Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1D31546F70111EEAD5D706C775412E6.roa
File: A1D31546F70111EEAD5D706C775412E6.roa (raw, json)
Hash identifier: hZcHGsfiTgxRb2u4+6g6ZSS+1swy95GylJoMHI3GAmE=
Subject key identifier: E0:45:CE:DE:8E:E2:B5:76:F1:34:7C:2B:85:DE:93:AB:64:E9:F2:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AAAE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1D31546F70111EEAD5D706C775412E6.roa
Signing time: Wed 10 Apr 2024 06:14:48 +0000
ROA not before: Wed 10 Apr 2024 06:14:44 +0000
ROA not after: Tue 30 Apr 2024 06:14:44 +0000
asID: 142062
IP address blocks: 154.203.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43694 (0xaaae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 06:14:44 2024 GMT
Not After : Apr 30 06:14:44 2024 GMT
Subject: CN=66162e58-ee1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:ac:bb:47:b6:28:c1:ff:86:d4:44:9e:83:
95:6b:78:53:e1:56:d4:dc:01:4d:de:42:a0:0c:9d:
42:30:20:99:3a:74:1f:60:73:4a:37:22:44:ff:43:
db:b5:5e:2b:d4:e8:69:c4:90:25:80:c0:65:50:30:
70:bf:44:3e:d1:b3:6d:81:79:87:46:e7:9c:4e:4f:
f7:bb:2f:fa:eb:53:b4:d2:e8:57:ff:27:12:41:10:
9c:9e:11:38:ea:e1:ef:ba:aa:72:3b:80:bc:ea:b4:
ac:7f:57:27:ec:02:75:38:7f:81:06:49:65:08:f7:
bb:66:5f:76:d0:d5:b7:2b:00:12:45:8c:6d:33:a6:
bb:cd:d0:83:b2:94:e0:13:be:6d:b2:0d:0e:80:15:
72:fc:72:af:e0:dc:f0:fc:86:db:82:89:33:25:1b:
9c:09:2d:ea:f6:e4:77:78:65:43:67:99:db:a3:8d:
ef:16:dd:31:b7:0c:08:8d:de:b5:6c:26:4e:89:e1:
d3:52:7a:54:5c:2b:62:95:2c:e2:c7:d5:a8:50:ba:
6e:7e:49:b5:3f:fc:6f:94:e1:00:7a:23:45:1d:b4:
60:cd:9d:e8:de:31:1c:53:11:c6:2e:6a:00:e6:41:
26:40:69:78:9c:91:f3:54:8e:1e:dd:f2:fd:87:86:
a6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:45:CE:DE:8E:E2:B5:76:F1:34:7C:2B:85:DE:93:AB:64:E9:F2:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1D31546F70111EEAD5D706C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.96.0/19
Signature Algorithm: sha256WithRSAEncryption
36:0d:ae:66:a9:02:f8:40:49:2e:c5:00:ff:74:d1:14:ec:c9:
f1:fa:83:c8:03:18:3e:06:9c:8f:33:2f:e7:b4:43:e0:d4:84:
67:80:2f:c1:d6:07:ed:f2:fd:f1:7b:c4:be:dd:c6:5d:74:62:
9a:53:b6:58:a6:1f:8e:ad:59:b5:3e:02:a5:45:18:76:40:ad:
66:67:5f:9d:a1:28:96:6c:a1:7a:a5:ed:cd:21:04:9d:48:a2:
0b:1c:fd:0e:d1:af:82:9c:a7:63:34:9c:06:73:09:f9:b9:69:
30:3f:00:33:ea:71:a9:96:aa:a5:a4:f1:28:85:8c:b3:bb:d1:
1b:91:42:df:7b:40:44:c4:0e:c2:b0:49:78:36:f6:68:d4:04:
1c:99:ea:ef:8c:52:ee:05:f4:63:ef:23:25:d5:6b:02:6e:0d:
99:e7:58:72:21:d0:c3:73:dd:d5:f1:44:45:3d:60:af:b3:a8:
19:b4:0a:4d:b2:8f:69:c6:24:c8:13:dd:16:36:f1:9c:64:21:
84:82:66:01:3a:9e:36:99:ea:10:10:58:44:de:4d:c8:36:56:
fa:46:0a:96:9d:de:9f:72:76:24:f4:45:a1:26:77:ac:d4:d8:
15:af:80:59:04:9f:3c:16:cf:d9:86:f5:1f:03:7a:4a:c0:f1:
50:e3:fb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 12:15:42 2024 by rpki-client on console-fra.rpki-client.org