Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5587B7CEFE1C11EEB774C000017001B1.roa
File: 5587B7CEFE1C11EEB774C000017001B1.roa (raw, json)
Hash identifier: fmVLegJzFuWHf1fHhqk9FSynbiU/cUEFVXxoZTed3YI=
Subject key identifier: 01:FE:92:E6:C6:87:51:40:BB:5A:60:04:39:A6:3E:7A:0C:46:49:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5587B7CEFE1C11EEB774C000017001B1.roa
Signing time: Fri 19 Apr 2024 07:13:34 +0000
ROA not before: Fri 19 Apr 2024 07:13:30 +0000
ROA not after: Sat 27 Apr 2024 07:13:30 +0000
asID: 133180
IP address blocks: 154.214.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44636 (0xae5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 19 07:13:30 2024 GMT
Not After : Apr 27 07:13:30 2024 GMT
Subject: CN=6622199e-82cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:e3:6a:73:a6:f0:71:c8:1e:3e:3a:7c:5f:
dd:8a:ea:98:7e:b1:54:cd:46:95:c0:0c:64:0c:3e:
f2:b0:49:6f:3b:dc:26:18:35:83:cf:a9:c4:4a:6b:
3f:87:22:24:cf:7f:4c:f6:81:be:49:6b:3d:58:59:
2e:1c:33:9c:fe:7b:6d:20:4a:0a:cc:b7:7f:d6:77:
e7:1d:d0:ea:39:ae:85:d1:c5:a7:b1:0d:4c:ec:e0:
0f:32:9d:ed:e4:a3:24:5f:7e:22:f0:5b:3f:58:15:
d4:c6:ab:d0:65:db:76:4d:d7:5d:13:a3:bb:18:11:
b2:20:34:23:9b:71:46:5c:b1:f6:6b:7e:46:3e:a3:
fc:25:ed:c6:9e:d8:49:e3:eb:4d:17:3f:f6:8d:07:
23:7a:7e:3a:8d:be:75:d4:16:ed:63:42:c5:0c:43:
55:d7:73:92:ec:e2:96:7b:6e:dc:74:e7:89:4b:5e:
72:6f:43:a9:c2:b6:c5:51:86:c0:8d:94:7c:83:76:
e9:3c:40:0e:c2:6f:58:b8:c6:a2:ab:91:65:71:ac:
6f:af:f6:23:01:36:7c:6a:0a:8a:b5:2c:fc:f2:7f:
dd:2f:1e:70:41:eb:55:3d:16:f4:98:23:0b:f8:1a:
94:42:a7:22:f3:3e:9d:2d:a5:2b:30:b0:c3:04:c1:
65:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FE:92:E6:C6:87:51:40:BB:5A:60:04:39:A6:3E:7A:0C:46:49:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5587B7CEFE1C11EEB774C000017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3d:c6:77:2b:47:f5:4d:30:ee:37:70:fc:0c:83:d5:80:e1:af:
f2:b9:c1:4e:8b:eb:74:75:29:63:a5:52:48:5d:8c:01:91:a3:
63:d6:a8:1b:c0:51:59:3f:62:9b:74:54:cb:c3:c2:92:63:a8:
18:c6:c3:38:27:60:36:11:51:b4:c4:1d:ec:d4:ee:e8:b8:49:
cc:ac:30:0a:8e:c7:87:0c:88:f4:5d:02:d9:ca:ef:fa:86:98:
c4:b1:b6:70:94:39:00:7b:ea:b0:30:6c:34:25:80:c9:af:a0:
01:04:59:cf:5f:a6:88:05:9d:24:4d:0c:77:b4:dd:19:16:f6:
bf:4c:5e:db:04:0a:a6:f1:ee:5a:74:01:df:51:2e:0c:85:d7:
9c:17:b8:4b:d3:2c:7c:22:9b:21:0c:de:75:d3:e4:80:bb:7c:
24:35:a4:35:2b:91:20:18:c8:71:a8:39:c0:96:97:64:c6:6d:
e0:ef:48:e7:0f:a4:37:8a:5d:ff:81:01:54:0c:3c:bd:d0:1c:
58:cc:11:3d:53:4a:db:3a:53:44:93:8c:27:a9:45:80:08:81:
2f:6c:de:e9:01:74:e5:42:f9:83:6a:a2:a8:54:51:c7:00:f0:
83:ca:bd:c2:8c:83:32:12:e4:6a:a0:c3:ee:1a:43:c5:4b:78:
ac:06:60:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 14:14:06 2024 by rpki-client on console-ams.rpki-client.org