Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BBCC6F2FB9F11EEABF2DA3A017001B1.roa
File: 7BBCC6F2FB9F11EEABF2DA3A017001B1.roa (raw, json)
Hash identifier: h+jIQODequxE+GLZw5G09n8laRy5uHBkH7l9y7Mif1E=
Subject key identifier: F4:AB:F6:EA:BC:17:5A:3A:38:94:B9:79:8B:E2:FC:A6:7F:28:0B:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD35
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BBCC6F2FB9F11EEABF2DA3A017001B1.roa
Signing time: Tue 16 Apr 2024 03:14:49 +0000
ROA not before: Tue 16 Apr 2024 03:14:45 +0000
ROA not after: Wed 24 Apr 2024 03:14:45 +0000
asID: 136933
IP address blocks: 154.213.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44341 (0xad35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 03:14:45 2024 GMT
Not After : Apr 24 03:14:45 2024 GMT
Subject: CN=661ded29-db54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:b3:db:03:7f:77:e6:f6:4c:37:31:89:70:
54:85:1d:6d:36:1e:2b:1a:0a:e5:83:7e:e8:79:a6:
91:c2:19:2c:96:d4:2b:2b:80:09:55:71:ca:c0:bd:
71:15:6e:c4:d4:af:77:ca:0f:20:e4:2a:0c:3e:b9:
d4:2a:97:ed:22:27:03:53:0b:dd:20:db:b1:b8:cc:
15:98:7e:09:0e:a4:1b:fc:c7:b4:12:4f:58:91:59:
a9:b5:5a:09:73:38:76:2b:b8:70:03:ae:a7:3e:fc:
be:3f:b9:75:b4:7d:a2:23:55:27:02:94:15:6d:fb:
b1:d7:82:9d:67:e5:6a:8b:1c:12:85:8c:27:ab:da:
7c:f8:7e:5c:20:6c:bd:31:f9:00:c4:4a:b5:6a:09:
cd:22:d9:75:1d:b1:f7:20:2c:39:74:c5:0f:27:cd:
8f:1d:c9:95:81:d8:c2:71:17:d4:0c:1a:e3:c0:c7:
f4:bc:a7:6a:4d:d5:b0:0a:0e:b3:6e:30:fa:65:82:
6a:ec:d1:f0:03:03:82:9c:27:87:86:e4:79:25:a6:
e6:15:4c:a8:9f:4f:25:63:e1:2f:af:db:25:bc:e3:
85:51:8f:82:e8:ed:2a:e4:cd:fa:6d:6a:dd:c8:3b:
3d:60:9c:26:6b:99:f6:9b:e4:6d:c6:04:5c:14:87:
62:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AB:F6:EA:BC:17:5A:3A:38:94:B9:79:8B:E2:FC:A6:7F:28:0B:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BBCC6F2FB9F11EEABF2DA3A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.20.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:39:45:2c:f8:51:d7:2e:e5:01:b7:5b:cf:9d:ba:fa:a7:6b:
6e:73:62:44:2f:2a:4c:24:f6:dd:42:20:99:fb:b8:60:0a:64:
f1:ad:25:9a:d8:c4:ae:b1:d5:78:f2:1d:6c:64:ab:12:5f:5e:
0d:2c:6f:28:01:aa:72:ce:8d:fb:0b:a1:57:e2:44:21:a6:5f:
52:bb:2d:73:b5:c2:b3:ef:cb:eb:08:fb:9d:d2:79:c1:af:d9:
62:a3:83:49:ed:f3:1a:1f:6c:07:b0:45:e5:fc:a7:82:f2:6e:
a1:94:4d:b8:56:c1:f7:e4:83:31:d3:27:b5:9a:6f:f4:b1:7b:
99:03:75:23:dd:e1:cc:ef:20:c6:a8:8b:0a:f6:ef:8c:ae:56:
9c:98:dc:36:35:58:dd:ea:cb:d0:b2:69:f0:d9:04:d3:82:ac:
8b:64:b0:ed:aa:e1:32:4c:69:97:4c:78:29:d7:75:80:a6:2a:
ea:57:26:6a:3d:f8:a8:ad:25:cb:01:6a:70:03:9e:7d:77:f8:
34:9a:f6:f0:2c:e1:fb:04:24:58:ee:25:a5:1b:57:73:e5:d4:
8b:a8:4e:d6:fc:f2:4a:44:ee:28:9e:c5:d8:27:16:96:74:ea:
e9:00:aa:63:99:82:b8:77:9e:26:5d:16:46:27:c4:b5:99:96:
33:16:26:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:44 2024 by rpki-client on console-ams.rpki-client.org