Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89F123FC9F9711EFADBA0E63762E951A.roa
File: 89F123FC9F9711EFADBA0E63762E951A.roa (raw, json)
Hash identifier: ugcX683W3AowT8OIZuCsmk9AebJnu4n61ZsBd82YHBU=
Subject key identifier: 67:82:5A:03:DA:B3:19:B1:C8:2D:4C:D3:68:82:22:68:4A:CA:67:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010BBC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89F123FC9F9711EFADBA0E63762E951A.roa
Signing time: Sun 10 Nov 2024 19:11:07 +0000
ROA not before: Sun 10 Nov 2024 19:11:04 +0000
ROA not after: Thu 21 Nov 2024 19:11:04 +0000
asID: 63139
IP address blocks: 154.223.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68540 (0x10bbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 10 19:11:04 2024 GMT
Not After : Nov 21 19:11:04 2024 GMT
Subject: CN=6731054b-b7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a7:43:20:a2:94:85:d2:b0:06:77:fa:2a:0b:
57:a1:3d:7f:ea:29:e6:5a:59:d8:e7:be:de:1f:47:
40:78:5a:b2:17:b2:7c:75:4f:1d:0a:60:76:0d:5a:
4c:6e:cb:54:73:70:82:6f:51:1d:3f:b9:52:e8:ce:
4e:e7:b4:cf:ef:99:7d:96:0b:22:2f:b8:0d:84:d2:
ba:a6:2a:7e:1d:a9:2a:f2:e2:0b:27:37:1e:da:38:
34:e3:66:20:56:71:f1:dd:2c:e8:83:20:0f:b2:8d:
45:2f:6b:b9:ed:37:45:e2:06:61:62:59:bb:28:67:
ae:02:cb:d6:45:c9:29:a9:f7:4c:05:b1:05:0d:51:
1f:bb:61:b3:e9:19:31:dc:0a:c4:ca:77:66:77:e2:
b1:f0:49:9d:42:b6:f8:ec:70:24:64:ea:01:62:36:
d3:74:e0:17:b9:7a:33:0e:98:ca:86:4c:3f:aa:5e:
93:71:c1:3c:30:79:fb:c5:c4:b7:0c:56:27:9a:cd:
64:91:16:29:91:2e:7d:1d:61:98:2e:fc:3a:f5:13:
a6:d7:11:cf:1d:d1:d6:b7:5f:de:ee:c4:b1:46:75:
f8:2c:df:7b:b5:07:2d:7c:c6:92:40:b0:9b:5a:75:
af:64:d2:61:5f:df:e5:a8:0b:3b:0e:04:c9:96:05:
4e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:82:5A:03:DA:B3:19:B1:C8:2D:4C:D3:68:82:22:68:4A:CA:67:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89F123FC9F9711EFADBA0E63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.25.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:c2:58:25:05:07:0c:f2:43:d9:9c:f2:e0:fe:7d:3f:59:27:
38:b5:61:6f:71:4e:2b:33:b0:1b:c0:27:46:84:0d:85:1d:11:
87:3c:07:ab:23:03:56:37:80:14:39:78:ed:62:69:54:a7:c5:
ea:6c:58:36:25:cc:04:8e:32:0a:8a:73:13:b7:b1:18:47:f0:
a2:41:a6:a3:ff:9a:c9:b7:62:62:fc:1f:4a:29:8f:d7:78:87:
87:e2:07:63:28:32:1d:85:ee:fb:bb:b8:e6:46:7d:d2:9a:3f:
41:a8:76:17:71:8f:68:2f:7b:86:d1:f9:46:4b:4a:48:4d:13:
e8:cf:ef:e8:a2:6b:1f:ca:f3:a9:b6:c9:20:2b:ef:29:ce:25:
7b:6b:b9:1a:c5:88:49:63:37:70:ad:bd:d1:ff:38:ed:d2:57:
32:33:1c:c8:f2:5b:f4:34:b6:66:81:1e:67:95:96:86:f6:a3:
fd:2f:63:2f:84:ca:64:1f:ef:59:bb:f0:48:1e:c7:21:4f:e3:
3e:4e:24:8c:ef:96:81:d8:8b:82:2a:75:a9:91:aa:70:10:ec:
cb:c0:9c:7a:c2:d9:3e:09:e6:83:af:bb:5f:b1:c0:d5:6a:a3:
2b:6d:2f:72:96:12:26:83:a4:69:96:a5:33:9a:ec:f2:a6:82:
9a:aa:37:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:02:52 2024 by rpki-client on console-ams.rpki-client.org