After : Aug 3 08:52:31 2024 GMT
Subject: CN=66a21252-dd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:b5:c3:ad:7b:78:7d:dc:7c:d8:da:cb:55:
5b:d0:ef:4d:ac:9e:83:56:26:b8:68:1e:84:f2:f8:
5b:16:f7:99:97:99:12:18:14:63:56:82:5e:b1:08:
03:6c:17:77:a2:28:89:a8:2d:de:a2:f9:29:c3:02:
bc:03:1c:39:9d:29:ef:4d:a8:a7:2b:14:f5:11:b5:
cf:01:38:8b:d1:da:83:88:61:cd:6e:90:7b:d1:3e:
bd:65:e4:e0:cb:2d:6a:7b:be:25:23:37:7b:83:cc:
19:b3:53:b7:78:df:21:57:49:eb:bb:96:b1:87:71:
1d:27:10:14:c0:85:35:ff:45:aa:99:cc:45:eb:86:
50:ee:6d:19:75:cd:c4:53:5d:a8:4e:3f:6e:ed:d0:
14:ec:44:51:0b:34:03:38:cd:30:95:25:31:74:88:
ea:b3:4e:cd:6a:e3:ce:c7:a3:ff:d4:15:bc:8e:ab:
b5:17:47:31:31:a9:3d:6f:30:62:c8:07:1a:5b:2f:
4a:a8:b0:5a:74:f2:15:12:df:3d:39:b0:d6:ac:d1:
cb:c7:b3:bc:aa:a2:9f:c5:44:77:28:2e:37:de:75:
6b:0f:f9:68:f1:9f:8e:96:0a:c2:04:ea:85:36:4a:
4a:aa:09:3d:07:4c:19:79:72:f9:e1:3d:1b:17:c4:
e2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CB:2A:3B:B8:0F:B2:77:C3:F7:E4:EC:83:F9:E2:7E:88:5A:BF:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C22821C4A6311EF952B52A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:18:50:f1:c1:18:cd:c5:eb:8a:f0:03:77:e9:5d:13:66:0c:
aa:26:50:31:28:ab:9b:fc:c1:17:4d:8f:d6:f1:e5:b8:25:91:
9a:3a:28:42:62:83:1d:8b:30:02:20:9c:1b:71:67:a4:c8:7b:
6f:19:46:97:a0:cb:a0:ff:25:eb:6b:30:9d:6d:ac:a1:de:5c:
10:68:41:fd:da:bc:04:72:0f:66:0b:e9:e7:88:ab:d0:20:e3:
ff:74:de:00:a2:c0:aa:8f:d2:17:b8:a4:11:60:69:40:28:e5:
00:2a:5c:86:22:29:a8:05:f7:73:80:bc:17:bb:97:53:ec:c0:
61:4d:05:03:d4:6f:b8:09:ad:0d:a1:b6:b1:af:5e:71:bb:cd:
2b:1b:0d:7f:b5:41:72:5e:92:64:b9:33:8e:70:43:fc:1e:03:
dd:55:b5:7e:f2:b1:de:f2:18:b1:ef:d2:75:31:16:3a:24:21:
77:7a:4f:b3:39:8e:fd:b4:ee:58:a3:87:fe:f4:cb:d4:23:2a:
3a:1e:0a:82:f2:49:f0:cc:b4:0f:2c:90:76:ce:6d:eb:83:2c:
db:bd:a2:b2:94:63:83:ac:e7:39:90:b4:b3:3e:99:6b:e5:2b:
ff:67:06:31:dc:cc:15:37:b1:ba:fe:63:f7:e5:d0:5b:b6:3a:
12:1e:2d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:51 2024 by rpki-client on console-ams.rpki-client.org