Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC47D17CFAC811EEBFE30652017001B1.roa
File: AC47D17CFAC811EEBFE30652017001B1.roa (raw, json)
Hash identifier: kEmr6rOaGknPqysoW9HUitC82IV43DNyHQHSo2F3iyE=
Subject key identifier: CF:2F:6C:1E:25:50:61:B6:16:BE:FD:0A:F5:77:09:A5:A8:35:D2:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ABE5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC47D17CFAC811EEBFE30652017001B1.roa
Signing time: Mon 15 Apr 2024 01:37:09 +0000
ROA not before: Mon 15 Apr 2024 01:37:05 +0000
ROA not after: Wed 24 Apr 2024 01:37:05 +0000
asID: 138630
IP address blocks: 154.213.30.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44005 (0xabe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 01:37:05 2024 GMT
Not After : Apr 24 01:37:05 2024 GMT
Subject: CN=661c84c4-933d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:91:29:37:df:13:c7:7c:bf:a7:e6:bf:a0:00:
01:18:9a:1c:1f:56:82:d9:c9:c9:7f:34:2c:88:36:
6e:39:56:d9:74:f2:7b:b2:e3:22:c0:99:86:98:94:
07:ee:c7:88:07:69:61:78:a7:ac:ed:ae:35:70:5f:
7c:2c:15:08:b0:4e:90:23:f2:7f:79:e4:27:20:14:
2b:57:1b:6c:6a:c1:76:39:9c:29:38:bf:9e:eb:a8:
f6:39:c0:9b:5e:c5:35:56:85:6c:0a:e2:41:9c:c8:
ca:06:41:fc:24:0c:08:e6:31:4e:3c:57:0b:87:d2:
82:8b:58:9c:18:14:21:8d:33:39:eb:d4:00:1a:4a:
bc:65:1f:a4:70:ba:22:98:19:86:57:27:6e:33:ea:
d6:26:90:25:35:19:23:4e:5a:e4:35:e6:36:03:5e:
a3:9e:e4:91:22:73:23:6b:17:ca:03:2d:b4:d2:3d:
3b:04:39:d5:ab:90:fd:02:a2:ac:d7:aa:ef:5f:84:
99:7b:b4:0b:4d:6b:f3:69:01:ca:a7:d4:b9:a5:15:
6d:73:1c:63:aa:47:ec:19:96:e5:66:ce:11:d7:bf:
77:93:25:7a:d8:de:16:1a:81:3c:2f:a8:e0:41:a7:
5a:7a:24:93:39:af:87:c9:47:30:40:29:5c:4a:f5:
b0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2F:6C:1E:25:50:61:B6:16:BE:FD:0A:F5:77:09:A5:A8:35:D2:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC47D17CFAC811EEBFE30652017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.30.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:3d:a2:bd:db:25:d9:0e:a1:27:cb:65:d0:c6:ea:2b:06:66:
f6:ec:1f:c5:1f:87:c2:dc:89:b2:a2:cc:d0:65:31:1d:b8:24:
0f:2d:a3:dd:71:2f:75:39:bb:66:41:ab:9d:eb:33:89:ff:57:
18:c8:8e:e9:1f:e3:5b:c6:6c:49:e0:30:94:52:5a:f6:b1:b6:
54:63:6a:4b:da:9c:67:16:19:97:2a:2a:69:f1:68:61:29:d4:
5a:04:64:61:31:56:a3:5d:c1:ab:a1:96:6b:86:7b:19:f9:f2:
03:7a:32:3d:55:c6:54:22:be:3c:9a:63:b3:ca:74:bc:90:35:
d4:79:08:d5:a8:a6:9e:34:fb:9b:d8:0d:ec:53:c9:c4:2a:8f:
a8:74:bd:ee:c0:d5:62:87:2e:88:0d:55:b1:28:01:42:0e:cf:
5d:f9:e5:b0:43:4e:35:f2:11:40:2b:da:37:81:67:25:0c:e2:
cd:88:35:18:cb:46:2e:f2:1f:0d:1f:35:fb:8d:61:e2:b6:cd:
9b:96:31:a0:23:74:05:24:a1:99:3f:e4:b6:3d:9d:41:6c:c9:
7f:64:af:bf:23:c9:db:45:89:e2:0b:94:d2:7a:73:fb:fd:a1:
a5:0d:2e:fd:f7:bd:29:16:6e:49:22:4e:6f:54:cc:da:f6:1f:
ed:63:aa:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 04:12:03 2024 by rpki-client on console-fra.rpki-client.org