Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87DCCA5E128311EF87F75B4C017001B1.roa
File: 87DCCA5E128311EF87F75B4C017001B1.roa (raw, json)
Hash identifier: vQlx/KtqRvQXAx2UAFr3kOKaWsOO9A3dJv1NzY+bbU4=
Subject key identifier: C8:C6:CE:AD:3A:9C:E3:77:1B:D2:89:4E:F7:C5:A3:40:D4:E5:FB:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B78B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87DCCA5E128311EF87F75B4C017001B1.roa
Signing time: Wed 15 May 2024 06:22:40 +0000
ROA not before: Wed 15 May 2024 06:22:37 +0000
ROA not after: Sun 26 May 2024 06:22:37 +0000
asID: 139471
IP address blocks: 154.210.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46987 (0xb78b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 06:22:37 2024 GMT
Not After : May 26 06:22:37 2024 GMT
Subject: CN=664454b0-79cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:7b:09:a0:3d:4f:82:b3:36:4e:89:97:30:
32:e3:fe:58:c2:2a:a0:35:ad:a4:63:4e:37:d6:f1:
36:78:d6:ed:6e:31:ea:28:f7:5f:b8:d0:7f:a5:c4:
3f:44:dd:8b:ec:ab:db:37:05:93:57:54:23:56:c3:
e9:1c:86:8c:f6:67:90:d7:cb:d4:d7:6d:60:7e:e0:
0c:29:69:21:42:54:b9:7e:c9:69:a6:82:0c:56:54:
7d:dd:fe:d9:e1:b4:9f:3d:56:3a:d7:a2:8b:58:c0:
36:ec:82:7a:cc:ab:5b:1b:33:fe:4e:c3:5b:02:b1:
d6:56:57:46:18:27:56:81:f5:ec:47:18:17:d4:0b:
cb:a6:e7:e1:3d:2e:69:02:8b:4d:3e:54:d0:a2:c3:
7a:a4:28:34:00:56:af:c1:1f:7c:1f:22:a3:de:8a:
de:b2:8c:d8:84:24:9c:9d:d4:08:9a:ba:1b:24:34:
59:44:59:55:8b:b5:f6:15:95:a2:26:0a:96:f4:04:
ea:9d:b2:03:a0:86:c1:ae:aa:18:44:ea:a8:6a:c0:
af:ee:39:5f:e6:cd:cc:bb:bc:f0:88:0a:b6:e4:ab:
13:db:f7:3f:0b:24:85:60:da:7b:ca:78:77:a5:47:
d6:04:76:9a:a0:30:00:ec:98:02:32:79:10:3c:8b:
f2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C6:CE:AD:3A:9C:E3:77:1B:D2:89:4E:F7:C5:A3:40:D4:E5:FB:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87DCCA5E128311EF87F75B4C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.32.0/19
Signature Algorithm: sha256WithRSAEncryption
d4:0a:dd:47:ba:3d:9a:59:af:af:4e:cc:c8:48:df:8b:a0:ee:
d7:6e:b9:ce:8b:b3:e2:a6:69:25:bb:e2:af:36:0a:f9:77:ce:
92:be:c7:b4:d3:b8:82:72:5e:43:5c:de:a4:b8:3d:65:3f:a5:
63:f7:89:b1:61:ff:a3:74:a9:4f:e2:2a:fe:85:01:a4:30:61:
c1:f4:91:43:ba:e2:1d:da:92:98:b3:49:16:7b:78:5a:ed:8f:
ff:b1:28:18:81:8d:0b:b9:79:10:70:df:74:03:19:7e:ab:ff:
99:85:d4:5a:a9:3a:86:7b:40:16:32:27:bd:9b:76:9a:88:b0:
3e:81:c7:99:ec:e8:28:be:3b:9c:44:bb:b6:01:46:f6:52:4a:
10:1c:cf:2c:75:d2:15:66:ef:3e:3b:59:45:9c:08:ff:30:cf:
93:e5:7d:39:e2:43:8d:58:a4:42:74:fe:7e:78:78:13:dd:10:
fb:28:72:7c:a2:9c:12:60:ff:73:80:ac:02:52:07:3e:8b:34:
e3:25:42:36:81:d7:19:91:33:35:6a:17:f8:bf:8c:d7:ce:63:
61:f0:15:a0:d2:1b:28:90:f1:86:03:2c:95:6c:39:36:dd:75:
6f:12:b2:8b:80:9f:54:a0:56:74:5f:02:91:3a:d5:09:2e:be:
3f:80:a1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:55 2024 by rpki-client on console-ams.rpki-client.org