Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4748DD1A155A11EE8DAF36424AD9E6FC.roa
File: 4748DD1A155A11EE8DAF36424AD9E6FC.roa (raw, json)
Hash identifier: nJrHqyyhX5u+VeRFOHV/kh8tVDRVRskUoOBFcmMI+tQ=
Subject key identifier: B4:34:40:9D:0F:44:F8:AB:AF:94:50:46:08:2B:A3:8E:63:BD:0E:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2E49
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4748DD1A155A11EE8DAF36424AD9E6FC.roa
Signing time: Wed 28 Jun 2023 02:19:58 +0000
ROA not before: Wed 28 Jun 2023 02:19:55 +0000
ROA not after: Wed 24 Apr 2024 02:19:55 +0000
asID: 63888
IP address blocks: 154.209.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11849 (0x2e49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 02:19:55 2023 GMT
Not After : Apr 24 02:19:55 2024 GMT
Subject: CN=649b98ce-33f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:98:38:bf:f6:b7:7f:e9:70:d9:25:ce:2b:61:
bf:65:a9:a3:ba:02:4c:b6:b3:6d:7a:21:83:c1:f3:
91:a2:82:c6:52:d4:62:3f:f0:24:51:74:57:a2:89:
bd:ca:99:6e:84:b7:eb:c7:57:01:dd:00:54:b4:4c:
c4:94:ec:4e:04:55:f7:51:51:fd:71:44:b9:27:9e:
68:98:5a:af:f2:40:e8:b7:9e:dd:d2:f3:3d:5c:1e:
06:ad:42:7d:50:ed:44:24:1b:b2:20:90:a5:be:b0:
5b:93:30:d6:98:54:df:37:eb:6d:dc:0a:33:5c:fd:
d2:a3:24:d9:d2:25:d2:28:82:b1:a2:b0:ed:fd:e2:
d6:59:6f:72:0f:3d:6f:1a:62:4b:10:3a:2a:e9:94:
d9:1d:b1:13:2a:c0:97:ab:fd:3e:88:f0:10:04:ed:
59:4a:72:c6:40:8e:b4:7e:1b:a9:21:65:ec:17:7e:
23:aa:f8:ec:3b:1e:01:ae:de:10:3d:d6:f1:a9:ef:
8e:a9:bc:43:ac:af:92:64:2f:b2:a8:63:67:1d:eb:
6a:d3:85:03:26:de:48:02:d3:b6:5e:fa:eb:c7:a9:
8e:33:9e:b2:24:e7:2c:0c:3b:0d:63:66:ed:fb:0c:
00:1f:60:2e:cc:9a:9d:6f:5e:d4:bb:59:58:9b:72:
e0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:34:40:9D:0F:44:F8:AB:AF:94:50:46:08:2B:A3:8E:63:BD:0E:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4748DD1A155A11EE8DAF36424AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.65.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a0:0f:0e:02:24:9b:4a:75:c5:b7:6f:d1:0c:24:2d:05:05:
33:a9:90:a0:79:1a:21:7f:b3:43:31:8f:45:3d:a9:65:1f:3c:
82:c4:53:52:24:cf:79:ce:37:19:ed:29:1e:54:26:9b:fd:c0:
1c:18:68:6c:06:ae:2c:07:f7:e6:c5:ed:c2:06:b7:55:13:4e:
e0:9b:e1:37:b1:0e:e6:4b:51:cc:96:4f:15:d1:59:39:97:a6:
ff:8e:d5:4d:04:2e:0a:45:6c:e4:e5:82:32:b5:9f:17:00:d0:
1d:f8:71:13:a6:f1:8c:8a:cd:5a:01:9d:ee:e6:2c:b0:ce:9d:
c9:b5:1f:60:a5:20:84:0b:88:c5:26:51:d6:8b:23:f8:30:43:
a8:80:31:17:2f:78:ad:51:b3:1b:62:1b:df:dc:4b:90:20:df:
87:60:62:3d:3e:a3:36:71:7a:71:39:6f:b5:02:5d:96:13:57:
c0:99:65:58:9f:bc:ae:c3:79:6f:08:a1:b0:58:8a:cd:5c:e2:
5c:41:a6:cd:b7:c1:88:16:61:0b:72:94:00:c5:64:5f:1c:71:
55:ec:97:c6:be:0d:af:be:4f:0c:ef:ac:71:fe:70:6a:e5:f0:
df:0e:3f:95:fb:47:8c:cd:3f:bb:c1:87:08:44:a3:75:71:22:
e6:b5:97:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:38 2024 by rpki-client on console-fra.rpki-client.org