Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/601D23ACFB9911EE93B2B005017001B1.roa
File: 601D23ACFB9911EE93B2B005017001B1.roa (raw, json)
Hash identifier: W8gShiJvyWD/X6/DiB8HoCl+eCZPd7nreaT9ASgs8CQ=
Subject key identifier: ED:84:E4:C4:57:5D:9B:E2:21:79:A3:7D:EC:01:7A:A2:AE:93:98:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD0B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/601D23ACFB9911EE93B2B005017001B1.roa
Signing time: Tue 16 Apr 2024 02:31:06 +0000
ROA not before: Tue 16 Apr 2024 02:31:02 +0000
ROA not after: Thu 25 Apr 2024 02:31:02 +0000
asID: 138630
IP address blocks: 154.212.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44299 (0xad0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 02:31:02 2024 GMT
Not After : Apr 25 02:31:02 2024 GMT
Subject: CN=661de2ea-8ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c1:2c:4f:b2:80:10:ba:bf:9a:f9:03:0d:58:
62:00:ff:7e:8b:c6:21:33:58:18:26:03:c4:cf:f4:
e5:98:ac:14:97:07:ab:4a:5f:21:48:46:57:91:0a:
ee:8b:c9:f1:87:cc:5f:c4:08:36:af:55:c7:01:7f:
1b:fa:23:17:2c:d9:a1:32:49:46:30:95:87:d2:9a:
9e:d3:6a:7c:db:07:34:d3:bd:e9:1d:ac:3f:57:ed:
1e:0c:23:ab:8d:fa:91:5e:9c:4d:2b:c6:55:e3:f7:
07:d6:74:65:e8:c2:f6:75:46:9c:4d:b3:c7:9f:23:
d0:f5:92:98:8a:f7:93:11:f6:d7:62:f1:33:62:41:
fe:0e:22:60:c3:81:c4:88:b8:1d:ac:6a:47:59:83:
8a:12:ac:c8:42:5b:32:3d:ea:8d:e7:bf:88:15:2d:
d9:14:18:cc:67:e9:64:ab:40:61:a6:4c:56:ed:73:
6a:f5:18:e0:6e:97:f0:b5:7c:6c:0e:93:e6:0a:29:
93:3f:41:4f:12:dc:eb:59:8f:cc:22:63:1e:9c:b9:
33:a4:74:6e:41:4b:4e:74:16:ab:df:3a:b3:11:9e:
30:d4:43:bb:fc:73:e8:e6:ef:11:58:75:8d:85:b5:
a7:4d:b4:ba:93:ff:6b:d1:60:42:1f:3d:df:91:d5:
81:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:84:E4:C4:57:5D:9B:E2:21:79:A3:7D:EC:01:7A:A2:AE:93:98:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/601D23ACFB9911EE93B2B005017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.144.0/20
Signature Algorithm: sha256WithRSAEncryption
90:2c:95:bd:aa:eb:65:fc:c3:f2:d9:00:aa:90:93:2e:cd:cd:
fd:c5:d4:85:ec:a8:4b:81:43:0e:06:88:51:ff:16:76:de:83:
39:fc:ae:87:5b:e4:34:e6:a0:da:1c:fc:13:eb:a8:67:65:d4:
1f:99:3e:af:f4:a6:40:c9:ec:03:f3:94:ad:ec:49:cb:5f:ec:
3e:99:81:00:45:b0:04:0b:70:ad:42:88:80:9c:6a:a6:c6:fe:
14:6a:99:24:f9:bf:b7:6f:8d:b4:e5:7b:fc:51:1c:53:28:57:
bc:ea:e7:34:d9:2e:55:25:d1:d1:60:4c:3b:b5:ea:ca:cb:65:
0f:db:43:35:da:10:d8:74:08:9c:2c:67:51:66:d0:a9:84:60:
44:14:44:6c:96:66:ba:00:d7:ee:e6:03:28:48:34:b3:65:17:
ce:90:47:6d:1e:db:df:e9:86:65:4e:0f:9c:49:e0:91:4a:9d:
93:fc:09:a6:48:81:26:bf:82:83:90:ec:7e:fb:fe:3b:91:ee:
8f:33:13:b3:57:32:fa:bd:fb:c8:11:97:62:80:9c:80:c4:85:
89:9b:8d:a5:aa:c2:d1:83:55:dc:7d:8d:a5:8d:4d:78:84:f8:
62:f4:2e:27:05:40:18:b8:30:0f:e6:8f:9b:98:3b:36:26:fd:
2a:8a:02:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:50:18 2024 by rpki-client on console-fra.rpki-client.org