Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A173C2C8FBA011EEB9C24345017001B1.roa
File: A173C2C8FBA011EEB9C24345017001B1.roa (raw, json)
Hash identifier: h6t02g9SGKVz3Y5SC0vFp7wTz7LNIkxGMaqSZ/izESg=
Subject key identifier: 80:AF:90:4E:51:97:31:19:00:F2:BD:8A:F0:89:F9:2A:49:64:3D:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD41
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A173C2C8FBA011EEB9C24345017001B1.roa
Signing time: Tue 16 Apr 2024 03:23:02 +0000
ROA not before: Tue 16 Apr 2024 03:22:58 +0000
ROA not after: Wed 24 Apr 2024 03:22:58 +0000
asID: 136950
IP address blocks: 154.213.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44353 (0xad41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 03:22:58 2024 GMT
Not After : Apr 24 03:22:58 2024 GMT
Subject: CN=661def16-1d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:03:3c:62:bd:ea:0f:a9:61:ab:0f:5e:d2:c8:
8a:ee:b1:97:87:17:3c:64:5d:1f:80:f0:cc:85:47:
26:8a:58:47:a2:dd:11:6a:a5:19:3a:22:6a:fd:31:
47:30:8a:23:32:0c:6c:69:c7:bd:a3:8e:c3:e5:ae:
e0:93:f8:18:38:62:2e:46:31:b6:2b:39:e4:5b:1c:
59:f1:f4:61:da:8f:8f:7f:9b:52:73:a1:3d:68:a8:
d4:ca:f3:57:1e:92:69:51:1d:f2:6d:4c:d1:9f:75:
81:09:84:a1:42:26:c5:8b:3c:5c:13:40:0e:95:5b:
a8:7c:15:a1:2d:d7:63:80:a2:bb:f7:02:d4:c3:14:
61:ce:cb:aa:4a:bd:8e:b7:5c:08:97:83:95:25:f1:
24:96:d4:5a:f1:92:f9:a0:66:0f:24:0f:62:6b:bd:
b4:fb:41:a6:95:ac:f5:ca:fd:e3:5d:19:e3:03:25:
3e:bd:7c:fb:44:19:22:20:eb:1f:ba:69:d1:24:3c:
25:4b:83:2d:f4:68:f9:e4:6b:58:80:a0:9d:9d:42:
43:c1:52:75:1c:f7:29:dd:20:59:64:49:72:1c:50:
d5:35:7a:e4:8d:e4:a3:1e:9e:27:2b:05:b1:f2:81:
ff:96:53:2e:0d:5a:2c:58:f3:fb:0a:b7:cc:af:82:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AF:90:4E:51:97:31:19:00:F2:BD:8A:F0:89:F9:2A:49:64:3D:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A173C2C8FBA011EEB9C24345017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.27.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:72:79:b4:b1:6b:5e:51:e6:b4:29:37:f1:52:fc:16:c8:9c:
89:d1:0b:c3:e4:ab:ee:e4:b4:ef:6f:00:ff:b8:ee:8c:87:2f:
16:92:7b:a1:ef:c4:e1:7f:36:52:aa:1e:14:07:b2:ae:c3:fb:
18:9f:4a:1b:f8:8a:25:96:55:10:76:72:23:45:f2:a1:19:8f:
34:7e:23:d2:03:24:31:81:96:c5:cd:b8:77:11:1e:e9:76:03:
07:41:7a:aa:2f:49:fa:0e:15:ba:10:2c:e7:63:42:39:52:c5:
e6:a6:7c:e0:06:c1:7b:9a:bc:40:48:5d:c1:d4:d0:10:fc:de:
d5:dc:fa:81:8b:be:58:3c:ca:ea:39:26:02:6f:1e:23:70:62:
2d:45:13:f7:4f:3c:4a:7a:c2:7f:da:ce:74:95:b4:bd:f4:83:
70:da:42:18:a2:c6:02:b8:0c:b3:24:33:c7:a2:16:8f:29:c8:
1b:2c:38:cb:26:39:59:67:2e:52:eb:9b:41:34:32:f0:35:ef:
80:f5:f6:cb:68:1e:5a:c3:b3:8d:eb:23:55:57:56:c6:27:1c:
ba:49:18:f7:86:dd:99:71:a5:db:46:79:cb:a6:15:50:a0:39:
74:98:c1:62:f1:96:1b:2a:ea:fc:13:fa:cd:82:71:a8:91:e1:
c5:c1:a1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:44 2024 by rpki-client on console-ams.rpki-client.org