Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D49D5942FB9211EE8D273F48017001B1.roa
File: D49D5942FB9211EE8D273F48017001B1.roa (raw, json)
Hash identifier: JMxk2/BQVk9v7OBjL6NYTsDkLy2MP54UD+cOaGKF484=
Subject key identifier: BD:71:F2:EF:5E:56:1A:E0:0B:6E:49:4D:70:A9:99:4A:99:CA:AC:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ACEF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D49D5942FB9211EE8D273F48017001B1.roa
Signing time: Tue 16 Apr 2024 01:44:15 +0000
ROA not before: Tue 16 Apr 2024 01:44:09 +0000
ROA not after: Mon 29 Apr 2024 01:44:09 +0000
asID: 141883
IP address blocks: 154.208.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44271 (0xacef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 01:44:09 2024 GMT
Not After : Apr 29 01:44:09 2024 GMT
Subject: CN=661dd7ee-5837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:92:2d:b8:89:76:52:28:20:e4:41:02:48:0b:
da:10:c2:bf:3d:f0:52:2f:00:af:ab:66:77:4c:b3:
75:89:04:9c:c8:a3:17:e9:ed:b0:72:e3:a1:f1:d5:
41:58:79:80:c4:e3:f6:41:0b:72:c6:41:60:2a:58:
bf:c2:1a:5d:0b:c1:c9:ac:28:a3:67:49:ec:19:ba:
6d:39:3c:f3:fa:be:76:b3:15:8a:2e:d7:3e:90:7b:
c0:93:44:ca:73:23:17:f4:17:16:a1:d3:33:4e:df:
fb:f3:84:59:c9:73:97:55:7f:12:46:c1:50:83:1a:
b7:fe:91:25:12:d5:37:9e:24:ba:31:ee:03:8b:c3:
a8:30:25:de:fe:f6:53:c0:55:a5:bf:1b:7c:df:f4:
69:8e:36:2d:6b:4a:de:cc:f2:ae:e1:60:1a:b6:c9:
c7:2a:e1:a3:92:05:68:9a:00:bd:30:41:91:f3:8f:
7f:0c:c2:4a:5a:f6:19:28:eb:13:74:c0:ba:aa:27:
52:5d:d4:6a:7b:9d:c1:e3:be:7c:7f:01:d0:77:5c:
9e:72:0c:6b:bd:15:84:c9:e9:c6:ad:79:bc:12:a7:
2c:af:58:80:56:4c:3e:b9:85:c0:5f:60:97:d1:73:
38:e0:7a:a7:55:47:ff:81:9e:44:7c:9d:a8:a2:bb:
3e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:71:F2:EF:5E:56:1A:E0:0B:6E:49:4D:70:A9:99:4A:99:CA:AC:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D49D5942FB9211EE8D273F48017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.12.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:03:ed:df:76:ca:ca:7d:77:f9:b3:c2:a9:81:fc:7d:8b:5d:
a5:3a:53:81:c3:a4:f5:d6:aa:fb:a7:2b:7d:06:55:a3:bf:07:
2d:75:41:f9:da:15:b3:85:80:88:69:91:ed:7d:8d:fd:7a:69:
07:35:2d:35:bb:a4:3f:4a:5a:f7:d5:02:13:d2:cd:a5:4d:be:
7b:d5:59:b1:08:3b:bb:92:03:fc:2c:99:e7:f8:db:9d:36:0b:
17:21:7d:5b:62:2a:10:df:c8:0d:1d:0f:78:18:45:9a:12:c0:
4b:12:71:86:f9:d1:0a:7e:d3:cb:8c:af:4f:75:9b:43:40:eb:
77:32:5a:a6:07:ef:39:12:b1:93:6e:c1:84:b3:dd:d5:68:61:
37:3e:ab:ea:0e:9a:1b:d2:55:ee:c0:6f:bf:67:97:b9:75:28:
b5:7b:36:e7:a9:e6:d3:26:64:17:f9:31:ab:d1:b3:70:8d:0e:
19:8a:fe:4f:99:2c:e9:0c:30:e0:a5:f6:4e:2b:3e:f1:94:07:
fe:85:a8:0e:51:3c:e8:88:11:42:7b:76:a5:85:2e:1d:2c:e0:
7b:95:5a:cc:49:b9:3f:8e:a1:1e:8c:6d:cc:0f:1d:68:88:9c:
98:82:e4:88:32:cc:16:81:0d:1a:c9:fb:50:ae:1b:94:ec:21:
e2:e6:df:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 03:01:15 2024 by rpki-client on console-ams.rpki-client.org