Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9554353C0F3111EF940B2331017001B1.roa
File: 9554353C0F3111EF940B2331017001B1.roa (raw, json)
Hash identifier: VotUSDaRNian7pisXFsvFOvJ/LLNSMfAGB/+iVIu7vk=
Subject key identifier: 68:EF:97:26:CD:3E:BC:42:CA:3A:9A:B0:CE:53:42:E8:48:E7:3D:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B6DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9554353C0F3111EF940B2331017001B1.roa
Signing time: Sat 11 May 2024 00:58:30 +0000
ROA not before: Sat 11 May 2024 00:00:27 +0000
ROA not after: Tue 21 May 2024 00:00:27 +0000
asID: 44559
IP address blocks: 154.218.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46813 (0xb6dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 00:00:27 2024 GMT
Not After : May 21 00:00:27 2024 GMT
Subject: CN=663ec2b6-a826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:8a:9b:bc:9b:95:39:ee:f6:c0:8e:d1:c6:
51:a2:29:ba:88:a1:44:12:ec:1d:cd:8e:e3:25:3a:
ae:83:6d:b3:67:d0:ae:27:bf:ac:63:78:ea:b9:7f:
0b:93:a0:0d:73:b0:f0:ff:de:42:94:f6:0c:a7:42:
d0:da:70:19:77:66:4e:43:25:55:5c:55:51:f8:72:
c3:c5:a1:5b:5b:ab:bc:e7:92:8f:9c:56:4a:88:08:
c7:83:fc:0b:77:d2:4b:79:3a:d1:1d:44:a9:03:ca:
35:70:85:86:35:e4:b9:0e:2a:10:34:cc:6c:6f:c1:
b0:76:9e:6d:03:21:2e:1f:60:04:e1:ec:cf:1e:77:
0c:3f:80:b6:9a:cd:c7:6c:39:c6:af:e4:47:3a:be:
12:15:62:a1:d4:1f:7d:73:86:fa:7c:2c:d5:04:fc:
75:26:9a:9f:20:5a:f4:86:05:ce:80:74:2d:0e:62:
42:1e:cf:a9:a2:b3:fc:f4:d3:06:26:d2:f7:a5:4c:
73:86:b4:37:b7:a9:48:47:08:43:d3:03:03:c4:12:
6f:4f:02:32:5e:7c:43:2d:a8:22:b7:5d:1f:17:08:
54:c1:31:3b:61:5e:19:86:8a:dd:fb:ce:37:ba:26:
c8:79:b3:34:20:04:0f:e5:81:1a:c4:35:0e:20:dd:
bf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EF:97:26:CD:3E:BC:42:CA:3A:9A:B0:CE:53:42:E8:48:E7:3D:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9554353C0F3111EF940B2331017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.32.0/19
Signature Algorithm: sha256WithRSAEncryption
cc:67:2f:39:1c:16:89:81:c1:5f:4f:da:ed:55:e7:5b:ff:7d:
6d:d1:62:cc:f2:7e:4e:86:09:22:63:69:b6:ca:b1:2f:db:04:
ff:c2:59:90:38:ee:08:ad:ed:26:f6:79:96:2f:52:90:67:5a:
a4:4e:93:92:17:e4:67:53:7c:30:11:53:56:35:17:4b:73:2d:
ed:dd:c9:92:c4:df:c4:be:d5:a1:de:9e:1c:fd:9a:de:ce:50:
7c:f8:4d:eb:8e:97:8e:32:79:25:8a:90:b7:d6:4f:23:f4:0d:
0a:5b:51:81:4a:02:fa:1f:4e:bb:de:0a:57:fe:c2:46:a7:8b:
f5:16:5e:73:b2:74:cc:07:2f:ce:18:23:63:0b:eb:93:6a:c4:
d5:13:a7:c0:04:ba:45:1f:a3:59:c7:65:c4:53:28:c4:09:5e:
a3:88:a3:57:9f:eb:09:01:37:e7:65:d3:a3:f1:a0:23:a8:ca:
e1:67:b8:f8:5f:34:44:11:80:e2:d2:f0:7d:cd:f6:0f:f7:49:
18:bf:e0:48:e4:09:4a:fc:8a:0e:21:2d:41:f3:9e:b3:60:20:
23:4b:2f:64:c3:16:c9:c6:a9:56:dd:08:83:a1:71:ff:f2:da:
a3:8b:bf:f4:a6:a5:87:74:7c:29:1e:74:81:a3:73:c8:09:a1:
38:34:58:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:04 2024 by rpki-client on console-ams.rpki-client.org