Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE63DBBAFD3C11EEB2A3265F017001B1.roa
File: AE63DBBAFD3C11EEB2A3265F017001B1.roa (raw, json)
Hash identifier: XZ60SWONPCv4MkCd/SBGa1d+qTCHDT7IyJ3m2Wno4o8=
Subject key identifier: 60:C7:B6:35:25:77:89:5A:3A:F6:AD:DA:56:F0:CB:43:18:ED:4F:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE1D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE63DBBAFD3C11EEB2A3265F017001B1.roa
Signing time: Thu 18 Apr 2024 04:32:36 +0000
ROA not before: Thu 18 Apr 2024 04:32:32 +0000
ROA not after: Sat 27 Apr 2024 04:32:32 +0000
asID: 133180
IP address blocks: 154.209.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44573 (0xae1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 04:32:32 2024 GMT
Not After : Apr 27 04:32:32 2024 GMT
Subject: CN=6620a264-172b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:79:41:c5:f0:c5:04:a6:69:46:c2:73:63:
34:7f:ba:72:ce:fe:03:03:ac:82:db:21:c1:11:3f:
89:87:53:0a:49:20:fe:44:32:3f:12:a0:38:6d:cd:
21:a5:0a:27:16:de:30:86:64:fe:38:66:b4:ee:c9:
ba:6b:90:3e:2a:37:61:ef:2c:c2:94:8b:78:f6:45:
b3:de:8d:aa:09:b1:cc:b2:6d:1b:6f:34:c6:5d:53:
5c:a9:ea:64:09:70:92:17:70:ec:32:23:91:0c:c8:
a2:5e:53:ea:47:d2:6b:ce:e0:58:e7:1f:86:a3:e0:
00:c1:f3:9b:28:fa:c0:9d:58:0b:01:6c:27:b4:09:
28:1f:3c:8b:49:e1:ab:f8:dc:bc:cf:93:0f:10:d6:
c2:ac:e9:07:ca:8b:43:39:b9:8f:19:2e:8d:a7:88:
19:47:70:55:c0:b6:ba:10:34:76:eb:93:dd:ee:74:
4c:cc:cf:a5:a6:8d:c9:8f:13:92:7e:b9:bc:a0:5b:
f3:87:06:5b:08:3e:9c:ad:66:7a:c2:07:56:dd:be:
9d:8a:b6:8f:9b:23:4f:52:c8:ba:a6:88:2e:3c:7b:
43:ce:b9:94:94:a5:f6:bc:7f:c9:27:e8:9d:38:d0:
31:4f:4c:e5:a7:32:5f:f7:e4:89:94:d2:52:78:51:
84:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C7:B6:35:25:77:89:5A:3A:F6:AD:DA:56:F0:CB:43:18:ED:4F:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE63DBBAFD3C11EEB2A3265F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.160.0/19
Signature Algorithm: sha256WithRSAEncryption
67:4d:57:a8:b9:0e:bd:09:6a:ec:c3:a7:4f:2f:51:6a:62:68:
fb:19:bb:42:3a:d0:9e:f7:70:a0:c5:d6:81:2b:8f:b5:c2:05:
09:46:e8:f1:d0:f5:14:67:fd:b4:7a:49:08:fc:0e:74:63:c1:
f2:4f:fd:90:ae:2d:ed:a2:a9:54:80:81:5d:2f:e6:6e:b9:42:
cf:a6:d0:cf:63:c5:d1:c3:23:68:e8:d0:12:1d:9b:85:a7:e4:
79:45:e3:91:18:54:ed:84:66:e2:5f:bf:74:3e:c3:6e:75:65:
3c:c4:71:00:32:19:3a:bf:02:eb:66:d2:4d:20:89:b8:d2:71:
1c:a0:36:c7:4f:4b:ad:46:29:88:67:0c:f9:cf:f0:60:a1:1a:
c6:ca:c4:7b:29:0c:4c:c0:80:dc:35:d9:cd:8e:fd:84:9f:d9:
28:9e:e4:f0:56:bc:19:53:6d:31:0f:ae:30:08:4f:67:3d:d8:
92:e7:18:07:96:0f:39:be:b6:1d:73:56:7c:99:8a:d5:91:b3:
70:f6:55:f5:63:22:25:1b:ad:2c:93:77:49:7b:43:b7:e6:29:
57:f7:6b:66:bd:e3:e3:c4:ea:d4:b0:5c:db:47:5b:8b:51:c9:
c8:39:0f:b9:9c:4c:9f:1c:88:3e:7d:d8:7f:bf:6a:66:6f:e3:
42:eb:d1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 14:14:06 2024 by rpki-client on console-ams.rpki-client.org