Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CECA82AAE78911EEBB1F9B52775412E6.roa
File: CECA82AAE78911EEBB1F9B52775412E6.roa (raw, json)
Hash identifier: kLw/3c7Go8GASYBZgk8XICITB9th5bEYm7DBz2C/tdo=
Subject key identifier: B9:13:59:C3:2B:DE:F4:5F:E2:30:CC:B8:4C:75:25:98:F7:29:B8:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A5CB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CECA82AAE78911EEBB1F9B52775412E6.roa
Signing time: Thu 21 Mar 2024 13:49:16 +0000
ROA not before: Thu 21 Mar 2024 13:49:13 +0000
ROA not after: Thu 25 Apr 2024 13:49:13 +0000
asID: 5065
IP address blocks: 154.206.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42443 (0xa5cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 13:49:13 2024 GMT
Not After : Apr 25 13:49:13 2024 GMT
Subject: CN=65fc3adc-beea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:b4:ca:3e:4e:49:ab:34:9d:96:89:ac:dd:
f6:61:c8:bd:55:a3:1e:95:5b:5c:fb:3e:ae:03:bd:
ba:a5:2f:57:6c:fd:0b:07:bc:d1:3e:1f:f7:1c:82:
2a:6e:d9:e3:72:92:00:1d:58:94:f8:22:3a:a6:64:
31:da:d1:c6:e7:79:84:39:3b:5f:43:0e:dc:a2:3a:
1a:de:a2:b1:7d:59:51:95:2c:51:df:3f:82:0e:df:
22:06:1e:83:5f:bc:c1:f3:84:35:52:01:46:7e:0a:
fe:59:45:65:c6:83:f4:c4:39:f2:25:ba:66:9d:2e:
00:fb:da:24:29:d7:9b:e0:31:30:07:bd:6a:9b:07:
37:6c:00:b2:5e:08:fd:b4:6e:1d:fd:70:50:97:dc:
cc:58:19:01:5a:01:7e:68:65:c6:31:98:05:37:b1:
86:a4:72:6b:ad:e0:86:09:7c:9f:4c:e3:e4:91:b9:
18:dc:90:b3:c8:9a:88:33:0f:86:1e:9f:fc:e0:93:
d2:c4:12:14:02:b2:d7:b0:b7:ae:d1:cd:40:e6:4a:
80:b2:1d:0e:a4:ca:dd:7b:5b:80:d7:57:74:72:e8:
71:e4:35:89:54:7d:42:cc:42:12:29:da:8c:7d:40:
96:a2:a3:cb:37:8f:7f:a0:b6:cd:6c:34:38:59:ec:
75:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:13:59:C3:2B:DE:F4:5F:E2:30:CC:B8:4C:75:25:98:F7:29:B8:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CECA82AAE78911EEBB1F9B52775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.37.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a0:28:d4:1a:06:ca:8c:bb:14:da:e5:e9:ca:ac:32:bb:40:
2d:37:68:a8:2a:c8:a4:c0:30:16:0c:4f:27:ab:97:ad:03:6b:
23:32:38:99:ce:6c:06:b7:9a:73:37:85:88:b0:74:da:48:49:
31:41:42:76:7e:8c:c5:fe:2b:eb:9a:89:85:da:8c:14:a8:00:
01:53:56:04:48:0c:67:5e:53:46:c4:d1:42:05:73:d9:3c:aa:
27:6e:2f:61:6b:0d:39:65:3d:e2:dd:0e:d9:0a:75:0b:0f:ac:
78:c4:89:f8:17:93:2d:a2:74:f0:6f:e3:e6:c7:90:d1:76:d4:
cf:2b:12:86:05:c7:ba:04:e1:69:f2:ab:c8:76:5d:f3:53:80:
eb:43:e7:67:ae:4b:a0:b1:9d:0c:b1:b3:6f:e9:6e:8c:9c:28:
20:a2:ba:e1:72:1a:1b:ea:1a:d1:0a:d0:ec:fc:51:f4:80:f7:
36:e7:b0:1f:19:43:41:e1:ab:23:4c:f2:e1:98:ff:8f:d3:5a:
3c:cc:ff:90:b9:be:db:c5:65:ca:c9:d3:e1:1e:33:cf:7e:f9:
d5:f8:1c:f8:cb:33:3b:26:0d:5b:7e:97:9f:4e:e2:f4:a4:19:
5e:82:b4:94:fb:25:58:43:df:f9:71:48:b7:f0:15:5d:eb:38:
e5:74:a5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:39 2024 by rpki-client on console-fra.rpki-client.org