Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7038ACFC038211EFBCCC5300017001B1.roa
File: 7038ACFC038211EFBCCC5300017001B1.roa (raw, json)
Hash identifier: j2ujT2wea8EOBu4fGWorkvAoAYpA1z4lqtHGEcd+V2k=
Subject key identifier: 1E:38:36:78:90:6F:92:00:C2:3A:BE:47:D4:CA:22:99:B3:82:05:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B15C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7038ACFC038211EFBCCC5300017001B1.roa
Signing time: Fri 26 Apr 2024 04:07:04 +0000
ROA not before: Fri 26 Apr 2024 04:07:00 +0000
ROA not after: Tue 03 Sep 2024 04:07:00 +0000
asID: 131685
IP address blocks: 154.210.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45404 (0xb15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 04:07:00 2024 GMT
Not After : Sep 3 04:07:00 2024 GMT
Subject: CN=662b2867-a945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6c:7c:a9:36:8f:85:20:e2:ff:98:d6:05:c7:
16:ec:74:09:f6:40:f2:2d:dc:59:25:2d:57:89:31:
d3:ed:4e:0e:34:b8:73:25:77:7a:d3:2a:33:87:bf:
ee:a2:14:ae:6d:03:a5:f2:5f:34:ea:89:74:63:5a:
38:25:0b:75:29:9e:a1:2c:fe:f6:dc:19:74:ae:39:
1e:ab:47:87:a4:26:c8:b7:69:4b:87:91:2f:5d:8c:
d8:dc:ab:81:70:61:ac:71:95:62:55:a7:cb:ed:c6:
ca:e0:9d:a8:fb:3b:d2:9c:b2:9d:38:1d:e2:a9:aa:
30:7e:27:01:8c:ff:1b:77:f3:6e:91:f0:a9:57:79:
3e:94:6d:cb:75:96:46:61:12:db:14:83:0e:13:0b:
fb:63:3a:0a:52:81:b3:5b:66:6d:28:cc:30:6c:91:
cc:7f:38:66:b5:c8:3f:c0:04:3c:f5:69:ff:65:be:
63:77:3c:76:95:11:31:26:14:a4:d3:34:cc:0b:f5:
5c:e4:33:27:53:2e:d1:94:d5:2a:8a:bb:cc:7e:13:
72:68:76:fc:09:47:b2:e2:c3:39:d0:fd:95:10:0b:
6e:52:98:d6:d2:7f:df:b0:b4:38:46:a5:e5:98:ed:
9e:0b:df:e1:aa:de:5d:ff:72:6e:ec:29:2b:c2:31:
3f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:38:36:78:90:6F:92:00:C2:3A:BE:47:D4:CA:22:99:B3:82:05:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7038ACFC038211EFBCCC5300017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.240.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:6f:b8:8a:0b:86:ac:e3:39:04:84:34:66:cf:9f:d8:c8:03:
87:13:b0:f1:60:78:1b:8d:f1:37:f7:90:67:c7:2d:5c:50:5b:
df:0f:5b:91:5c:b9:75:8a:09:bc:62:b2:1f:e5:ac:e1:36:63:
7a:17:98:3e:92:f9:34:e4:aa:8b:be:0a:f2:ef:da:3b:4c:c7:
a5:59:74:83:6b:64:a5:fd:15:7a:b6:e1:e2:83:54:12:58:14:
81:12:d5:b0:cf:e6:b1:9e:6f:9b:3d:9e:cf:cd:64:2f:a8:93:
83:62:d9:68:a5:b9:03:76:66:0a:33:ca:48:99:48:be:46:ee:
95:c2:20:db:6a:6c:5c:c2:d8:92:1a:cb:bb:4c:c5:e7:83:4d:
9a:26:fe:1e:09:94:8d:c6:1f:23:3c:3b:07:6c:76:78:8e:4b:
1b:90:57:cc:2a:82:42:aa:44:02:1d:1b:95:c0:cd:6c:ca:21:
68:67:3a:94:50:75:65:96:1d:73:01:44:4f:b4:05:82:66:7c:
5d:3f:3f:c3:67:fa:e8:85:20:ab:21:3e:3e:09:85:ec:70:d6:
0a:78:b3:e6:70:db:3e:05:66:89:97:1f:57:ed:e7:25:0c:69:
8f:a0:9f:fa:0f:43:3d:52:6d:7c:3c:94:dd:12:90:ac:38:15:
bb:4c:99:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 11:37:22 2024 by rpki-client on console-fra.rpki-client.org