Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C79B8A14014311EFB0A54D33017001B1.roa
File: C79B8A14014311EFB0A54D33017001B1.roa (raw, json)
Hash identifier: hsEXqfWVh+mRKjxlerxfBA3fc295wNdbpjJuAgrpaes=
Subject key identifier: B3:97:14:C8:C0:9F:E1:B0:20:57:E7:90:99:FC:16:0A:2B:18:1B:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AEEF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C79B8A14014311EFB0A54D33017001B1.roa
Signing time: Tue 23 Apr 2024 07:33:29 +0000
ROA not before: Tue 23 Apr 2024 07:33:26 +0000
ROA not after: Sat 11 May 2024 07:33:26 +0000
asID: 5650
IP address blocks: 154.194.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44783 (0xaeef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 07:33:26 2024 GMT
Not After : May 11 07:33:26 2024 GMT
Subject: CN=66276449-db5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:90:1f:c9:92:92:82:a4:83:b9:d7:af:05:
40:23:38:78:66:cd:ef:88:be:41:99:4c:4e:09:9a:
4f:ba:e7:44:bf:d1:f5:6d:2b:23:1e:2e:18:88:da:
39:b6:3c:73:d3:2f:45:58:09:14:72:3d:86:65:3f:
0a:28:9e:7a:8c:f3:66:d3:d6:89:ed:e4:98:64:61:
5b:1c:45:59:6b:b6:7d:1a:13:e5:c0:15:66:83:f7:
1f:91:00:a6:94:b9:2d:0f:0d:81:23:cc:4b:78:7a:
d2:15:64:ea:12:ed:11:5c:01:a8:12:1d:45:7d:42:
ac:75:d3:e1:26:d1:6a:90:e6:22:a3:0a:e3:b0:5b:
16:a9:b3:fe:4d:89:f7:a1:d3:9a:fc:26:42:b3:21:
f5:b5:f7:83:1e:aa:9a:00:d0:11:41:36:68:55:61:
55:49:5f:9b:a3:2e:f5:09:84:77:01:c0:7a:0e:7d:
1b:97:74:9b:fc:ac:4f:ae:aa:b2:43:60:fa:75:2f:
fa:14:4f:ba:50:ae:8a:00:9c:5e:e1:4f:b5:a5:fb:
6b:fd:c2:de:12:b1:1b:5e:97:dd:b4:e8:db:fa:a6:
5f:73:0b:ab:4a:1f:33:2a:91:64:20:f1:05:43:39:
c2:0c:ff:ec:23:e6:19:91:4f:36:70:f0:6b:28:47:
1c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:97:14:C8:C0:9F:E1:B0:20:57:E7:90:99:FC:16:0A:2B:18:1B:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C79B8A14014311EFB0A54D33017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.20.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:67:a7:03:17:76:36:d1:6e:6c:27:b6:cf:4b:92:f5:da:94:
79:ed:03:8d:09:b3:c1:57:d8:df:7e:42:dd:2d:d4:9d:81:51:
51:22:f4:cb:19:96:a1:84:7d:f5:33:51:30:49:5a:c3:03:53:
aa:68:7c:88:5f:93:63:33:3f:b9:d4:98:7f:96:fe:6d:5f:6a:
cb:eb:df:41:74:4a:89:30:78:87:37:15:c6:61:98:72:ec:3a:
8f:b3:df:a8:88:7b:20:c7:b2:40:50:23:d2:88:b6:72:3e:36:
a3:99:1c:f8:93:49:19:09:03:8e:2c:53:43:ea:05:46:22:dd:
b8:3a:b1:bc:ca:86:30:a6:ff:89:5f:97:4f:cd:98:99:ab:67:
d3:12:c3:b7:b0:e2:66:f6:c4:c8:13:bf:d3:e8:b6:c7:ed:c6:
a0:cd:f5:09:ed:22:6a:f5:1f:47:e3:cd:7a:f6:d0:d2:1a:7a:
0d:23:f2:00:04:bd:e7:8d:38:9a:37:95:51:c6:3a:4a:f8:da:
47:fa:5c:8b:43:b4:71:43:bd:df:65:ca:52:45:c5:c3:58:af:
42:ec:ec:60:71:1b:65:62:84:bf:1a:5b:8a:66:d9:11:c9:84:
c6:28:42:99:b3:98:c1:ba:49:2e:ac:00:22:68:35:10:73:82:
9f:46:06:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:21 2024 by rpki-client on console-ams.rpki-client.org