Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5121D4A4014011EFB93A1A17017001B1.roa
File: 5121D4A4014011EFB93A1A17017001B1.roa (raw, json)
Hash identifier: 6sHsWBsd00QAG4Le4M5mrvh0QZZf7g6DCLIu+XE6TGo=
Subject key identifier: 32:6D:6B:20:7D:9A:4E:26:82:3B:78:45:AD:4F:B4:90:9A:9C:77:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AEC3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5121D4A4014011EFB93A1A17017001B1.roa
Signing time: Tue 23 Apr 2024 07:08:42 +0000
ROA not before: Tue 23 Apr 2024 07:08:39 +0000
ROA not after: Sat 25 May 2024 07:08:39 +0000
asID: 135983
IP address blocks: 154.200.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44739 (0xaec3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 07:08:39 2024 GMT
Not After : May 25 07:08:39 2024 GMT
Subject: CN=66275e7a-ffda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:fb:27:1e:56:da:df:e3:c6:f8:f8:0e:6a:
0d:60:8c:e7:b1:b1:7b:1f:38:9e:5d:43:fd:ad:60:
33:e1:41:85:90:bd:7b:35:15:b7:4e:5c:8d:40:82:
c0:9b:09:61:25:ce:db:ea:d3:5a:65:e3:87:6c:52:
7d:ff:8a:42:28:2f:20:59:e0:48:cf:e7:66:8c:09:
0b:4e:5c:00:78:99:87:82:cb:05:d7:e7:9b:5c:b2:
8d:33:85:30:e5:e2:33:fa:f5:12:6b:f4:a8:a3:90:
c2:0c:6f:f1:02:c3:78:c0:2d:32:e0:26:f3:e1:a5:
81:17:08:6c:57:97:3d:47:c0:c0:d5:8a:b9:c8:0a:
ca:19:dc:41:d9:ad:09:29:09:c3:f1:7b:4f:ef:89:
c4:5b:d2:5b:f9:ff:78:67:1d:bb:1f:64:ca:f8:ad:
8a:1a:12:7a:18:42:59:36:6d:d3:41:d0:15:07:43:
e1:50:bd:d4:98:29:63:90:28:48:4c:ba:d3:15:ac:
8d:ce:a4:58:2f:b3:a6:eb:d5:66:49:4c:db:22:61:
2b:0f:24:f5:01:e4:8b:65:b8:ed:05:85:27:ec:30:
69:3c:76:a1:7a:37:6c:86:bd:19:4d:9f:c3:65:b5:
5f:ab:62:91:74:3f:8f:20:63:13:5b:bf:1c:9e:c1:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6D:6B:20:7D:9A:4E:26:82:3B:78:45:AD:4F:B4:90:9A:9C:77:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5121D4A4014011EFB93A1A17017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.36.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d1:0e:ef:72:5b:87:96:78:85:1a:9b:66:ff:49:25:e2:ea:
0e:8b:8a:a2:6c:c7:9b:13:1a:e5:a9:72:6b:3f:6a:cc:0e:19:
aa:03:33:c5:d9:2f:15:98:88:14:58:af:6a:f6:fe:a9:54:4e:
54:d9:03:cc:26:6c:97:19:a6:2c:24:b1:f9:1b:82:1d:b7:d0:
89:7d:5c:85:f3:24:c7:79:21:7a:57:b4:e7:d1:84:f5:d9:ab:
6d:b0:02:a2:ed:5e:40:fa:9d:c7:45:df:be:8e:d5:78:ae:92:
17:12:01:f4:e7:b8:24:01:d2:1e:00:4e:04:c7:95:68:46:51:
9d:af:d0:4c:db:7d:c9:86:7b:49:28:fc:21:6e:24:ba:a2:09:
e6:1b:f5:a6:1c:fd:f7:f0:04:90:73:bf:1c:ff:bf:50:40:21:
24:cb:35:e5:e5:a5:28:62:cb:68:b9:8e:05:c1:c4:6d:33:ee:
b6:f2:cb:8a:8e:9c:fc:17:40:74:0a:f2:60:26:94:00:37:eb:
36:4c:5b:89:08:b5:8b:7d:b5:a6:e5:91:bb:c1:bc:c8:d8:1a:
03:2e:ed:21:e6:d0:de:47:70:9e:5e:8b:86:30:4b:ba:ec:5b:
60:38:a4:b4:03:54:71:7d:c9:e0:7c:f8:5c:2f:07:bf:13:5d:
f5:b5:c8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 01:39:20 2024 by rpki-client on console-fra.rpki-client.org