Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A8D22DEF0C311EEBC434A86775412E6.roa
File: 4A8D22DEF0C311EEBC434A86775412E6.roa (raw, json)
Hash identifier: 6YsbuP0wMIWayDKap48Kp/V+9a4vsa7+Ls+Mk1xB4l4=
Subject key identifier: 1C:C5:29:FF:9A:9D:FB:14:6D:83:A4:DE:30:8E:CE:CF:DF:46:4D:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A8C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A8D22DEF0C311EEBC434A86775412E6.roa
Signing time: Tue 02 Apr 2024 07:33:26 +0000
ROA not before: Tue 02 Apr 2024 07:33:22 +0000
ROA not after: Mon 29 Apr 2024 07:33:22 +0000
asID: 139646
IP address blocks: 154.208.18.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43203 (0xa8c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 07:33:22 2024 GMT
Not After : Apr 29 07:33:22 2024 GMT
Subject: CN=660bb4c5-d6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:79:45:8b:ad:54:5b:b7:d5:5b:15:be:b0:6d:
63:78:fa:de:9e:03:31:65:d2:3f:85:31:0b:42:4a:
b0:8c:f4:1d:97:83:a2:a7:32:7b:22:41:bf:c8:e9:
ac:2b:3e:bb:8a:b4:e1:44:9f:46:6a:8f:4d:fa:61:
7a:63:e3:aa:26:6d:45:bd:6c:43:db:e1:a5:be:3d:
a2:90:da:cd:db:64:d7:37:be:8f:12:71:9f:fa:f9:
b0:3d:01:fe:3e:c8:6f:e0:aa:fe:fe:ba:df:6b:4c:
d1:bc:4e:8b:b0:7b:e3:c1:7c:b4:15:0a:f7:63:ec:
2a:15:87:99:57:40:5f:ce:8c:c3:dc:88:fb:51:bc:
42:eb:92:56:1a:ea:be:ff:c2:b2:8a:e4:8c:6a:a2:
c8:4f:33:a3:6e:22:3a:ce:82:f9:1c:89:4f:0b:c6:
ee:b0:cb:67:bb:f4:ef:24:47:24:55:ee:d7:81:9c:
a2:e2:db:41:79:15:a1:ac:06:47:b9:5c:85:84:ed:
43:8e:47:c7:b6:f8:78:df:e7:6c:a1:9e:33:3e:b1:
03:9f:ed:c9:12:ea:39:5c:8e:bd:83:a5:9f:a3:ac:
49:bd:f6:9c:f1:4e:d0:5d:63:29:00:c5:f6:a5:3b:
4e:6b:e3:48:4e:f4:42:37:cc:e6:da:28:af:79:e3:
0c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C5:29:FF:9A:9D:FB:14:6D:83:A4:DE:30:8E:CE:CF:DF:46:4D:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A8D22DEF0C311EEBC434A86775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.18.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:b5:00:6e:69:90:a8:ce:78:69:79:45:2c:cb:08:3e:a1:aa:
d5:22:10:fa:0e:89:82:e1:e6:35:66:cb:97:2f:d8:47:c2:f5:
d8:bb:7c:16:7e:45:c6:9b:0c:c3:e4:56:27:a1:16:f4:8f:aa:
b8:28:2a:e4:db:c5:94:2e:00:fc:66:09:e3:a8:8d:ad:15:06:
48:d5:be:40:a6:a1:46:42:ac:5c:e5:48:4f:56:74:ba:b6:70:
e9:da:95:a5:45:0c:67:82:8a:c9:17:78:1e:58:fd:f9:e5:89:
bc:27:4b:4a:25:ce:2a:f8:0e:4c:80:e5:3e:0a:e9:61:9d:6b:
c5:bd:d9:bb:46:65:79:a4:fc:6b:41:89:5b:2c:ba:90:85:82:
01:4c:fc:9a:56:f3:5b:9b:05:7e:b3:48:74:a7:cf:52:03:7a:
d6:ed:0d:a9:45:b0:77:30:64:5a:62:10:f6:ca:60:0c:cc:4c:
db:30:1b:32:e4:ca:25:1f:48:cc:dd:03:ee:8e:29:a0:11:c7:
93:cd:6e:e0:1a:72:ab:dc:71:0e:c6:73:92:55:7a:bd:6e:08:
50:d6:c6:51:5b:2b:c8:68:f2:a9:ed:a5:7a:52:6d:4b:64:58:
11:a8:8a:be:bc:59:3a:29:f7:26:d0:76:4c:bd:25:83:8d:57:
35:d1:b9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 07:55:59 2024 by rpki-client on console-ams.rpki-client.org