Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E8CD2A4038E11EF8E5B1264017001B1.roa
File: 7E8CD2A4038E11EF8E5B1264017001B1.roa (raw, json)
Hash identifier: aobQuSM+RuXOVrXGhON6A/4cdvyjMZNplXWHtpxgU9c=
Subject key identifier: B0:06:CB:3A:36:53:20:CC:01:6E:71:F5:93:0C:D3:81:D4:68:DD:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B17A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E8CD2A4038E11EF8E5B1264017001B1.roa
Signing time: Fri 26 Apr 2024 05:33:22 +0000
ROA not before: Fri 26 Apr 2024 05:33:18 +0000
ROA not after: Sun 05 May 2024 05:33:18 +0000
asID: 139646
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45434 (0xb17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 05:33:18 2024 GMT
Not After : May 5 05:33:18 2024 GMT
Subject: CN=662b3ca2-20cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:12:ab:00:cb:fa:35:16:00:27:b8:0a:cd:
56:9e:2f:0d:cc:1e:ff:65:c4:ec:1c:9d:22:c2:9c:
57:d2:95:c0:40:13:5c:9d:b9:c4:f6:17:b0:ac:38:
e5:d6:74:64:7c:5b:65:e1:48:b6:ea:c1:7b:f5:5a:
4c:56:86:76:19:b7:82:11:30:9f:59:65:21:81:d1:
8c:d8:e4:da:68:32:4e:0b:c3:56:2a:10:c1:26:4c:
15:3a:2c:0e:e3:ad:8f:16:2e:c9:3b:b5:b8:41:fa:
80:c1:05:e8:05:f2:85:3e:09:2e:de:ba:17:ef:d7:
8f:33:62:25:47:7f:e3:ed:24:81:0c:c2:5a:c9:73:
a9:97:d1:e3:b8:2d:ad:c6:10:4e:f6:1c:9d:09:f0:
0f:e5:66:51:8d:a1:06:c6:3a:26:5b:c6:be:fa:2e:
09:84:97:09:cb:31:b9:3c:f9:ca:57:76:a4:67:6e:
5b:e4:98:df:90:52:58:1d:0e:96:9c:f7:ef:7d:59:
fa:8e:cb:87:5f:b2:8e:bd:c1:a5:97:cc:c3:da:c4:
f6:02:0a:b5:1b:f4:f0:80:62:d2:12:cd:5c:65:02:
0a:9d:c2:02:c6:cb:8d:70:41:a2:82:5d:98:87:68:
a4:b1:a6:08:58:af:e8:47:a4:8a:c5:c5:01:73:99:
a5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:06:CB:3A:36:53:20:CC:01:6E:71:F5:93:0C:D3:81:D4:68:DD:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E8CD2A4038E11EF8E5B1264017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:be:e1:17:60:7e:80:23:27:31:59:83:58:1c:d4:87:bf:d2:
5c:a5:72:ae:da:84:38:8e:71:27:1a:00:dc:cc:2e:17:da:a1:
b5:1e:5f:1a:87:70:a9:70:c7:fa:de:95:0e:b2:95:26:e7:06:
f0:f0:84:97:5e:bd:31:73:64:d6:b0:f6:c0:a0:45:0a:68:39:
13:d6:e0:12:34:ca:f7:d2:cb:2b:be:db:55:fe:12:b9:f1:e1:
21:51:41:c2:7a:48:c5:2d:e1:5a:c6:b8:d8:4c:fa:30:a8:d8:
37:93:0a:95:a6:7c:e7:49:a4:22:0e:88:10:44:79:2e:63:8d:
9d:06:19:6f:5a:ff:cc:b4:0f:f0:8a:d7:5a:bc:87:84:c4:f9:
62:af:94:ae:ba:b9:f3:0f:69:bc:a9:60:f8:5f:56:a2:24:e8:
fb:cc:b3:91:87:48:61:0b:c2:56:95:75:27:1a:f7:50:c2:1c:
77:32:75:e8:a3:a2:77:e6:60:70:c6:6f:87:d4:31:3e:c9:fe:
26:70:63:99:0c:b1:c6:aa:97:6f:49:30:93:3a:e8:e0:7a:59:
5b:af:29:17:5a:d6:ac:44:7f:b8:b7:74:f0:ef:3b:1f:4e:31:
22:c3:3f:34:6c:f3:38:c9:fa:f6:ed:3c:1d:de:ac:bd:d1:a8:
bd:4b:7d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:11:10 2024 by rpki-client on console-fra.rpki-client.org