Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9F93FAE155E11EE83CE574F4AD9E6FC.roa
File: B9F93FAE155E11EE83CE574F4AD9E6FC.roa (raw, json)
Hash identifier: DhAToSQoHbS3jLS+vsoQYUIWON1r/+SwCKU3fiGyIv8=
Subject key identifier: C2:FF:87:40:86:21:60:52:3D:9E:A1:7E:1B:13:CE:1F:01:3E:6F:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2E65
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9F93FAE155E11EE83CE574F4AD9E6FC.roa
Signing time: Wed 28 Jun 2023 02:51:49 +0000
ROA not before: Wed 28 Jun 2023 02:51:45 +0000
ROA not after: Wed 01 May 2024 02:51:45 +0000
asID: 140227
IP address blocks: 154.86.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11877 (0x2e65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 02:51:45 2023 GMT
Not After : May 1 02:51:45 2024 GMT
Subject: CN=649ba045-1a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:a9:e8:d3:5f:8e:1a:31:51:12:0d:0b:c6:
01:ea:c5:ff:48:e5:70:3c:37:69:c6:9c:21:f2:bb:
47:5e:3e:72:3b:99:0c:7a:b7:c7:f8:45:61:bb:23:
33:83:ce:ae:7f:4d:b2:0d:1e:7d:33:34:68:ca:29:
e6:97:52:05:ce:92:61:a5:f1:79:e1:cb:85:03:63:
8a:72:94:0d:85:76:25:ca:6b:76:c3:75:45:6c:88:
d4:17:42:6d:a8:20:50:b3:31:b2:de:67:7e:4a:76:
70:86:b0:5d:aa:9d:e9:94:3e:23:dc:7d:62:e3:7d:
91:14:91:da:16:b7:de:69:06:84:21:70:7b:d2:bc:
f8:39:00:68:28:00:c3:8a:61:40:be:01:34:5c:f6:
e0:3b:18:e7:d6:ae:93:19:10:f2:55:7f:27:9f:ea:
ed:08:ed:0d:dd:50:56:44:6f:3c:28:cd:a8:65:0f:
51:92:f0:51:87:84:70:5c:92:b5:8a:ad:38:71:2e:
c9:51:5c:1d:b2:29:e4:65:29:39:38:62:d4:7f:a6:
72:5d:6c:32:6e:34:ea:24:91:40:ed:ad:bb:03:db:
6c:84:3a:7c:05:27:66:ae:ef:9f:d5:6e:b0:fe:d0:
c5:1b:1e:97:8f:eb:8d:0d:df:3b:28:dd:f1:c6:50:
22:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FF:87:40:86:21:60:52:3D:9E:A1:7E:1B:13:CE:1F:01:3E:6F:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9F93FAE155E11EE83CE574F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.20.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c4:2f:27:fd:c7:8f:93:c4:ce:c2:0f:58:54:3e:9e:a4:13:
7a:4d:b1:7d:14:fb:2e:50:6a:2f:f8:38:d2:84:3c:68:51:50:
37:16:35:21:76:fa:bf:a0:99:3e:62:3c:86:02:ad:1c:04:e1:
08:01:d0:af:cf:0b:b0:dc:63:4d:f4:b0:93:cd:b5:c9:7f:b3:
d0:00:98:48:68:7e:50:b6:b1:c9:0a:16:c8:a7:42:69:df:1e:
71:ff:3f:49:36:cc:fd:db:14:7b:38:d9:0f:ea:71:b9:6c:05:
ce:32:78:b0:17:b4:9d:22:6a:c2:b4:5a:a7:f0:d3:aa:9e:57:
19:63:47:26:1a:f1:ca:14:07:99:a2:f7:50:22:f5:41:41:3b:
68:28:9e:2b:32:a1:95:0c:4f:2f:c8:6d:15:33:d9:4b:00:08:
37:18:e8:03:af:5f:d8:c6:6b:e7:44:64:2e:8a:9d:1c:e5:73:
d4:e6:96:05:d1:a2:74:a7:6d:bd:f6:8a:f2:1b:da:34:2b:94:
c4:79:f0:d7:bf:33:6e:05:cd:fb:ff:f3:a4:03:53:95:87:e5:
5a:9c:94:5b:51:90:52:b7:c4:23:bc:8a:32:7a:83:a4:09:73:
a0:ee:64:df:19:05:39:53:ef:5e:e9:0a:ed:98:f5:22:f3:84:
4f:a9:93:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 06:28:07 2024 by rpki-client on console-fra.rpki-client.org