Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/937460FA038011EFBBF233F3007001B1.roa
File: 937460FA038011EFBBF233F3007001B1.roa (raw, json)
Hash identifier: g87wrchgVXqtK4jWPT02K8fOfQi9cl3r3+uaw1Z77/g=
Subject key identifier: D6:9D:5A:B6:9F:47:FB:0F:E8:63:7E:05:F0:E5:B0:BC:FD:9A:0B:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B146
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/937460FA038011EFBBF233F3007001B1.roa
Signing time: Fri 26 Apr 2024 03:53:44 +0000
ROA not before: Fri 26 Apr 2024 03:53:40 +0000
ROA not after: Tue 03 Sep 2024 03:53:40 +0000
asID: 131685
IP address blocks: 154.210.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45382 (0xb146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 03:53:40 2024 GMT
Not After : Sep 3 03:53:40 2024 GMT
Subject: CN=662b2548-a2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5e:29:66:52:3d:9b:66:7e:b6:8d:3c:2e:87:
21:e3:92:5e:d6:fb:4e:f7:29:66:23:59:e3:ab:7d:
aa:cb:16:17:d7:9b:04:31:62:db:3a:18:9a:a4:dc:
1c:7b:0d:5e:a6:79:62:89:1a:cf:00:1b:99:53:af:
56:05:00:a8:e7:36:09:43:7c:72:61:83:a8:b8:1d:
ce:c1:b9:38:38:b4:bb:ed:cf:7a:27:9d:81:cf:12:
86:73:a3:05:8c:d0:86:d3:b3:be:17:55:2a:c6:dc:
c5:a3:7d:67:3f:2c:11:67:28:43:fb:cd:96:29:0d:
c6:03:6c:28:82:e8:64:f8:ec:c7:5f:37:33:6c:e6:
62:8a:08:dc:57:70:f0:47:ee:11:dd:b2:ef:23:7b:
71:3e:2a:5d:2a:34:76:ae:65:12:42:c5:0e:d5:f7:
83:ab:ab:03:1a:6b:5e:fe:bf:0d:01:ae:6a:58:b6:
f2:c6:45:c1:69:c4:a4:c9:88:f2:ec:bb:18:9c:d1:
55:c2:62:77:e3:97:e1:57:79:87:e4:a7:08:b7:a6:
f8:a1:31:a0:71:0e:81:74:2c:6c:6e:00:b1:ad:ed:
d0:cd:d6:52:6e:45:f9:79:cd:06:cc:6d:82:5e:01:
5d:36:ec:6e:76:5e:31:1e:86:99:32:35:aa:a5:8c:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9D:5A:B6:9F:47:FB:0F:E8:63:7E:05:F0:E5:B0:BC:FD:9A:0B:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/937460FA038011EFBBF233F3007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.196.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:5c:a0:95:5f:30:b0:56:12:e5:ac:24:b2:32:c6:f3:65:fc:
0a:63:60:32:93:1d:02:29:a3:b7:8f:3b:12:1d:76:bb:38:94:
34:93:f5:b5:63:3f:1c:da:3d:8a:f6:f6:4b:98:c8:7f:38:be:
48:6a:93:5c:16:ae:c4:c1:9e:5f:b6:81:d3:37:46:e3:1b:49:
9b:0f:7b:0b:80:fb:df:9d:43:73:3d:b4:60:ea:e5:04:1a:7c:
2a:00:64:fb:f0:83:7d:fd:02:c8:1e:d7:f3:26:a6:f4:68:af:
19:07:eb:b3:0a:e5:47:67:e6:8a:0b:25:ea:72:15:06:2d:4f:
cc:f0:e0:1e:e0:86:c8:62:ff:5e:28:0a:de:43:4b:dd:0e:d5:
14:22:af:31:fb:79:68:29:cd:56:3f:1b:06:f4:9a:34:a3:5f:
8f:03:21:6d:05:fe:8d:15:f5:79:1d:30:6f:74:e9:63:bf:96:
44:53:ce:be:b2:64:e4:c4:bf:aa:0d:f7:b8:e2:0d:ed:f7:42:
3a:f0:3e:e5:a5:db:ba:e1:28:47:e8:b7:cd:3a:23:e1:26:6e:
7c:f0:8b:36:4b:5e:e2:91:be:c3:62:76:78:94:6e:76:fe:26:
11:60:82:dd:2d:70:4a:bd:78:5e:36:6b:50:57:7a:56:84:e8:
34:e3:11:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 11:37:22 2024 by rpki-client on console-fra.rpki-client.org