Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/928CEAEE1A3911EEAC143B0E4AD9E6FC.roa
File: 928CEAEE1A3911EEAC143B0E4AD9E6FC.roa (raw, json)
Hash identifier: kyaNjgj0hjQ3+Je2OBsPRmLrobWr29v5AcGEKk1qSBY=
Subject key identifier: 7C:61:49:AC:52:05:1B:8D:74:C5:E3:92:EA:0E:29:A0:9C:96:A0:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2FFB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/928CEAEE1A3911EEAC143B0E4AD9E6FC.roa
Signing time: Tue 04 Jul 2023 07:08:27 +0000
ROA not before: Tue 04 Jul 2023 07:08:23 +0000
ROA not after: Wed 24 Apr 2024 07:08:23 +0000
asID: 63888
IP address blocks: 154.209.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12283 (0x2ffb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 07:08:23 2023 GMT
Not After : Apr 24 07:08:23 2024 GMT
Subject: CN=64a3c56b-e546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:85:54:9c:eb:40:e5:13:7a:e0:0a:63:6d:
12:96:bc:6e:02:8f:13:74:78:9a:4d:06:ff:74:a1:
da:43:70:48:0d:d3:5d:58:27:85:b7:b1:ad:99:7d:
55:66:4d:5a:d6:17:5e:7a:73:e5:46:a4:9d:b2:d1:
12:b5:63:9a:25:fb:73:d9:e2:e7:54:58:56:5f:16:
eb:7c:0f:85:7a:5a:0e:45:df:c1:a5:6e:ee:e6:03:
7a:17:10:a2:5e:9c:ac:fb:7b:a6:a8:37:d7:ab:bb:
13:7f:98:ed:bc:f0:73:c3:da:99:71:4e:14:95:77:
8a:7a:e5:50:5b:a4:60:bf:f2:22:b8:be:d1:0d:d7:
08:e1:19:e6:f6:10:59:2e:87:80:64:f4:77:ad:5c:
5d:3c:09:bc:a0:6c:b0:a1:f3:9e:98:c8:66:04:15:
8d:52:19:09:a8:8a:c0:d2:db:c0:d0:8b:a0:90:2b:
e4:8e:7d:8f:3b:84:2c:b1:65:14:9b:72:eb:35:dd:
5f:37:7d:d7:6d:60:3b:8d:96:3e:25:c4:c6:a8:05:
bd:71:47:48:ee:e0:b4:c7:0e:83:e9:48:8a:8c:f2:
98:f1:44:50:cd:84:4b:fa:e8:98:3b:4b:d8:93:dd:
76:6f:52:b0:9e:a5:b3:22:3f:9b:64:e5:c0:bf:48:
73:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:61:49:AC:52:05:1B:8D:74:C5:E3:92:EA:0E:29:A0:9C:96:A0:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/928CEAEE1A3911EEAC143B0E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.66.0/24
Signature Algorithm: sha256WithRSAEncryption
32:94:41:32:06:db:fb:b5:59:76:04:8a:ff:40:dd:b6:f9:69:
5f:14:8a:da:35:5a:89:52:ba:1c:bb:11:66:7c:f8:fe:f0:e8:
a3:91:3b:1a:75:56:6f:9d:60:91:44:92:70:c8:12:ec:3b:fb:
cb:91:96:c4:03:c6:21:89:c1:c0:d0:0d:36:c0:4c:4a:90:f8:
a6:b4:37:2c:03:86:1f:a0:4a:62:bc:0f:e8:5d:7d:be:64:13:
a8:10:28:99:b8:92:4d:0a:a4:74:fe:a8:20:b5:1e:a1:c8:88:
77:d0:d4:0f:14:87:50:5d:2e:cc:31:ca:fa:87:34:0e:ab:22:
78:ae:05:85:90:bd:e0:25:c3:e0:c1:37:8c:16:1d:e1:bd:db:
6e:44:75:d8:78:9a:f5:0f:f2:18:c3:1d:68:72:f9:d1:28:45:
aa:b5:e8:84:83:78:5e:26:75:76:bc:cc:e1:64:e5:4b:81:f1:
0b:73:d5:bd:0c:f2:de:1b:7a:7c:38:c7:8c:8e:06:9b:c3:fd:
32:9f:2e:6a:93:17:5e:4c:2d:72:f9:76:94:c6:50:46:7c:96:
a2:6b:1e:14:20:c6:9f:bb:32:63:a7:be:f9:ed:ca:c8:62:48:
08:dd:88:25:f1:fa:3a:b6:86:69:eb:85:67:95:4b:16:cb:64:
1f:b8:fb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:44 2024 by rpki-client on console-ams.rpki-client.org