Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD653216FAC611EEAE254D43017001B1.roa
File: CD653216FAC611EEAE254D43017001B1.roa (raw, json)
Hash identifier: D3wr8eRnWwTZ03A6ql1btVP4WrcgKDvT+3LMS8yPd20=
Subject key identifier: 07:26:87:EF:37:0A:27:A9:57:09:E1:AF:76:71:AE:78:6C:42:82:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ABD5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD653216FAC611EEAE254D43017001B1.roa
Signing time: Mon 15 Apr 2024 01:23:45 +0000
ROA not before: Mon 15 Apr 2024 01:23:41 +0000
ROA not after: Wed 24 Apr 2024 01:23:41 +0000
asID: 136933
IP address blocks: 154.213.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43989 (0xabd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 01:23:41 2024 GMT
Not After : Apr 24 01:23:41 2024 GMT
Subject: CN=661c81a1-d9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:f9:4b:ad:43:d3:bd:14:b8:77:0f:62:0b:
e3:8a:5b:ac:71:88:e8:6c:72:ab:11:ef:b1:84:c7:
e9:3e:f4:d8:f7:eb:aa:ee:54:9b:eb:7e:ed:7c:37:
f2:6f:51:7d:e7:b8:3d:4e:d1:09:0d:4e:b1:22:94:
0a:67:fd:26:64:48:28:47:9d:dc:05:e5:88:4c:39:
ba:5c:62:52:cd:8e:c1:cf:13:a3:b3:da:c0:6a:e0:
2e:2f:0d:01:9f:a5:98:d5:be:4f:d1:20:2e:21:f1:
8a:1b:1a:2f:76:70:80:0b:cd:48:66:4a:70:73:ce:
ff:c4:b7:e8:2f:a1:67:26:7e:95:0f:95:cb:e0:23:
dc:32:f8:e5:2e:d9:6f:6a:72:ce:12:97:c7:b5:88:
48:4a:f7:76:f2:2b:f5:71:9a:9c:37:b4:0c:a6:1b:
f0:52:88:94:ee:28:a0:44:ca:c4:c9:5b:17:e4:2d:
cb:b1:8a:dd:51:84:16:65:8b:e9:41:4d:0f:f4:eb:
bd:d3:02:c7:d1:9a:29:0a:99:6c:f9:ba:9e:5f:1a:
e8:47:29:f9:c0:53:17:b9:8e:f3:85:bf:1e:7d:78:
d0:7d:e6:f0:87:af:97:66:18:74:4a:93:ee:e6:93:
a4:82:ab:af:0c:0f:76:93:f9:d1:b0:b4:46:e1:8f:
32:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:26:87:EF:37:0A:27:A9:57:09:E1:AF:76:71:AE:78:6C:42:82:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD653216FAC611EEAE254D43017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.20.0/24
Signature Algorithm: sha256WithRSAEncryption
37:1a:f6:51:f9:0b:d8:bc:2d:42:1f:70:70:2b:01:2b:dc:6e:
87:9a:cf:f7:c8:d7:6d:81:e7:0a:39:5f:64:28:e8:d8:b8:77:
26:42:4f:24:51:12:b8:c6:a8:62:96:3e:35:28:90:84:75:cb:
86:c8:d7:5d:79:f7:41:a2:a8:be:0f:7e:a6:2e:78:68:df:8d:
01:a6:c1:c8:21:b2:ab:c4:37:ce:50:9a:88:3f:0b:38:8c:c6:
9f:66:85:5c:23:fe:88:bf:b6:03:5f:18:e2:78:1d:c6:03:f8:
88:ca:2f:a4:68:2a:e9:a5:57:4e:a0:f4:25:c6:f9:63:23:2a:
ce:39:6d:0e:54:a7:4d:d5:cb:99:29:7e:df:dd:1b:4b:c5:ce:
ee:af:2a:cb:f1:1f:94:41:da:69:46:d0:06:3c:6e:aa:03:65:
81:ad:27:13:bd:3c:7b:49:55:d5:cd:9f:b5:28:b2:04:8b:ee:
45:4d:2f:d1:57:f3:55:8c:a7:ed:44:11:59:53:63:59:0e:e9:
24:15:a2:14:a9:fb:58:7d:00:e4:9d:5b:55:01:1b:bf:96:39:
54:69:cf:3c:fd:83:74:90:c4:90:54:4e:a3:a0:33:58:46:c0:
8c:87:e4:5d:ac:0e:75:1a:9e:34:9d:72:9d:93:49:7e:81:c2:
91:30:3f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 04:12:03 2024 by rpki-client on console-fra.rpki-client.org