Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F010898E7EB11EEA9D12EC4775412E6.roa
File: 4F010898E7EB11EEA9D12EC4775412E6.roa (raw, json)
Hash identifier: JZ6KVUtw8kfia1pNMgrnB3Gre26oDOqhqu65h2+pGAY=
Subject key identifier: 59:73:DF:9D:AB:B4:F3:8C:69:3C:42:D1:2E:5A:B3:1D:79:3D:D1:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A5F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F010898E7EB11EEA9D12EC4775412E6.roa
Signing time: Fri 22 Mar 2024 01:27:12 +0000
ROA not before: Fri 22 Mar 2024 01:27:09 +0000
ROA not after: Wed 24 Apr 2024 01:27:09 +0000
asID: 18779
IP address blocks: 154.203.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42482 (0xa5f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 22 01:27:09 2024 GMT
Not After : Apr 24 01:27:09 2024 GMT
Subject: CN=65fcde70-ef3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:c3:b0:bf:21:09:8d:28:df:9c:c1:00:e5:
f8:3c:86:7d:33:37:85:2e:25:a1:c7:6f:72:fc:4e:
36:c6:5d:17:46:25:d0:99:03:1f:cf:45:a1:10:d2:
93:21:b4:df:33:64:34:c3:10:33:c8:c3:2e:54:b7:
9c:c2:04:87:8c:44:88:b5:8a:09:64:53:94:34:ae:
3a:89:c0:5f:e4:74:7b:7d:b8:df:9e:a6:14:b1:ec:
23:68:99:36:b1:4b:1b:12:2f:7f:76:7e:94:06:ce:
c2:f4:ad:c3:30:1a:59:4c:59:81:09:dd:16:5f:37:
59:1a:0c:9c:18:42:11:79:2f:b7:38:96:a7:99:62:
1b:b5:b2:2b:54:89:4d:ec:51:ae:b3:ff:21:7b:6e:
56:ac:7b:a1:dc:0d:06:69:3b:90:2e:b4:40:61:97:
0a:b4:2a:8c:88:fe:06:0f:bb:b7:7b:55:1d:66:33:
6b:50:95:37:e1:52:7a:ce:ac:29:01:d4:94:83:bf:
62:bb:09:04:c8:fd:61:f2:a4:d4:75:40:28:dd:57:
90:41:2e:83:b8:96:98:a1:1a:cc:e3:37:5f:95:d0:
95:27:4a:61:cc:dc:a3:58:a7:82:11:35:5d:3f:5f:
73:45:e0:7a:7e:2e:46:8c:5b:bd:88:c5:6f:d0:cc:
ab:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:73:DF:9D:AB:B4:F3:8C:69:3C:42:D1:2E:5A:B3:1D:79:3D:D1:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F010898E7EB11EEA9D12EC4775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.56.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:dd:bc:87:35:12:98:fc:db:8e:f0:9e:14:1a:cf:b6:fd:7a:
3f:ee:49:6f:cf:c7:74:58:77:2a:81:91:72:01:10:aa:39:6a:
20:fd:36:bc:11:ee:36:af:51:34:bb:13:0c:a2:d3:ac:91:b4:
1c:6d:4a:8e:d0:7e:40:45:98:15:11:0a:15:2e:26:04:d5:f2:
8f:3f:ef:2e:0c:19:bd:5f:55:5b:3b:9d:2e:b7:5b:f9:1f:47:
49:47:ac:c4:27:12:89:62:a6:c2:24:b7:40:62:a7:02:9e:dd:
4d:bd:0f:bc:95:45:9d:a2:54:6c:83:1d:4a:44:1d:11:8e:c0:
c0:db:dd:d2:8d:a2:77:7d:d5:55:e2:28:46:3e:51:e9:0f:16:
7f:cb:67:5a:bf:23:1f:2f:8d:78:ba:e8:43:7c:53:b4:a5:6c:
4c:e6:c8:22:14:7f:e6:21:fe:a7:2b:12:cf:7e:a8:d9:2f:95:
43:b5:db:3b:6c:90:a5:6b:de:31:04:48:4e:1c:e4:dc:32:75:
7b:7b:94:4f:2d:ef:3e:9d:7a:57:ad:09:5f:65:41:d2:f9:e0:
a7:b3:27:11:3f:69:2c:f6:20:64:e5:60:0e:25:2f:b0:1c:05:
08:89:59:ee:33:51:3a:29:ef:d8:9b:03:7d:47:0d:0a:3d:83:
30:37:7f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 04:12:03 2024 by rpki-client on console-fra.rpki-client.org