Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2ABD7C8FE1C11EEACA30802017001B1.roa
File: B2ABD7C8FE1C11EEACA30802017001B1.roa (raw, json)
Hash identifier: 4Jtb4FE43EryCMyN59nxbwu6x1RqLBnLSX0Gj5jMtxU=
Subject key identifier: 88:30:10:BA:06:B3:89:F7:EC:4F:57:A5:F2:47:67:D9:7A:8B:59:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE60
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2ABD7C8FE1C11EEACA30802017001B1.roa
Signing time: Fri 19 Apr 2024 07:16:11 +0000
ROA not before: Fri 19 Apr 2024 07:16:06 +0000
ROA not after: Mon 29 Apr 2024 07:16:06 +0000
asID: 5065
IP address blocks: 154.222.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44640 (0xae60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 19 07:16:06 2024 GMT
Not After : Apr 29 07:16:06 2024 GMT
Subject: CN=66221a3a-5b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:9d:15:58:88:b7:9b:70:c3:ad:49:6f:1f:
6a:0a:7b:ff:16:47:81:28:52:ac:52:e4:a4:ce:72:
f9:8e:2a:96:94:ce:62:d9:a2:8b:11:40:d0:58:e4:
df:35:6e:1b:6d:ec:a2:fd:92:9d:05:48:50:d8:1a:
a5:27:18:49:6b:88:a7:62:29:af:16:be:85:1c:de:
e2:0c:14:f6:19:d2:64:64:ed:ff:75:12:f0:7e:58:
6a:12:88:b4:09:9d:6a:b0:a4:62:8f:51:1c:b5:56:
13:14:f6:aa:a3:1f:54:b0:ae:95:02:1b:0f:f7:15:
0d:eb:a5:0c:b3:19:a2:92:62:8b:80:5f:9c:63:f8:
5c:1d:c0:16:76:93:42:46:84:5a:48:64:3b:5e:0b:
dc:6f:05:e7:56:9d:97:f3:7a:9d:c4:b2:96:4b:13:
8d:5f:62:e3:54:0a:c3:66:39:05:66:b5:f4:e8:97:
e1:48:43:53:03:05:c8:f2:c5:90:04:f0:9d:86:d7:
60:c8:b3:64:67:5f:ea:d4:21:94:e5:e0:aa:da:9f:
7c:8f:18:2b:5b:08:0b:3c:5c:48:ff:1f:2e:92:b1:
da:51:2a:3e:85:71:e9:d1:b9:bb:63:99:c6:15:37:
e1:63:ba:f2:23:4f:41:52:d2:2c:bf:67:cc:a6:93:
7f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:30:10:BA:06:B3:89:F7:EC:4F:57:A5:F2:47:67:D9:7A:8B:59:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2ABD7C8FE1C11EEACA30802017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.8.0/22
Signature Algorithm: sha256WithRSAEncryption
28:b0:7e:13:10:c5:1a:de:83:e8:2d:e4:55:6d:bb:ee:ba:7e:
7a:18:f5:1b:c6:fe:23:4a:03:ce:9d:f6:80:fe:b1:57:7a:6f:
c8:66:02:50:70:ee:c4:a9:5d:95:2b:a3:04:54:09:87:65:bd:
b7:72:c0:ac:47:7a:80:ab:d7:1a:6d:74:3c:d7:d0:50:67:32:
b5:95:58:5b:b8:78:47:ca:6c:c5:8b:0d:61:2c:0e:18:69:35:
ca:66:c0:6e:b4:fc:54:11:78:1a:5a:c9:b4:3f:96:60:fc:d9:
a5:5c:f5:ef:25:30:25:74:8a:27:bb:95:32:ad:29:fe:13:a8:
d1:ef:99:46:12:0c:64:2d:ef:89:7e:e9:5a:9e:e2:4d:93:aa:
b2:f2:45:cb:cf:af:82:36:e0:9b:de:34:e4:2a:ea:62:9d:d0:
90:9d:a6:cf:df:fc:e1:42:f1:d1:ac:f6:2c:28:f7:a5:7b:9a:
1f:bb:17:19:ef:7e:78:4d:df:62:63:bb:90:45:91:90:f2:7b:
f8:a1:7b:8c:a8:93:10:b7:e3:e6:06:70:c5:31:ee:c6:83:c6:
a0:52:7d:25:7f:53:13:76:a6:58:19:1c:e9:44:2d:3c:19:8f:
d3:b9:87:3f:30:5b:28:89:04:a5:97:b3:61:27:d1:13:51:b7:
61:f8:d3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 07:56:09 2024 by rpki-client on console-ams.rpki-client.org