Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0416E5C06DD11EF9184CA5F017001B1.roa
File: B0416E5C06DD11EF9184CA5F017001B1.roa (raw, json)
Hash identifier: xlEcenalWUHm1JziUWhAJ3lfWuYC6w7Nr2OTiWX06EY=
Subject key identifier: 6A:5E:B5:58:D6:01:C7:78:E1:62:54:19:D3:E4:59:0E:1F:00:A1:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B2EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0416E5C06DD11EF9184CA5F017001B1.roa
Signing time: Tue 30 Apr 2024 10:37:49 +0000
ROA not before: Tue 30 Apr 2024 10:37:45 +0000
ROA not after: Tue 07 May 2024 10:37:45 +0000
asID: 136778
IP address blocks: 154.212.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45807 (0xb2ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 10:37:45 2024 GMT
Not After : May 7 10:37:45 2024 GMT
Subject: CN=6630c9fd-ca0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e5:5b:33:d9:2f:2e:aa:57:af:88:cd:19:95:
c3:88:1b:13:36:23:4c:d9:73:94:d9:bb:0a:7f:74:
14:b8:30:bd:de:51:19:13:f3:ca:a7:93:ca:a8:01:
f7:46:e3:c2:28:fc:de:48:c8:cc:c2:d9:e7:a9:8c:
6f:9e:80:90:76:ef:e8:4b:42:f6:5e:e0:4b:f6:75:
8a:00:db:90:d8:a5:68:d6:d8:11:23:bd:f6:39:22:
1f:88:c1:07:ae:58:5e:62:06:96:66:41:09:94:86:
2d:bb:73:af:35:10:8b:5b:03:ec:04:ff:59:a1:ae:
e4:66:b7:a6:1e:df:6e:26:de:d5:9a:45:07:94:65:
a9:c0:3c:7b:0e:0a:34:3b:29:10:41:e7:4f:94:f6:
31:3e:6f:fc:7a:d7:8a:25:91:c5:23:76:78:87:97:
e4:e9:2b:15:1c:77:ee:7a:43:43:0e:13:c8:fb:6b:
2f:62:1b:ff:1c:3f:0f:73:fd:d2:85:4c:c0:86:ab:
9f:bc:a6:62:5b:3d:b4:f6:d3:ae:a9:72:fd:a8:35:
6c:3c:af:17:b3:57:03:57:70:08:40:0f:d0:b6:6a:
a0:34:31:6e:9e:1f:e0:a8:08:86:4f:98:b6:8c:a9:
12:47:d9:a7:14:17:96:30:b5:e7:a1:a9:68:90:de:
79:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5E:B5:58:D6:01:C7:78:E1:62:54:19:D3:E4:59:0E:1F:00:A1:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0416E5C06DD11EF9184CA5F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.144.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f7:bc:c1:a4:22:9a:a3:b4:dd:37:58:65:05:e5:60:c3:fa:
3e:4e:4d:eb:3c:f9:46:ad:ea:06:c0:a8:45:28:50:cf:eb:7c:
72:99:85:ad:0f:22:33:43:81:c1:8e:25:2e:6d:1b:cd:be:82:
96:b5:d7:92:02:1c:73:9d:c7:05:85:f5:34:6f:23:21:30:dc:
a2:fa:83:57:1b:47:a5:c3:74:c8:1d:90:98:f0:36:e2:28:fb:
23:3c:4b:d6:45:bc:4b:a2:20:13:19:cd:7d:e1:65:f2:fc:fb:
b3:3d:04:3d:ec:9c:a3:97:ed:99:82:06:b8:86:e6:fe:32:7e:
8d:df:23:0d:9e:b6:9e:70:98:a3:50:c9:71:ab:c5:be:f3:e4:
6a:8c:e8:3e:1d:02:63:89:b6:91:6e:7d:cc:ac:a4:8b:77:17:
71:cd:8d:28:2e:26:72:ec:24:bf:09:ec:6c:c3:25:c1:16:9e:
86:d2:cb:6d:62:6a:83:f2:e4:1e:36:ee:2e:7a:ef:31:22:1a:
3b:3d:85:b1:cd:11:5e:b3:19:64:44:c0:0a:60:1f:67:ec:d4:
71:2d:78:3e:6c:d9:c5:08:0c:a2:ad:5f:68:d8:12:fa:71:1a:
68:69:9b:42:6b:e0:0d:7e:c1:ec:c8:22:46:1f:75:68:d6:d5:
9f:0f:f6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 03:43:29 2024 by rpki-client on console-ams.rpki-client.org