Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C09E4EE441511EF874BAF47762E951A.roa
File: 9C09E4EE441511EF874BAF47762E951A.roa (raw, json)
Hash identifier: xBg/UWi6W1aqKOm44bK01ESerN1hOWJbIAaEaQr0NH8=
Subject key identifier: 62:A2:AF:2E:2D:95:E0:06:02:9D:67:C7:43:CD:5D:6E:0A:97:6F:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D321
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C09E4EE441511EF874BAF47762E951A.roa
Signing time: Wed 17 Jul 2024 08:21:47 +0000
ROA not before: Wed 17 Jul 2024 08:21:44 +0000
ROA not after: Sat 27 Jul 2024 08:21:44 +0000
asID: 22773
IP address blocks: 154.84.168.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54049 (0xd321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 08:21:44 2024 GMT
Not After : Jul 27 08:21:44 2024 GMT
Subject: CN=66977f1b-8a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2e:13:3d:62:82:72:9e:24:95:1b:32:f1:12:
b9:27:20:d7:77:c1:5a:08:cd:2d:60:19:ca:73:7b:
6f:7d:0e:55:b1:43:97:8b:d9:3b:b9:9b:20:23:fe:
13:8f:29:65:f0:15:bf:28:01:c9:ca:1a:a2:f2:94:
0a:31:1a:d0:bf:19:6b:c1:01:c1:d6:7a:0e:61:fd:
73:f1:9a:7b:6f:42:57:c7:f5:4c:90:7f:f0:19:20:
df:01:7c:a7:1b:d7:54:8e:0d:50:5e:5a:99:87:8f:
88:a9:ff:64:b9:bf:df:eb:bf:0a:42:ae:b6:83:91:
84:88:33:24:c0:ed:be:db:b2:33:1d:bb:af:62:59:
14:ad:81:d6:2f:30:56:45:06:4d:c8:30:8b:b6:06:
89:c7:81:78:0d:09:88:8a:9e:bc:a9:a5:94:de:70:
b1:28:59:33:5d:75:a5:0c:62:d8:9f:e6:e9:f2:46:
94:94:c4:2b:59:61:0e:8d:1d:48:ac:a8:0e:fe:a8:
70:08:bc:d5:1b:50:fc:73:96:e7:11:31:e8:19:7a:
e3:db:3a:3b:7a:e8:aa:f3:94:d8:62:f3:9e:6b:f2:
8e:b0:ab:a6:13:a3:2e:93:60:b9:8d:ef:dd:3c:74:
d4:c5:99:8c:2c:f1:91:8f:2a:75:3b:53:50:ca:59:
05:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A2:AF:2E:2D:95:E0:06:02:9D:67:C7:43:CD:5D:6E:0A:97:6F:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C09E4EE441511EF874BAF47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.168.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:2a:d7:16:63:05:83:9b:c8:c9:c0:16:58:a5:da:e1:b7:24:
65:c4:ec:a0:6d:25:e2:3d:93:48:05:36:56:d2:21:c6:13:70:
c1:0d:72:31:ad:cb:df:df:68:f1:40:d3:c8:0d:4b:ed:d7:34:
da:17:2a:37:e6:81:8c:2f:41:fe:66:19:44:08:23:a9:d5:0b:
45:42:ff:f7:e1:ea:c2:80:27:68:c4:1d:73:a3:df:bf:af:5e:
29:29:76:d6:bf:89:8b:91:ba:df:9d:4e:45:75:80:a4:ae:7d:
58:36:ff:11:ee:bf:4d:48:31:4d:86:1e:84:78:2b:ab:db:75:
58:0e:50:c6:21:73:c8:82:67:57:8f:5a:1e:2f:ab:b7:48:4f:
f8:42:e7:99:57:aa:fe:c6:a2:92:e1:b2:6d:44:ac:96:67:d8:
8e:9b:b9:2c:df:f2:76:70:f3:64:71:22:cf:ef:0b:7b:49:b1:
7a:12:70:00:87:d0:5b:1c:39:c5:4a:5b:9c:42:e4:34:36:8d:
69:b3:3d:78:d7:81:05:51:31:5d:a4:ea:e5:17:54:1e:4d:b1:
e9:9f:dc:ba:93:d2:76:99:8d:58:cc:a8:3a:43:ee:83:35:93:
aa:d8:53:15:b3:52:a6:18:da:82:75:ca:b0:d9:ef:20:18:f8:
e0:6f:50:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 03:06:40 2024 by rpki-client on console-fra.rpki-client.org