Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F8923300F3111EFB4F1222D017001B1.roa
File: 6F8923300F3111EFB4F1222D017001B1.roa (raw, json)
Hash identifier: /xqu3BC3dtDTeqrG7gHVRMDwNd9vS6wjoxeJXnoMhrA=
Subject key identifier: D1:0C:A1:E1:E7:69:99:F9:E6:E9:59:A2:26:E8:0E:20:B2:F0:39:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B6DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F8923300F3111EFB4F1222D017001B1.roa
Signing time: Sat 11 May 2024 00:57:27 +0000
ROA not before: Sat 11 May 2024 00:00:24 +0000
ROA not after: Tue 21 May 2024 00:00:24 +0000
asID: 44559
IP address blocks: 154.211.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46811 (0xb6db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 00:00:24 2024 GMT
Not After : May 21 00:00:24 2024 GMT
Subject: CN=663ec277-585c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:00:15:8d:5d:3f:a3:67:91:a8:61:80:c9:
69:d8:a8:3d:e3:fe:38:9f:91:20:a1:1c:c6:bc:15:
6c:6d:a5:5b:23:b8:94:45:2f:bc:0a:90:1f:04:32:
4f:90:2c:8a:db:a2:c8:b4:1b:33:e7:b9:ff:09:16:
9a:7c:ae:7b:7b:f7:ee:a6:13:11:f5:0a:53:e6:4e:
f1:b6:69:aa:cd:da:94:dc:e8:f8:68:cb:8b:eb:ef:
0e:01:76:5c:30:dd:cd:67:e3:4b:63:59:02:7c:03:
1b:53:e6:2b:95:84:b0:35:db:18:59:b8:2c:2e:de:
cf:6d:b4:52:6f:e2:fd:25:81:2d:8a:d3:aa:51:51:
60:5f:c0:20:d5:bd:d0:f4:87:85:0d:ca:6c:d6:ba:
05:be:10:b6:ea:b1:95:a9:02:bc:03:c4:c2:d5:0c:
e4:49:42:3e:32:d4:f6:57:78:3a:59:cd:8b:a4:14:
ec:f8:9e:c6:b6:0c:66:b6:f4:ff:fe:2d:40:52:ae:
94:37:22:db:04:0d:07:85:37:8a:bd:71:5f:cf:33:
61:17:fd:8b:57:91:ab:10:b8:6c:84:98:aa:05:3a:
b0:10:bc:ba:b1:c8:67:c1:90:37:a4:f6:a4:31:ac:
ca:07:e8:95:33:bd:16:3f:81:76:9e:0d:07:41:cc:
42:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0C:A1:E1:E7:69:99:F9:E6:E9:59:A2:26:E8:0E:20:B2:F0:39:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F8923300F3111EFB4F1222D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.32.0/19
Signature Algorithm: sha256WithRSAEncryption
56:98:6f:53:3b:8d:0a:2b:49:db:f8:e7:df:2c:cb:4c:37:1c:
7b:9e:c0:52:38:13:2b:eb:02:46:6e:b0:ea:ac:38:82:ab:d6:
b9:48:97:e7:cd:36:68:e6:9b:53:1f:71:c4:4d:12:12:e9:90:
d2:32:98:f6:41:98:dc:d2:51:9d:87:80:27:5d:2a:c4:15:13:
2c:2d:e0:b7:7d:0c:02:c7:5b:e1:6d:5a:e4:7d:36:df:64:bc:
7c:4c:19:63:17:fb:25:9d:0a:cb:03:94:53:fa:68:6a:aa:ed:
18:42:5e:ff:ff:4e:e7:af:51:e4:1c:71:bd:84:5a:0d:21:9c:
6a:40:ce:55:b0:fc:0f:be:b3:0a:28:f3:b1:85:c4:a4:ca:54:
5f:91:75:18:ca:3d:9e:47:9c:3f:77:cb:69:26:20:1c:d4:51:
7f:51:9f:86:70:13:0c:ee:f5:8e:f8:1e:3d:48:3a:b9:68:ff:
0d:d7:ad:8e:11:5c:ad:78:53:bd:83:1d:9a:04:d0:50:f3:2a:
bb:ca:bf:ce:04:de:a3:8d:be:3e:bc:12:86:0d:7b:78:40:52:
dc:38:20:2f:3a:a0:50:12:0b:e6:0e:a7:56:10:c5:15:23:01:
0c:ab:ae:23:21:d3:db:47:0c:b0:d2:ca:d5:ec:d7:e3:49:00:
75:1a:df:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:48:27 2024 by rpki-client on console-fra.rpki-client.org