Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B497AF2405F311EFBADB5670017001B1.roa
File: B497AF2405F311EFBADB5670017001B1.roa (raw, json)
Hash identifier: uawALQ3SiKHCCg+iFwXG86XQgphEI+MsrT5ZPQS8AFY=
Subject key identifier: 76:31:DA:C5:49:31:4B:A6:84:9C:C7:78:EE:5D:0D:1A:1E:7C:05:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B1F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B497AF2405F311EFBADB5670017001B1.roa
Signing time: Mon 29 Apr 2024 06:42:54 +0000
ROA not before: Mon 29 Apr 2024 06:42:50 +0000
ROA not after: Tue 04 Jun 2024 06:42:50 +0000
asID: 54467
IP address blocks: 154.195.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45556 (0xb1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 06:42:50 2024 GMT
Not After : Jun 4 06:42:50 2024 GMT
Subject: CN=662f416e-500c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b2:5e:f7:73:75:8c:7a:bd:a6:ff:73:4c:66:
37:03:7d:48:1f:4e:22:98:47:27:8e:fd:02:e6:25:
83:86:6a:0e:99:1f:83:2b:d7:fa:68:91:68:cf:a3:
be:72:8e:e5:f6:da:00:39:7e:01:d1:b7:a7:66:c2:
f8:11:34:68:5f:a5:06:0d:42:f5:e1:e2:7c:5a:29:
07:25:f1:79:73:cd:34:7d:58:fe:69:b5:66:9c:ec:
17:82:a4:d7:f9:14:59:e2:bc:ae:76:f8:9d:9c:83:
ac:bf:87:b3:d3:05:28:5b:75:99:31:49:f6:92:9a:
29:a8:ca:94:09:9b:30:ea:ee:c7:3d:c8:d1:d1:0c:
17:01:40:df:5e:64:e3:42:07:ce:31:4e:a9:cd:42:
eb:ed:7a:c1:1d:81:c9:84:62:2d:cd:f4:14:b9:e9:
cd:c4:b3:28:df:3a:01:f9:bb:19:d9:5f:5f:ae:b5:
4f:79:d3:a4:d1:60:f3:57:42:d9:62:46:13:f9:b6:
4a:d6:cf:93:e2:38:7d:03:90:b4:05:31:d8:89:ae:
4f:f9:3c:f1:ac:14:d4:43:d6:58:93:d9:8d:70:00:
5c:52:f0:d1:21:55:6a:86:b4:dd:26:af:c1:8a:dc:
dd:8f:82:7d:f5:1e:a0:0c:12:a2:c8:d5:be:17:36:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:31:DA:C5:49:31:4B:A6:84:9C:C7:78:EE:5D:0D:1A:1E:7C:05:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B497AF2405F311EFBADB5670017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.64.0/19
Signature Algorithm: sha256WithRSAEncryption
36:34:f5:97:b8:bc:87:b7:f8:2a:bd:81:d3:b8:d9:2f:bb:ab:
8c:0f:3d:f0:1a:cd:5d:39:ae:45:95:86:fa:77:67:2f:ec:9b:
b0:27:4e:55:e3:3e:2c:8e:07:e9:db:a1:15:78:46:9c:2c:82:
bc:ff:1c:54:86:f0:8d:9a:c8:b0:5c:5c:fa:45:67:f4:b8:a9:
85:b3:d4:29:6e:c2:e3:74:bb:0b:ae:1c:54:c1:2d:e9:eb:05:
f4:26:46:68:11:53:96:e0:ec:9f:dd:bb:44:90:0b:7c:86:55:
2a:bc:a9:11:86:7d:45:03:cf:be:ef:5a:5c:77:be:71:ab:44:
a9:00:fb:d3:0e:df:86:bf:b5:a1:ce:96:45:22:cc:85:af:eb:
70:ee:46:00:01:5a:c5:74:84:07:de:fe:02:ff:51:5a:d2:00:
52:8e:5a:1b:8d:f2:21:d4:35:76:74:51:fa:18:4f:ef:44:6d:
05:db:a5:1d:b6:0e:07:79:bd:3e:36:1c:3e:07:b3:c2:d6:e7:
f5:24:d3:ac:4e:e4:90:bb:fb:a2:2a:30:e1:8c:ce:30:95:be:
1c:67:a5:c1:58:f1:17:06:17:95:0d:66:bf:93:72:db:76:f2:
2c:1d:45:ee:d6:a1:fb:89:9d:c1:ba:4b:9c:3d:76:cb:2f:1d:
2e:e3:7c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:25 2024 by rpki-client on console-ams.rpki-client.org