Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CEE4D90EDB011EE883BB377775412E6.roa
File: 7CEE4D90EDB011EE883BB377775412E6.roa (raw, json)
Hash identifier: JptSGgbTuS+9YBQfbFr7824RAU92FfnSd7DwDY7I0xc=
Subject key identifier: AA:CE:75:50:68:72:74:EF:11:A9:2B:E6:6F:9E:5F:6F:3B:23:FF:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A6F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CEE4D90EDB011EE883BB377775412E6.roa
Signing time: Fri 29 Mar 2024 09:41:16 +0000
ROA not before: Fri 29 Mar 2024 09:41:13 +0000
ROA not after: Fri 26 Apr 2024 09:41:13 +0000
asID: 62240
IP address blocks: 154.194.70.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42737 (0xa6f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 09:41:13 2024 GMT
Not After : Apr 26 09:41:13 2024 GMT
Subject: CN=66068cbc-61f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:33:83:c3:3f:e8:2c:02:15:57:cd:5d:e5:
3a:fc:cf:6d:cd:21:db:c3:17:f6:c0:85:b9:a8:18:
41:60:41:04:db:bb:e4:d3:dc:78:2e:b4:9d:d1:b9:
a0:f3:56:6c:b7:2c:ff:53:11:3c:1f:7d:82:2b:89:
55:e8:17:8b:54:df:40:fc:f7:69:fd:a0:54:33:88:
e1:88:97:5b:a7:3a:6c:cb:b3:2c:a9:a3:f7:9e:55:
21:4f:94:d5:45:9c:8a:21:69:6a:d4:18:6a:4e:fe:
c1:56:66:00:4a:9d:a6:ce:ad:23:27:49:fd:82:21:
3d:13:53:09:9b:62:36:8f:bc:3a:45:e3:f8:bf:98:
e2:36:8b:fd:93:b8:7a:63:1c:31:95:99:6c:7b:84:
2b:1a:66:c7:78:20:e0:7f:a1:92:df:5e:f1:df:4f:
81:88:e6:7c:76:80:42:1f:79:35:89:8b:0b:59:d5:
67:19:6b:0e:bf:9d:83:9c:51:33:33:b3:0b:80:32:
a2:2b:3b:a6:b1:e2:37:6e:cb:f1:14:45:4f:6a:6b:
7d:11:b2:2f:ae:20:35:84:0f:a1:06:87:d5:8e:06:
ff:b6:70:8a:33:bb:13:83:f4:40:15:6b:43:08:4f:
a6:97:8f:5b:f1:05:15:3d:55:3b:66:63:53:fb:18:
25:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CE:75:50:68:72:74:EF:11:A9:2B:E6:6F:9E:5F:6F:3B:23:FF:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CEE4D90EDB011EE883BB377775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.70.0/23
Signature Algorithm: sha256WithRSAEncryption
19:73:9f:e7:7f:1a:29:63:cc:34:ae:90:bc:bc:0a:67:d0:e9:
9b:53:b2:b6:ac:51:33:6e:d0:37:51:c9:78:c1:a1:8d:23:02:
92:da:cc:b1:76:4a:50:8e:1c:85:58:6d:08:3a:d0:91:02:0c:
85:ad:44:e9:67:cf:c3:ce:27:40:e9:f5:10:7e:ca:19:d5:c4:
c5:b9:4a:d3:d3:ba:25:47:fb:98:82:6c:1d:18:7c:1c:60:69:
b0:c9:d6:6a:89:86:56:f8:a2:dc:e5:64:86:de:87:df:b0:02:
12:35:a7:a3:28:57:81:1d:49:c3:c4:0c:2f:8e:39:ae:dc:6c:
44:00:a0:17:70:9d:6c:a8:e3:b4:6f:df:7c:da:08:0c:20:69:
fb:32:5f:cd:a0:de:db:ec:af:ed:a0:95:cb:24:e2:34:d4:ca:
5e:07:e1:d7:e3:c0:00:4b:59:4e:db:5d:65:04:4e:d4:bd:6b:
9b:b6:e0:82:e6:33:9f:75:cb:57:32:34:de:b5:02:39:e7:0a:
f5:cb:e9:d8:71:5f:39:91:8b:1b:63:5a:3e:d0:4c:e2:e5:3b:
29:60:f6:fd:b4:51:75:41:ff:17:ac:82:e7:5c:4e:63:41:b9:
81:21:ff:7d:8e:ed:e2:39:55:ad:d1:dd:d2:a2:4f:02:16:f4:
7f:dc:8c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:40 2024 by rpki-client on console-ams.rpki-client.org