Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71FC7CB8F0BC11EE9623AC51775412E6.roa
File: 71FC7CB8F0BC11EE9623AC51775412E6.roa (raw, json)
Hash identifier: /nKel38/l7nr4EGMOVohXitiIIw/ijOMD5yGQULHys0=
Subject key identifier: F4:EE:FD:AE:C3:4C:24:F0:AD:F8:87:4B:79:55:70:EE:8C:8E:3D:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A8B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71FC7CB8F0BC11EE9623AC51775412E6.roa
Signing time: Tue 02 Apr 2024 06:44:25 +0000
ROA not before: Tue 02 Apr 2024 06:44:22 +0000
ROA not after: Mon 29 Apr 2024 06:44:22 +0000
asID: 139646
IP address blocks: 154.208.30.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43193 (0xa8b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 06:44:22 2024 GMT
Not After : Apr 29 06:44:22 2024 GMT
Subject: CN=660ba949-585d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:f7:c2:f3:ca:26:a7:fd:53:d9:84:06:b2:
60:f5:49:17:de:c8:63:31:27:2d:b3:9f:d7:1a:ea:
66:64:32:14:9d:06:33:e6:94:d1:5d:3b:64:74:c5:
fd:0e:c7:0a:87:ca:41:68:db:a3:58:26:ec:ac:b4:
c3:fe:6d:81:98:b4:43:64:79:bc:95:a0:6b:99:05:
84:56:7b:38:b9:d0:16:a2:b0:7f:64:f8:31:b7:89:
57:f4:48:5f:bf:ab:83:a5:84:94:97:d9:b2:e2:2d:
e9:0b:87:f7:43:36:c4:25:73:cd:0b:02:67:20:45:
bd:c2:f4:51:eb:5b:b9:9e:f1:41:9b:af:42:1b:35:
a7:86:dd:80:1f:4d:52:5a:58:db:82:e6:7b:48:e5:
c8:cc:f3:c6:b5:46:c6:4e:b8:ed:7f:e2:6b:3c:4e:
77:7f:2d:52:62:c3:14:06:fa:2f:ca:12:77:ef:04:
ad:3c:58:97:cc:2b:30:2e:f3:19:0e:32:75:a7:27:
38:d5:a6:e4:00:71:8d:94:c2:bb:30:4a:17:19:34:
57:11:4e:cd:4f:1c:f9:80:1f:d4:c1:9c:3d:eb:30:
7e:c3:a0:d6:45:bd:e6:63:c2:5c:c5:f3:64:1b:25:
c9:e5:25:c1:e9:b7:06:fc:f6:16:1f:88:63:6d:28:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EE:FD:AE:C3:4C:24:F0:AD:F8:87:4B:79:55:70:EE:8C:8E:3D:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71FC7CB8F0BC11EE9623AC51775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.30.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:81:64:df:70:12:0c:b1:be:21:96:a0:83:b6:fb:ad:06:b4:
e9:2a:b8:45:51:7f:f2:ac:ba:0a:59:b3:4d:b2:39:59:66:10:
7d:8b:89:d7:c9:28:e6:f1:5b:56:3a:08:a1:58:6a:e7:0b:b6:
90:e2:39:45:01:13:5a:19:62:b3:32:72:62:30:b0:cc:54:37:
82:ae:9b:1c:d2:88:23:1c:ba:ca:31:63:e2:17:7a:e3:e1:1d:
63:a0:80:17:c2:91:54:d0:0c:1c:28:fa:b2:06:98:1a:d3:64:
c2:88:10:19:8a:df:b9:8a:c6:12:3f:45:40:be:23:ed:0d:60:
15:5d:49:a3:f5:f5:71:91:95:26:82:72:7a:6f:e1:d8:7c:6c:
39:da:39:70:82:1b:33:ba:ca:32:72:ed:cf:3e:a6:f2:93:08:
74:69:11:90:f1:bf:70:41:e6:87:c5:7b:5d:e3:3b:49:5f:74:
f2:7a:ea:87:1f:53:20:fe:5e:2f:85:90:71:20:e8:af:28:21:
74:2e:64:32:21:e2:1a:21:71:14:dc:5a:16:47:cb:40:4a:67:
5e:38:52:79:2c:eb:e8:43:5e:a1:e6:60:f7:5c:bc:34:fe:c1:
55:b5:45:87:fb:f6:7d:a9:1f:94:87:5b:d1:8f:5d:2e:bc:64:
ac:63:53:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 11:06:49 2024 by rpki-client on console-fra.rpki-client.org