Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B56BAF444A6411EFA5604DAE762E951A.roa
File: B56BAF444A6411EFA5604DAE762E951A.roa (raw, json)
Hash identifier: LWDeNtxCDr0VY59w4JYVJKBxXYNP3ei0hcxSLUrLOI0=
Subject key identifier: 3E:DC:7D:1D:CF:F2:79:D8:94:43:B1:89:73:22:7D:87:98:03:52:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D70A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B56BAF444A6411EFA5604DAE762E951A.roa
Signing time: Thu 25 Jul 2024 09:03:07 +0000
ROA not before: Thu 25 Jul 2024 09:03:04 +0000
ROA not after: Sat 03 Aug 2024 09:03:04 +0000
asID: 22773
IP address blocks: 154.82.0.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55050 (0xd70a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 09:03:04 2024 GMT
Not After : Aug 3 09:03:04 2024 GMT
Subject: CN=66a214cb-588c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:d7:7b:70:b5:b0:39:ee:af:38:99:3a:42:
4a:05:44:59:90:a0:dd:c0:6c:64:3a:9e:36:ef:4f:
b0:30:f1:60:59:f1:81:67:6a:14:8f:62:01:0f:9c:
70:0a:22:f9:f8:75:9d:99:00:c6:fd:74:d8:e0:47:
24:07:5a:35:45:ad:87:c6:50:6f:a4:65:fd:02:0e:
de:ea:70:72:2c:f5:77:28:64:88:3a:68:5c:96:51:
ad:b6:d2:9d:93:9a:63:2a:f2:54:17:a2:5e:6a:a4:
ec:83:63:72:93:81:53:25:3b:c5:fb:f6:83:48:6d:
92:fd:6d:32:5c:c5:19:83:00:21:49:3a:c6:ec:3b:
c4:ec:56:97:60:df:13:c2:59:d7:4a:53:04:88:31:
c2:a9:98:df:5a:c9:ee:9a:cf:5f:c2:2a:97:53:39:
c6:c6:fe:e7:77:16:f1:58:03:a2:3a:fd:90:76:90:
ea:73:38:64:f2:8f:ca:bb:63:ed:c8:19:4f:7a:9d:
19:ab:23:da:a6:68:57:eb:97:93:99:30:73:86:96:
e2:bc:09:53:ef:3e:b1:6b:5d:6f:54:0e:80:35:86:
a2:d4:17:b0:8e:62:8d:86:69:ad:f0:18:25:82:d5:
9e:09:7f:08:d1:e3:8a:e1:70:60:4b:19:0f:7e:a8:
71:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DC:7D:1D:CF:F2:79:D8:94:43:B1:89:73:22:7D:87:98:03:52:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B56BAF444A6411EFA5604DAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.0.0/21
Signature Algorithm: sha256WithRSAEncryption
85:2c:75:8a:0e:77:f3:f0:8c:85:fd:74:59:dc:ca:26:44:82:
cc:fe:45:35:4a:0b:15:52:14:6a:5b:84:6e:f2:f5:ba:2a:ac:
26:62:90:3f:b8:27:48:4f:b4:ee:ca:4f:15:4b:90:56:db:5b:
ba:9d:36:63:6e:5d:52:4b:0e:e6:1d:18:16:0d:6c:8a:e8:4e:
ab:02:1c:3e:a3:77:e6:98:e8:d3:dc:72:c2:9f:94:60:ab:70:
34:c5:ad:34:4a:75:e6:0b:82:c2:de:d7:46:4f:d4:05:d7:6e:
c6:64:84:98:21:2d:4c:10:99:e1:c2:91:dc:e9:1a:b7:22:a6:
64:b1:e3:cc:cb:0e:1b:52:fc:94:de:58:2e:0e:73:dc:e6:dc:
ed:fd:25:99:15:fe:b9:e4:03:3e:1c:14:32:a3:58:b5:82:8c:
db:a0:8a:6e:2e:7f:1a:2f:a4:d2:30:1c:d6:15:31:ea:4b:29:
c8:b5:c4:a4:6b:e0:50:14:3d:5b:e5:1e:03:7e:64:b5:64:1d:
6e:15:0a:c1:3d:d8:86:a1:45:9e:e1:ec:1b:05:98:73:78:3e:
f1:65:e6:91:2a:ca:33:c1:ca:21:62:3f:3c:1a:51:32:98:03:
b1:03:4c:12:6f:7e:34:d8:46:ff:7d:ac:ce:06:10:72:f0:85:
a5:78:8c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:51 2024 by rpki-client on console-ams.rpki-client.org