Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59C51D7AECA811EEA58FB267775412E6.roa
File: 59C51D7AECA811EEA58FB267775412E6.roa (raw, json)
Hash identifier: YU56N6s0glrm4jEC7/cpBBvIQYY2SuJw7/fjPeu2Cx8=
Subject key identifier: 1B:80:46:B8:0B:1A:0E:AD:CC:D6:87:E7:83:7A:A4:73:15:71:91:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A6C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59C51D7AECA811EEA58FB267775412E6.roa
Signing time: Thu 28 Mar 2024 02:10:30 +0000
ROA not before: Thu 28 Mar 2024 02:10:27 +0000
ROA not after: Mon 29 Apr 2024 02:10:27 +0000
asID: 211826
IP address blocks: 154.194.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42696 (0xa6c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 02:10:27 2024 GMT
Not After : Apr 29 02:10:27 2024 GMT
Subject: CN=6604d196-1f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8a:47:64:63:a0:8d:ff:20:3b:76:a5:27:a2:
a7:b0:80:0c:70:72:dc:ab:2d:cc:8b:0b:c7:d6:0d:
32:cd:c0:c2:68:68:7d:5d:9f:4d:57:f7:b6:9f:53:
47:81:b9:14:99:9d:22:f1:37:de:7d:07:9b:4f:2d:
ad:5d:e3:d6:db:50:61:6b:2a:2c:1c:f2:d1:67:44:
8c:fd:53:0c:b3:9e:96:ea:fd:d8:c9:f4:32:d3:ae:
6c:74:4f:a6:82:de:74:35:1b:97:7f:8e:3b:1f:1c:
eb:67:3a:06:da:3d:81:6e:df:f8:7c:77:03:98:62:
22:67:32:3e:ff:56:6b:29:6f:f5:fa:db:10:9f:e9:
d4:80:c4:b5:87:0a:64:dd:ad:ae:76:d6:c4:7c:3b:
bb:f6:1a:40:e4:75:9c:d0:82:1e:f4:38:44:4a:03:
e3:a0:e8:09:cf:32:97:44:91:d5:7b:ea:88:02:da:
67:3a:cb:88:1f:77:f6:f3:e7:ff:66:36:73:18:e4:
f6:a3:4d:60:34:53:44:b1:be:88:ae:df:7e:4f:3a:
64:77:3a:f0:04:e5:57:70:35:75:68:41:04:84:3f:
35:b7:24:fa:45:23:46:e6:93:c1:02:69:1f:8b:8e:
4e:f9:52:ea:85:b3:f9:7f:75:df:2f:dd:96:5f:b9:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:80:46:B8:0B:1A:0E:AD:CC:D6:87:E7:83:7A:A4:73:15:71:91:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59C51D7AECA811EEA58FB267775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.36.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c1:34:05:4f:f6:c7:36:50:44:55:f7:04:00:0c:3d:3b:d3:
a0:6f:b8:fb:14:15:01:13:3f:e2:40:6e:1d:d1:3a:ae:68:2a:
b0:15:e6:4c:29:33:7b:30:8b:aa:63:fa:ad:9c:9e:f8:e6:0e:
ab:35:6d:96:25:91:4c:1b:a2:c8:b2:57:c4:c5:be:b0:1e:5e:
11:60:fc:30:e7:20:40:e4:0b:1c:c7:76:58:92:dd:ce:6f:1d:
f7:6d:ef:5e:06:1b:e4:c4:39:12:16:d3:95:24:96:6a:26:e8:
f1:49:ac:a0:bc:9a:00:5e:29:a4:ef:35:6e:d1:5f:af:13:8e:
9f:c2:7e:9c:d7:ab:9f:20:37:af:dd:2c:21:ce:bf:63:5d:e3:
cb:8a:48:be:95:b2:d6:a3:84:ff:14:45:6b:09:a9:7a:31:fe:
37:a3:b6:7d:fe:1a:41:80:4e:f0:d4:91:77:4a:6e:aa:7f:fb:
34:17:a6:9c:b6:74:39:51:82:60:4f:1e:34:e7:82:57:cc:8b:
d7:d4:84:33:8c:42:72:d0:c8:4e:f2:fa:56:fd:5b:52:4e:44:
0e:37:45:8d:0f:91:94:81:cb:81:a4:7a:05:5b:71:7a:8c:21:
da:77:6a:7b:50:34:44:de:38:6a:55:e4:47:01:26:56:17:f9:
1b:10:9f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 04:17:23 2024 by rpki-client on console-fra.rpki-client.org