Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F47E19C1A3911EEA7EAC30D4AD9E6FC.roa
File: 6F47E19C1A3911EEA7EAC30D4AD9E6FC.roa (raw, json)
Hash identifier: zHk0z0P+1hyZWe7huKRnOpZSjQKrL0PRFR6p9wwF9aA=
Subject key identifier: C0:5C:FA:99:89:1B:C7:22:C3:31:52:D1:7B:7F:57:FE:03:19:D7:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2FF9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F47E19C1A3911EEA7EAC30D4AD9E6FC.roa
Signing time: Tue 04 Jul 2023 07:07:28 +0000
ROA not before: Tue 04 Jul 2023 07:07:24 +0000
ROA not after: Wed 24 Apr 2024 07:07:24 +0000
asID: 63888
IP address blocks: 154.209.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12281 (0x2ff9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 07:07:24 2023 GMT
Not After : Apr 24 07:07:24 2024 GMT
Subject: CN=64a3c530-a9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:ff:32:2e:09:45:8a:66:28:84:f6:57:8d:
58:a5:1c:b8:90:11:7d:ec:28:12:1e:de:ec:6e:54:
ac:8d:56:b9:ba:fd:7a:e4:4e:ab:f7:6b:a3:e3:60:
f9:7c:e3:ee:33:d4:04:a1:a2:d5:94:d9:4a:fa:a4:
02:43:fc:46:4b:82:c9:52:00:1a:b3:48:ac:1b:95:
96:a9:0c:d2:eb:41:1e:e9:80:c1:df:31:17:16:5d:
43:19:c1:66:b4:e5:05:62:6a:f3:bb:97:46:0c:e2:
90:2e:a2:0d:27:72:24:7b:1d:28:e5:b8:c8:e4:17:
bc:dd:f6:ec:2e:0d:0f:ba:74:3c:05:31:fd:1e:69:
fb:9e:d2:26:14:98:ea:d9:ba:6b:9e:fe:84:24:9b:
42:e4:b4:6c:69:04:9c:e6:7b:c8:12:b2:16:42:33:
2c:42:87:92:2b:27:2e:4e:92:ea:c6:53:d3:07:1f:
b9:b1:3b:4c:12:93:51:7f:79:34:5d:0c:77:9f:ba:
ba:a8:ec:03:a0:fd:8c:e9:96:ef:c4:cd:91:81:51:
0a:8a:64:ac:d1:27:94:13:66:e2:c2:5a:26:47:cb:
96:d2:20:03:19:90:bc:bc:3e:3c:f2:ad:5f:88:00:
ee:13:f1:94:ad:a4:ee:3e:c7:7c:be:a6:9f:73:b4:
71:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5C:FA:99:89:1B:C7:22:C3:31:52:D1:7B:7F:57:FE:03:19:D7:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F47E19C1A3911EEA7EAC30D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.69.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:e9:6e:5d:53:13:e8:f1:31:35:05:85:6c:e0:3c:5e:19:5f:
1c:a3:e8:fd:e5:89:15:4a:06:27:35:de:39:c0:8b:31:b7:45:
82:4f:3f:4c:1d:37:5e:0f:ad:88:3c:84:81:87:54:d2:5c:fe:
f0:b3:40:d9:10:cf:34:52:1c:9f:ee:82:2f:a4:de:4d:7c:ae:
32:f2:27:c3:9b:d8:9a:fd:e4:e4:ca:47:7c:43:b9:ec:96:17:
d8:e6:bb:27:f8:13:db:34:e8:02:f6:f6:b2:0f:22:f2:28:26:
d7:0b:6b:7c:f2:af:11:97:d7:62:ac:96:c2:6f:0d:50:6a:a9:
2a:77:f3:f2:08:6d:b2:c3:31:b1:9d:02:10:50:ba:5f:11:f2:
eb:4c:8e:b9:58:7d:a6:59:62:4a:7f:ec:19:d5:4c:e9:a9:39:
91:77:2e:a5:05:ac:8c:09:10:9e:7a:de:10:2f:09:1a:38:76:
28:7c:76:11:fa:5e:20:6d:32:09:25:e3:b9:73:86:4d:e1:75:
83:e0:41:ef:92:dd:18:1f:d4:e7:96:c7:a5:e6:e7:91:f0:5e:
76:5b:d4:e2:40:2e:13:98:c5:15:c5:21:b8:cb:06:94:02:42:
73:c8:87:7a:47:a7:50:39:f8:8f:8f:86:f3:81:e2:81:83:f1:
e4:eb:9f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:38 2024 by rpki-client on console-fra.rpki-client.org