Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C1873BAFBA111EE84BB574B017001B1.roa
File: 7C1873BAFBA111EE84BB574B017001B1.roa (raw, json)
Hash identifier: 2otjZLb2zKYVOyC5mlv7/EOEHL2oOK+o4rAigtRRG4Y=
Subject key identifier: 01:A5:40:1E:7A:A6:F9:6E:61:34:91:B8:97:35:9E:78:89:68:30:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD45
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C1873BAFBA111EE84BB574B017001B1.roa
Signing time: Tue 16 Apr 2024 03:29:09 +0000
ROA not before: Tue 16 Apr 2024 03:29:05 +0000
ROA not after: Wed 24 Apr 2024 03:29:05 +0000
asID: 138630
IP address blocks: 154.213.30.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44357 (0xad45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 03:29:05 2024 GMT
Not After : Apr 24 03:29:05 2024 GMT
Subject: CN=661df084-3c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:06:e1:92:3a:55:8f:c8:d8:2e:ee:2c:8e:
aa:f8:ea:1f:61:dc:3d:88:e9:9a:00:ff:65:75:64:
0e:90:50:82:b2:1c:d8:40:c8:ea:c8:1a:35:10:c5:
3c:39:82:c1:6d:70:75:b0:4d:0d:13:4c:22:bf:e8:
28:2f:a7:96:93:de:15:35:72:25:4d:75:2d:e2:6b:
87:de:b7:06:97:ba:ea:e8:75:ef:92:e5:7e:16:20:
63:00:59:e3:10:7b:1a:00:46:87:23:b1:a4:0b:f0:
a9:41:82:3d:02:31:8f:6b:00:8c:23:70:c1:87:43:
c0:72:98:0d:69:38:6c:e2:d9:9f:ee:c6:74:ae:c4:
06:05:4e:35:3e:3b:d5:6a:c7:8e:1f:cf:3b:fa:6e:
49:dd:06:a5:f8:03:85:18:a1:2f:09:00:65:cd:bb:
7d:ce:15:11:a2:ba:53:3c:0e:8f:84:91:0d:7c:6f:
83:58:9b:69:a9:a2:ca:b3:16:ca:38:b8:97:29:67:
a5:82:c9:ae:41:4c:a3:b2:11:3c:7e:bc:a3:05:2d:
3f:a2:60:e9:ef:47:0f:d1:a1:d6:9c:bc:40:9f:72:
fc:e1:a8:7f:fd:0f:9a:18:7a:c9:d2:9e:4b:51:e3:
ff:ce:f1:cb:fa:35:14:09:9f:1d:ea:6b:1a:de:8d:
99:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A5:40:1E:7A:A6:F9:6E:61:34:91:B8:97:35:9E:78:89:68:30:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C1873BAFBA111EE84BB574B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.30.0/23
Signature Algorithm: sha256WithRSAEncryption
93:f2:3a:73:1f:47:fb:4d:16:c7:bd:57:f0:d1:79:8f:1c:fb:
5e:ad:0a:2a:98:45:b0:13:66:9c:2d:50:98:18:cd:ea:f4:e6:
70:d5:cc:45:33:e8:47:97:db:8b:b7:be:c0:5f:fd:0c:1a:f8:
0b:bb:a2:57:69:4d:69:d5:c1:00:ca:35:aa:40:bb:ba:3d:a2:
b5:ca:d4:a2:62:67:8a:70:d9:39:f0:99:5b:b5:69:e0:e4:19:
ad:5a:0e:82:91:a9:59:8d:d2:89:f1:55:56:42:c6:e4:40:86:
8e:f3:df:6a:c4:51:9c:74:e5:67:70:df:90:89:ef:45:f7:fb:
10:a3:5a:aa:e5:f8:2f:f8:f7:f2:79:a0:28:b2:48:76:50:1f:
16:cb:98:55:8f:f9:59:9d:b5:1d:6b:5b:2c:8e:d7:f6:d5:6a:
5e:89:dc:47:2c:d5:b3:2a:5a:4d:9b:56:fd:32:2e:04:0d:e2:
d1:b2:ea:4c:22:27:62:9f:f1:fc:64:bd:e8:2e:a9:9e:18:45:
11:e7:75:cc:8f:26:b4:61:76:15:d1:20:81:d8:14:f8:ef:1f:
e5:27:28:57:c2:0f:2f:14:34:ad:71:94:e6:57:64:45:cd:2b:
8f:64:99:26:43:ac:82:cc:16:42:eb:5d:8f:09:c8:4d:88:e2:
a6:77:e0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:44 2024 by rpki-client on console-ams.rpki-client.org