Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78DCF1CAE78E11EE8916F476775412E6.roa
File: 78DCF1CAE78E11EE8916F476775412E6.roa (raw, json)
Hash identifier: HABQ6bp7ITwpbcKnaNGnjWGHd44CCKCZNHfaiP5LUB0=
Subject key identifier: 04:39:29:0E:93:97:47:6B:CB:5C:6B:77:41:91:9A:B6:EC:C7:70:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A5D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78DCF1CAE78E11EE8916F476775412E6.roa
Signing time: Thu 21 Mar 2024 14:22:39 +0000
ROA not before: Thu 21 Mar 2024 14:22:36 +0000
ROA not after: Thu 25 Apr 2024 14:22:36 +0000
asID: 7018
IP address blocks: 154.206.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42457 (0xa5d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 14:22:36 2024 GMT
Not After : Apr 25 14:22:36 2024 GMT
Subject: CN=65fc42af-dd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:46:22:10:1a:eb:48:c6:b2:2f:16:de:0d:58:
9a:72:89:bc:69:05:70:2a:62:23:3d:13:5f:1d:05:
2c:0d:e2:01:a4:6e:27:2f:1e:59:6c:1b:fb:30:02:
50:a7:77:e8:16:25:d8:5d:e7:7b:9e:06:bd:10:23:
32:4f:48:fb:c2:ef:02:e3:89:84:92:c9:22:e2:55:
7d:03:d2:0f:01:f1:7c:b6:ee:73:54:91:58:dd:39:
c8:6c:a5:2d:77:e4:a1:af:cd:55:0e:fb:03:ec:fb:
f3:88:cf:b6:18:59:65:b5:31:dc:0a:9a:de:ef:0f:
9c:c5:ab:a3:ad:e3:da:7f:d5:8d:73:d2:98:de:43:
b4:88:e8:8d:6a:36:10:f5:e4:03:a2:eb:22:69:50:
2c:3e:4e:85:0b:e4:c5:f8:97:34:c6:43:bc:51:cb:
1d:b0:dc:3b:17:67:61:84:75:e0:fa:ba:9d:b7:b0:
8f:7a:fb:a8:6c:21:75:5c:a7:5c:91:d2:02:67:dc:
c2:38:fe:5f:91:3b:62:1a:4a:72:84:58:cc:70:03:
93:2d:98:65:55:bf:20:92:dd:08:ae:21:2b:2d:2e:
5a:46:2c:e7:42:48:d8:4c:20:0b:b1:b0:5a:bc:66:
ec:e5:1b:1a:07:0a:d8:fd:a8:4d:5c:1c:81:07:5b:
de:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:39:29:0E:93:97:47:6B:CB:5C:6B:77:41:91:9A:B6:EC:C7:70:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78DCF1CAE78E11EE8916F476775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.16.0/20
Signature Algorithm: sha256WithRSAEncryption
cd:0f:79:b4:a0:2c:2f:b6:87:3c:ac:1f:e4:f1:d4:cc:d7:fb:
f0:b1:07:f6:40:34:80:41:09:b5:fd:f9:18:42:b7:1d:aa:25:
e0:86:bc:92:26:89:0a:50:2b:9b:a9:1b:6f:02:7c:c3:aa:af:
c5:ca:31:55:9d:0b:3a:88:04:58:7f:c3:1c:c4:7d:b9:7f:21:
26:36:b4:22:08:ad:b3:dc:c9:64:4c:0b:b6:d4:e4:89:e5:76:
14:3a:da:7a:86:2e:2f:51:1a:b4:34:a3:3c:c9:99:f5:e0:c3:
64:ee:ac:6e:0b:29:bf:3d:4b:f5:ff:1a:02:2d:ba:af:c9:3f:
8b:f9:f7:63:d8:2a:95:22:0c:b8:d0:a6:7f:ab:fc:6f:63:a2:
c4:39:c1:8b:9b:45:52:7c:1c:f2:b7:75:af:01:44:d9:89:61:
3d:81:dc:3f:78:c8:65:9a:6d:48:d2:6f:eb:96:95:da:71:a2:
6b:87:dd:e7:00:5c:a5:0c:9a:cf:06:82:3c:a2:4b:ff:84:18:
a8:d6:48:d7:f9:b5:af:48:8e:b1:20:b8:69:bd:f3:e1:3f:39:
4d:19:86:fe:40:bd:79:d4:8e:38:d1:3d:c2:0e:2b:b3:d0:d3:
e8:3e:a6:aa:21:5b:12:06:8d:96:39:9f:b8:9d:54:3d:09:f6:
38:e4:78:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 01:59:41 2024 by rpki-client on console-ams.rpki-client.org