Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45EAA760018A11EF9DB8806D017001B1.roa
File: 45EAA760018A11EF9DB8806D017001B1.roa (raw, json)
Hash identifier: fFG70llOnO/DOJ5qG6xbl7LBoZeaDORP9G8SODj46MY=
Subject key identifier: DA:7D:16:C9:70:AA:7C:78:56:E4:4D:A6:B5:80:0A:72:A9:06:0B:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AFAA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45EAA760018A11EF9DB8806D017001B1.roa
Signing time: Tue 23 Apr 2024 15:58:06 +0000
ROA not before: Tue 23 Apr 2024 15:58:03 +0000
ROA not after: Thu 02 May 2024 15:58:03 +0000
asID: 136778
IP address blocks: 154.212.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44970 (0xafaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 15:58:03 2024 GMT
Not After : May 2 15:58:03 2024 GMT
Subject: CN=6627da8e-8886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:f8:a2:fe:3d:b9:ae:ab:29:3e:d0:37:36:
c6:75:c7:b5:c0:ad:e0:5f:3d:f3:22:66:1e:59:9b:
1b:21:c7:f3:ef:a1:13:55:b6:16:1f:02:13:ae:09:
78:e2:a1:49:45:15:36:b4:cd:db:01:69:4d:1a:2a:
43:0d:7f:7c:9e:07:b6:87:91:02:f3:5d:f6:d5:d7:
4f:7d:88:83:d1:04:e3:19:48:8a:76:dc:99:70:11:
de:5d:f8:5d:6e:51:e8:73:58:59:b8:16:b6:25:8a:
86:61:7d:44:e1:ec:88:c9:f0:79:1e:c2:9b:83:31:
e9:3e:6a:71:1a:81:9f:54:48:78:01:1b:62:d6:e7:
36:13:21:ab:38:23:51:30:9d:c3:28:30:5c:4b:73:
df:a5:d1:3f:30:c8:cd:94:ce:28:a3:c1:2e:aa:cf:
19:94:21:92:3c:8c:16:aa:d5:a3:71:d1:da:64:54:
95:86:ba:49:e1:c5:c1:79:a6:be:3b:7e:2c:55:f3:
61:ab:bc:bf:be:a7:08:c3:76:03:00:3b:f4:f5:48:
b8:ad:26:f0:78:27:7f:df:de:c1:1d:78:94:ee:31:
fe:4b:97:52:60:cc:e2:06:13:1b:63:7b:8b:66:b4:
c7:c9:c5:6e:3a:c7:14:17:dd:a8:6c:cd:de:5a:34:
8f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7D:16:C9:70:AA:7C:78:56:E4:4D:A6:B5:80:0A:72:A9:06:0B:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45EAA760018A11EF9DB8806D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.145.0/24
Signature Algorithm: sha256WithRSAEncryption
34:52:a4:e0:c5:f3:1f:c8:3f:25:e8:cd:e0:2d:94:9f:5b:cb:
07:c7:9f:46:df:c6:d8:2f:30:d3:79:f7:ab:9f:82:d4:ee:35:
2b:ed:85:06:a8:4c:f1:28:45:ed:68:af:a0:cd:3a:5b:b3:a6:
af:42:50:0a:e7:2f:3b:ef:3a:80:0c:9b:ab:39:8b:e0:d4:52:
14:8e:93:94:69:9d:42:b2:3d:1e:c1:fb:39:e6:c3:4c:e5:4e:
8b:d1:e1:09:68:91:61:fd:0f:9d:66:9c:fb:db:39:54:9b:5f:
0b:a3:38:13:98:0b:ef:a3:9f:fc:e8:20:30:5f:2a:d1:ee:41:
a4:2a:3e:d5:c6:35:ff:25:8b:0e:ab:34:2a:df:36:e2:f2:40:
26:bf:47:94:30:58:73:15:48:7e:cf:97:46:a7:07:a6:16:f1:
ae:be:31:b4:d1:6c:cb:88:74:89:a3:96:91:3f:e7:f3:c1:3f:
74:1b:27:f4:14:ad:1f:9e:f1:78:c1:52:2f:14:bb:6d:3c:3d:
a7:bf:00:92:12:ef:4e:a9:e6:af:8f:21:c2:3c:a6:8e:ff:40:
e4:37:da:9e:84:0c:d1:95:0f:f0:13:5d:42:57:ce:e2:d0:10:
43:5e:ca:5a:2c:60:a4:f0:bb:93:c1:1a:6e:7c:12:78:2f:ea:
7b:f6:21:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:45:05 2024 by rpki-client on console-ams.rpki-client.org