Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C92C25C0F61111ED8381076A4AD9E6FC.roa
File: C92C25C0F61111ED8381076A4AD9E6FC.roa (raw, json)
Hash identifier: c4HBIs+pHP/swmZUTnocVKY1LdFfyv402FFafEIbdVM=
Subject key identifier: AC:07:A7:94:B0:1C:EA:C1:C2:79:A4:91:F2:64:93:F9:2D:8A:E8:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 25E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C92C25C0F61111ED8381076A4AD9E6FC.roa
Signing time: Fri 19 May 2023 06:52:57 +0000
ROA not before: Fri 19 May 2023 06:52:53 +0000
ROA not after: Tue 30 Apr 2024 06:52:53 +0000
asID: 137443
IP address blocks: 154.218.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9697 (0x25e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 19 06:52:53 2023 GMT
Not After : Apr 30 06:52:53 2024 GMT
Subject: CN=64671cc9-8708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:2a:23:f3:61:96:57:b4:82:93:9e:7f:64:
f6:21:37:5a:49:c0:36:40:83:ad:d4:9e:f4:7f:ba:
6d:f1:8d:36:4e:7c:04:3f:86:4b:0a:a6:89:7c:31:
d3:8f:19:2e:64:42:16:36:65:5e:b3:4e:4f:b6:34:
fd:52:7e:17:0e:04:ae:c7:70:31:aa:f5:21:00:56:
19:40:ab:2a:73:7f:b6:e0:0b:a1:e7:0e:49:4b:da:
eb:45:3b:65:6d:e7:37:de:20:1b:ba:7f:b6:56:c2:
51:dd:4a:06:ed:f9:29:56:36:3a:00:5e:42:1d:c9:
00:3d:5b:f4:1e:f7:8a:07:bb:89:b6:cb:dc:ab:c9:
3b:6f:f3:ee:5b:46:e5:1a:50:7e:32:a8:e7:9a:9a:
36:f1:70:7c:93:5e:41:ba:56:0a:ba:38:bb:08:08:
18:52:81:4d:f0:58:00:24:d6:5e:33:3d:03:30:1a:
69:01:04:f4:8a:e8:61:d1:35:71:fa:d0:2a:2e:86:
2a:ff:67:d4:f6:1c:d9:ac:9c:4c:25:73:30:90:1d:
fa:f5:47:a5:79:21:6b:b1:54:23:3d:af:17:de:d7:
9a:fa:3d:9e:95:47:55:fe:f6:1e:99:13:11:aa:95:
7d:74:77:67:54:42:e8:01:e7:2a:97:09:99:77:d9:
ed:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:07:A7:94:B0:1C:EA:C1:C2:79:A4:91:F2:64:93:F9:2D:8A:E8:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C92C25C0F61111ED8381076A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.8.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ae:09:63:88:c6:1f:44:ef:bb:20:50:bd:67:bf:3d:9e:f7:
53:f1:85:91:7a:27:18:47:a0:50:f8:47:e0:19:da:ec:a0:d1:
cf:16:7e:dd:a2:5f:34:81:46:06:3d:4e:08:ff:b7:3a:8f:fb:
fb:99:85:ad:bf:1b:dc:5f:09:d2:68:10:3c:6e:1b:05:d2:71:
6b:18:1f:eb:b7:4d:c3:d6:a7:e1:76:25:ca:39:85:06:02:46:
17:77:2e:57:39:72:9b:9b:a5:08:4c:cf:d3:ef:55:31:76:ae:
80:69:9f:50:17:76:94:d5:fe:27:66:f4:ae:29:0d:1a:94:36:
9d:6f:b3:74:30:ea:ce:46:89:ee:3c:7d:a7:06:58:8b:56:22:
79:d3:16:30:9e:f9:e4:e5:14:a5:00:17:7b:20:10:8e:cf:51:
cb:c4:85:b5:23:61:0f:e0:c1:4b:a8:f9:db:34:b1:c8:ea:c6:
6a:0a:a8:8e:02:ac:06:03:3f:64:cd:ee:28:dc:50:17:d4:d1:
ea:9d:fb:48:d0:63:3d:ea:33:9a:ef:ad:5c:52:12:de:1f:50:
1f:ea:d4:ad:4e:9c:91:8b:26:cc:5c:1f:6a:72:3e:78:7e:8d:
23:bf:a4:da:7b:24:5b:5b:5c:88:54:d1:15:ec:be:c5:df:25:
3d:26:ca:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 12:15:42 2024 by rpki-client on console-fra.rpki-client.org