Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58D8CD2C9F8F11EF9B8DBEAC762E951A.roa
File: 58D8CD2C9F8F11EF9B8DBEAC762E951A.roa (raw, json)
Hash identifier: vYzUbjyXYxPIOIRPiWWlmIs8GEt11lXKQNCqh8J3u1E=
Subject key identifier: 0B:9F:C2:18:5F:63:1B:15:FF:83:6B:D4:FE:0C:D9:16:AB:F2:ED:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010B68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58D8CD2C9F8F11EF9B8DBEAC762E951A.roa
Signing time: Sun 10 Nov 2024 18:12:29 +0000
ROA not before: Sun 10 Nov 2024 18:12:25 +0000
ROA not after: Thu 21 Nov 2024 18:12:25 +0000
asID: 44559
IP address blocks: 154.223.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68456 (0x10b68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 10 18:12:25 2024 GMT
Not After : Nov 21 18:12:25 2024 GMT
Subject: CN=6730f78d-8e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d0:75:e1:a2:25:8f:2f:1c:49:82:e7:75:c6:
4e:9e:61:90:98:6a:e9:20:96:04:75:1b:47:08:3f:
2c:a9:0b:db:4e:f4:64:dc:ea:78:b4:6d:b1:88:01:
9a:c4:be:52:db:cc:bc:2a:50:35:72:63:c9:44:1d:
f4:a0:18:b5:7a:5a:9a:98:9b:65:27:5a:11:0a:ea:
58:6e:73:59:9d:8d:92:15:7c:89:63:f9:82:a0:19:
97:33:da:bc:53:bb:bf:dd:79:ee:03:31:e9:c7:b7:
90:bc:31:8c:a8:ea:68:4b:68:62:d1:6a:ec:00:af:
41:30:b2:d4:7e:97:33:2b:67:fc:c6:ec:56:58:1c:
27:1d:49:55:48:7f:46:d9:0e:25:47:4a:06:fc:87:
52:3f:ee:fa:ee:34:5f:fa:ad:c7:78:1a:fa:98:9c:
37:03:c8:01:df:7d:fe:e3:ea:bb:8f:05:e2:f4:e9:
85:11:e3:97:66:de:7c:29:cd:cc:8f:b2:93:be:69:
73:0d:c1:6e:ba:1a:ad:9a:7a:75:c5:87:7e:46:0c:
9e:d6:50:17:28:3e:1e:a9:db:45:0d:75:74:56:65:
41:fc:b6:b4:6c:d1:35:0e:d5:d1:a3:48:e2:64:c5:
db:bc:bb:03:95:bc:54:2f:cd:55:11:b8:4c:d9:0d:
23:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9F:C2:18:5F:63:1B:15:FF:83:6B:D4:FE:0C:D9:16:AB:F2:ED:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58D8CD2C9F8F11EF9B8DBEAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.195.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:19:44:57:41:33:dd:93:eb:3d:b3:9a:f3:9a:99:12:58:c7:
3b:c3:a3:bf:a8:a6:c1:60:28:f8:50:e5:9b:07:60:a3:32:5d:
1f:97:ec:10:d3:e8:35:a6:12:fe:fe:df:21:31:65:56:4d:7f:
22:02:43:04:ba:df:c6:0a:60:7a:cc:ed:0e:d1:a9:a6:bd:e5:
22:28:7c:51:38:d2:fd:c2:07:c5:0a:af:f8:7a:e1:97:7d:a8:
96:16:5a:4b:f8:ff:b5:12:b3:80:5a:61:17:58:36:08:13:19:
50:68:b1:dc:5a:90:35:6b:58:d2:6e:31:6c:29:10:b0:97:c5:
57:df:61:19:15:93:ff:14:a7:2f:69:a4:8e:b3:b0:68:46:b9:
6f:b6:fb:07:2c:b4:5f:2b:45:11:ae:61:87:64:d4:72:2a:97:
53:c5:56:ce:4e:e2:0c:ae:bc:3a:3c:82:f0:b5:3a:9d:66:fc:
73:21:48:68:bb:3d:23:12:86:40:a1:ca:ac:40:08:c7:35:36:
ad:a6:d5:1e:73:96:ac:19:23:50:8c:8b:c1:6a:d9:40:30:2a:
c5:00:e5:28:ca:4a:f3:69:eb:8a:c6:b1:fe:f4:4e:d9:db:29:
f6:31:a8:ea:a7:3b:cb:61:84:c8:33:1c:aa:b3:53:2d:97:b0:
0a:a3:c1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:02:51 2024 by rpki-client on console-ams.rpki-client.org