Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DC5EB4AFD4611EE9913B32E017001B1.roa
File: 4DC5EB4AFD4611EE9913B32E017001B1.roa (raw, json)
Hash identifier: S1FZThyCkm4C6Bt058eOer3VxhCbPRaD1xarf+kcO3s=
Subject key identifier: 3F:FB:14:DA:56:1E:0C:4A:7F:25:50:62:3E:A6:57:4A:77:6B:4D:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE25
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DC5EB4AFD4611EE9913B32E017001B1.roa
Signing time: Thu 18 Apr 2024 05:41:29 +0000
ROA not before: Thu 18 Apr 2024 05:41:25 +0000
ROA not after: Fri 26 Apr 2024 05:41:25 +0000
asID: 39600
IP address blocks: 154.207.128.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44581 (0xae25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 05:41:25 2024 GMT
Not After : Apr 26 05:41:25 2024 GMT
Subject: CN=6620b289-470b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:2f:ed:62:41:01:83:4e:cd:12:ce:98:6b:
d3:d1:0b:b4:5e:bb:82:2f:b2:a4:4f:fa:70:38:4b:
55:1f:f8:cb:b0:b4:f4:f5:d3:92:7f:e6:b7:42:93:
ca:9f:30:4e:46:5a:9e:2b:57:35:67:4e:bb:b3:49:
9b:40:72:51:7b:ef:fa:0d:de:9e:b6:2a:39:ab:db:
f9:7a:8e:d3:61:c0:b5:67:da:38:9d:16:ee:28:7c:
be:3a:20:03:a4:93:d8:80:ae:d0:76:48:f4:d2:83:
4b:54:03:84:cc:9b:46:8d:dd:8f:bd:99:1c:2c:da:
15:a6:5d:31:65:3a:3f:00:48:65:cb:91:4a:e1:b9:
fa:7a:9f:b2:da:0a:73:05:45:81:a0:51:e6:89:60:
6e:26:08:15:66:00:b6:c6:c1:cd:05:a0:d1:96:4e:
ac:39:a3:4f:77:87:35:e6:24:c3:f0:2d:47:94:5d:
19:9e:e7:70:84:a4:8f:2d:82:69:9f:d3:69:36:0b:
72:5d:20:57:16:5b:29:b4:99:72:89:11:20:62:6d:
d3:0a:94:29:ce:f2:14:c1:ee:2d:f8:99:cc:c3:26:
e3:2c:9a:df:67:87:ea:3d:d0:1b:ea:be:9c:b1:8d:
cf:7b:20:90:b6:0e:eb:c2:a0:a7:24:e6:3d:11:e8:
eb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FB:14:DA:56:1E:0C:4A:7F:25:50:62:3E:A6:57:4A:77:6B:4D:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DC5EB4AFD4611EE9913B32E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.128.0/21
Signature Algorithm: sha256WithRSAEncryption
94:32:b5:c7:f4:27:1a:85:bc:89:4d:63:85:8c:8b:1b:eb:a9:
7c:33:c5:14:8f:bd:8d:88:60:a1:7e:ca:12:06:97:0e:05:9d:
96:a8:6a:4b:4a:d9:c6:34:a5:4b:ca:38:59:21:a4:17:88:1e:
61:8c:e5:d8:37:cc:1e:9e:c7:c4:dc:74:6a:db:b5:f3:82:31:
59:47:4f:bf:c4:78:27:39:0b:71:0c:65:3a:35:cb:df:af:75:
4c:06:c4:b8:7f:3c:36:bc:f7:a4:4f:f8:20:47:ae:b9:bb:1f:
2c:12:28:c0:79:6a:db:00:44:a7:30:30:3d:b3:b1:dd:98:9a:
9b:46:ad:f1:1f:65:2b:cd:1e:12:77:10:1c:81:05:2e:d3:8f:
05:ea:af:d3:ce:5c:68:46:0b:03:e3:c5:06:72:3e:3e:7c:b1:
8f:82:5a:02:22:68:71:fe:5e:10:f3:40:c2:22:bb:10:01:62:
67:3f:cb:79:6c:31:c3:15:70:de:88:a0:95:27:aa:a9:40:29:
37:85:ab:b1:d5:71:09:3a:dc:81:02:eb:b7:d7:0a:0d:e5:e6:
e7:5d:59:a1:a3:7d:cc:32:08:5e:52:35:64:37:70:0b:6a:78:
b7:6c:64:7a:bd:64:33:3d:7d:d7:36:e4:ed:d9:24:3e:38:69:
d1:d5:5d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:08:40 2024 by rpki-client on console-ams.rpki-client.org