Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55A7D8DC459E11EFAAC818B6762E951A.roa
File: 55A7D8DC459E11EFAAC818B6762E951A.roa (raw, json)
Hash identifier: 3S3Ez1jHoEN7eQSvLGvQec5KCTn8rbiMIpEIPldGuwQ=
Subject key identifier: C9:46:25:66:B4:96:8D:B3:8B:BA:30:11:5A:6B:0D:2B:C9:55:10:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D3E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55A7D8DC459E11EFAAC818B6762E951A.roa
Signing time: Fri 19 Jul 2024 07:13:02 +0000
ROA not before: Fri 19 Jul 2024 07:12:58 +0000
ROA not after: Wed 21 Aug 2024 07:12:58 +0000
asID: 20473
IP address blocks: 154.218.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54247 (0xd3e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 19 07:12:58 2024 GMT
Not After : Aug 21 07:12:58 2024 GMT
Subject: CN=669a11fd-6a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:ba:5c:1e:dc:e1:c0:9c:45:3d:e2:5b:4f:
83:7f:e2:af:dc:47:d8:8d:19:ea:6a:d1:0b:42:c2:
4d:67:63:cb:2a:85:8f:58:5e:e5:5c:c0:e4:98:97:
d2:33:dc:5a:07:0c:93:91:c1:2b:df:4e:e0:46:b9:
16:35:4c:66:a4:32:bb:d7:90:d0:99:74:2d:f7:49:
49:ed:0a:4a:ec:60:14:3a:d0:43:c0:9e:1f:bb:ff:
78:74:79:93:a9:a7:ce:d6:a4:2d:f2:9e:7e:e2:5a:
2d:8f:65:00:89:2f:af:f7:27:14:f2:64:d9:24:cc:
52:c3:b7:ef:f4:64:dc:de:34:15:54:2e:b3:62:49:
07:8f:6d:bc:74:ba:99:48:fe:26:ac:b5:2a:bb:14:
36:79:c6:e1:56:c1:a2:41:00:c6:77:27:b5:2c:c8:
38:65:db:94:43:af:8a:c0:ff:a6:f3:77:e9:b8:84:
9b:c3:57:4a:67:e9:1c:a2:3f:5b:94:1f:b8:ae:b6:
7b:53:6b:07:2e:3b:30:8d:2d:9b:e3:dd:cf:33:de:
72:20:b8:8f:91:0d:e1:03:41:0e:74:1f:a6:ea:d1:
fb:df:d2:08:c2:df:61:87:f8:27:cb:87:7a:f9:df:
8e:58:e0:40:47:92:9b:81:1b:dd:af:7d:28:b0:aa:
91:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:46:25:66:B4:96:8D:B3:8B:BA:30:11:5A:6B:0D:2B:C9:55:10:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55A7D8DC459E11EFAAC818B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.14.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:34:e8:e9:a4:39:c3:4b:69:b6:da:e2:23:0b:64:03:c6:b1:
b6:67:39:b9:d1:5f:b5:ef:65:5a:b4:4b:d9:d1:8b:8e:f2:fa:
9d:eb:38:4c:14:00:c8:9d:9c:60:6b:b6:71:25:8f:e8:fe:8e:
b4:da:0a:d4:0f:25:85:05:b4:0d:9d:aa:4c:11:94:a4:e7:7d:
7f:70:dd:df:39:f6:e2:f1:c9:6e:da:15:93:8e:da:66:57:9d:
6c:f6:a2:cd:45:96:7e:42:cf:d9:35:2b:82:c3:17:27:86:37:
50:19:d1:d8:7b:52:bd:6f:71:65:e7:24:a3:99:f1:9b:a4:7b:
51:11:71:29:9a:f6:3a:16:1a:22:2b:5f:55:70:7b:20:84:52:
93:3a:06:54:db:1d:53:bf:8d:68:e8:04:9f:71:e8:1d:34:06:
85:ec:b1:b2:47:52:0d:0b:2f:36:52:02:e3:29:df:5f:0a:97:
b0:1b:1e:29:67:a9:87:19:e4:ef:4a:78:cc:6a:60:6f:8e:ef:
21:76:25:6c:3b:e3:d3:84:74:d9:87:0e:17:85:53:36:41:e8:
24:50:11:15:0f:30:81:bb:3a:b5:72:1b:64:cc:0a:c3:ca:92:
28:19:1f:64:23:f3:da:21:88:ad:5b:9a:02:fc:a6:76:27:0b:
93:5c:ea:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 09:58:20 2024 by rpki-client on console-fra.rpki-client.org