Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F96CF9CFBA911EEA0BA900B017001B1.roa
File: 3F96CF9CFBA911EEA0BA900B017001B1.roa (raw, json)
Hash identifier: J21PgIXi1kJ07mVsYKPQM9lDcO6I7JNtTzPO5VpB4+I=
Subject key identifier: 0D:65:63:FA:28:B9:66:60:75:45:27:92:26:00:DA:42:0C:7E:E9:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD9B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F96CF9CFBA911EEA0BA900B017001B1.roa
Signing time: Tue 16 Apr 2024 04:24:43 +0000
ROA not before: Tue 16 Apr 2024 04:24:40 +0000
ROA not after: Thu 25 Apr 2024 04:24:40 +0000
asID: 151800
IP address blocks: 154.197.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44443 (0xad9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 04:24:40 2024 GMT
Not After : Apr 25 04:24:40 2024 GMT
Subject: CN=661dfd8b-5426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a3:f4:ad:f8:62:ca:87:7d:59:6c:ff:21:8d:
0b:74:de:53:73:a2:d1:14:ef:3f:49:c2:e0:85:fb:
56:c6:83:75:aa:54:e7:c3:ab:22:7b:8c:5d:9c:47:
ff:40:9f:ef:44:2a:93:c9:67:40:34:fb:21:66:e2:
6a:6a:9d:fa:73:be:69:35:5b:83:10:ce:42:44:06:
7b:1e:1f:9e:ff:52:cd:b3:22:b0:38:31:e2:d3:29:
65:a8:6e:99:96:cb:59:bf:5b:0a:32:7c:55:12:ee:
5f:e7:5b:ac:9b:81:9c:be:29:37:2e:58:fb:94:7a:
c5:77:db:a5:dd:ec:37:4d:4b:0c:c0:28:f9:28:0e:
67:6b:71:2f:30:cf:f7:ed:e8:95:5c:42:e4:5f:f8:
0a:93:35:fa:f1:99:39:73:d0:19:27:c0:b0:12:eb:
46:e4:19:e0:91:bd:02:72:03:30:ee:5b:17:c2:58:
8e:18:87:2b:1c:75:36:2d:b3:31:dc:8e:62:ec:3c:
74:c4:e4:77:99:77:60:fc:32:4e:aa:a9:38:6d:0e:
1c:ab:fe:c9:8c:f2:a4:4d:7c:b1:88:5d:89:c1:b3:
b3:1e:20:ed:c5:b0:46:bb:3c:f1:50:cc:13:54:0a:
bf:60:c1:40:30:50:58:8b:b9:db:24:a2:8d:e3:a9:
5f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:65:63:FA:28:B9:66:60:75:45:27:92:26:00:DA:42:0C:7E:E9:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F96CF9CFBA911EEA0BA900B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.96.0/24
Signature Algorithm: sha256WithRSAEncryption
26:e5:5d:e8:39:07:33:9d:58:3c:ed:37:65:44:71:d5:f5:5a:
d4:48:0a:d4:ef:25:1c:58:b9:63:7a:44:7f:cc:af:86:e5:b2:
e4:6e:13:65:71:d8:19:29:4c:1c:f8:c9:3f:b6:27:59:93:9b:
74:66:25:fb:fb:f0:53:49:82:aa:41:fe:0e:78:5a:e5:f0:88:
ab:ed:96:87:ff:38:06:04:8c:21:02:c2:d8:9d:e3:bb:4f:90:
a4:d6:60:72:ee:82:14:9a:ae:26:bd:94:d3:9e:d8:6b:7e:78:
94:44:7f:63:7e:c3:8f:e9:49:01:c4:a1:b4:00:97:9b:37:00:
5c:07:30:d7:ae:6d:da:e9:b0:16:5e:b7:f4:96:2d:e6:92:4f:
b5:28:5f:e5:a4:8e:a6:14:3b:04:29:c2:61:51:d7:e8:3e:bd:
98:ac:94:49:ff:ff:3e:18:da:72:71:b3:6a:48:be:5a:e6:e8:
14:30:be:ed:79:e4:24:00:0e:99:be:84:c6:b7:a4:3c:60:55:
45:e8:84:5e:d4:2c:4d:0e:db:91:cd:78:fd:10:b4:71:6e:d2:
4c:a5:8e:82:61:03:5f:f3:a0:4e:01:9d:ca:e7:2e:79:79:79:
cd:39:75:54:82:23:c0:81:99:7d:4d:8b:b8:95:a3:24:6e:93:
b0:b3:eb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 10:41:10 2024 by rpki-client on console-ams.rpki-client.org