Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/609D7C92A0DE11EF8639076F762E951A.roa
File: 609D7C92A0DE11EF8639076F762E951A.roa (raw, json)
Hash identifier: gPSt6u1tvtRoBjSCX1OsMsJz8ZjtxjqB8CO6kM/bvBU=
Subject key identifier: EA:68:D9:31:53:4A:31:9B:E1:83:9A:29:97:8F:C1:EA:3C:53:34:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/609D7C92A0DE11EF8639076F762E951A.roa
Signing time: Tue 12 Nov 2024 10:10:44 +0000
ROA not before: Tue 12 Nov 2024 10:10:40 +0000
ROA not after: Fri 22 Nov 2024 10:10:40 +0000
asID: 5065
IP address blocks: 154.81.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68674 (0x10c42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 10:10:40 2024 GMT
Not After : Nov 22 10:10:40 2024 GMT
Subject: CN=673329a3-fe0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:67:41:90:8e:70:54:6b:4d:80:13:14:52:
ea:15:8e:37:79:5c:91:8f:d4:e1:7e:c5:72:93:e0:
df:39:9b:96:51:60:74:e1:55:3c:0e:48:22:e7:b9:
df:dc:59:49:56:4f:cf:67:d3:8a:67:59:10:76:b0:
96:d5:63:a4:93:23:62:59:0c:de:11:af:75:1b:6a:
95:b1:23:70:24:48:a6:35:67:91:91:13:14:97:87:
b6:0f:41:32:8f:b4:c9:cc:30:81:1f:d3:46:b3:bb:
c0:ba:c2:cc:c0:7c:30:6c:02:c5:9f:93:35:ba:cb:
a7:21:b3:fb:52:57:46:da:24:db:72:51:3a:85:0e:
f2:15:0a:56:9b:d8:05:26:31:79:80:7b:f3:41:8b:
b4:38:fd:55:3e:fc:e9:a9:11:c6:bb:28:e0:40:97:
e6:ac:1f:42:47:7a:82:bd:57:19:25:fa:8f:cb:ad:
96:c5:d3:06:2f:b0:8e:05:ca:ae:02:d9:f2:76:fa:
b3:b7:a1:d0:a4:7e:c9:be:24:fd:c7:3e:18:67:4d:
23:f8:1b:dc:85:78:95:d2:8f:d6:91:50:e8:b8:5b:
4e:42:00:00:95:e7:38:c9:90:97:8e:03:de:83:db:
45:96:1d:fe:2c:b2:a8:18:69:08:fc:8d:6b:e8:3c:
28:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:68:D9:31:53:4A:31:9B:E1:83:9A:29:97:8F:C1:EA:3C:53:34:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/609D7C92A0DE11EF8639076F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.12.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:e8:d7:a8:af:0a:79:54:32:4d:d9:02:b0:14:44:e8:aa:11:
26:fe:11:1a:d4:dd:8c:13:bf:9f:53:e4:85:f0:65:a3:ad:45:
b4:16:05:74:a5:3e:73:f2:8f:07:4c:90:8e:64:00:17:cf:40:
2a:21:d8:43:89:37:ea:2d:48:ae:0d:c4:30:f9:c6:de:d6:0b:
cf:bb:1f:eb:f1:f0:17:16:ed:5d:61:25:9c:3c:ac:c7:a9:12:
66:95:4a:4b:32:25:3a:5b:f3:df:45:6c:d7:29:45:f0:df:8c:
36:05:1f:6e:17:7d:06:d5:18:d5:30:5b:84:bb:c7:2f:3d:3c:
5b:1b:0c:ed:ed:1e:62:69:e8:15:48:12:3b:b5:fc:a6:8d:d7:
59:a8:d0:38:68:20:75:62:4b:19:f6:51:8c:77:f7:cd:e0:e8:
a6:cb:09:27:3e:57:40:02:e7:97:fb:19:34:96:10:93:88:4e:
b7:4a:e0:15:b2:17:e7:e8:9f:ff:1c:5a:3b:a0:6c:3e:73:29:
91:d9:27:3a:8f:f6:2a:c9:60:af:10:8d:74:dc:97:fc:64:37:
c1:88:55:f7:7d:89:39:b2:df:ce:73:05:67:35:de:78:e3:02:
b8:2b:b4:88:a5:26:af:0f:07:73:62:30:22:8b:64:00:0a:0e:
5a:be:8a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:52:48 2024 by rpki-client on console-ams.rpki-client.org