Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9A365ACFB9D11EEA73CB82C017001B1.roa
File: D9A365ACFB9D11EEA73CB82C017001B1.roa (raw, json)
Hash identifier: eB/4tFQVFM7BFHFmaI3wn34bcWe/6HJPAeYyCAk8dzw=
Subject key identifier: D1:D3:6F:68:BB:FD:7E:6C:03:36:41:DD:4E:F3:75:FF:64:F2:D8:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD2B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9A365ACFB9D11EEA73CB82C017001B1.roa
Signing time: Tue 16 Apr 2024 03:03:07 +0000
ROA not before: Tue 16 Apr 2024 03:03:04 +0000
ROA not after: Wed 24 Apr 2024 03:03:04 +0000
asID: 136950
IP address blocks: 154.213.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44331 (0xad2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 03:03:04 2024 GMT
Not After : Apr 24 03:03:04 2024 GMT
Subject: CN=661dea6b-a873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:63:4c:ab:7c:a0:48:a5:4b:9c:72:96:d1:c9:
b3:e6:9c:3b:9d:69:e7:3e:43:62:1c:88:90:6d:e6:
a5:63:6f:c7:f2:79:1c:60:c8:20:af:b1:31:89:f6:
f2:f7:33:90:03:3c:d2:da:6c:9e:91:97:6a:82:fb:
f5:df:ca:cc:c3:b2:ad:82:c5:5d:85:09:96:0c:b5:
cc:fd:9e:bc:e7:d9:8d:3e:f4:52:84:f2:0a:76:31:
f1:6e:90:cf:ab:58:0b:ae:06:13:cd:e2:27:60:0a:
71:c2:4d:39:95:5c:dd:ab:a0:89:86:16:58:22:81:
9e:c9:ac:3c:6c:97:c1:d0:d6:e5:7a:96:5e:df:56:
81:1d:ef:f3:80:f2:52:0d:f4:2f:22:7e:e7:65:76:
c3:65:42:7f:aa:27:f2:99:62:04:9c:70:a1:24:4b:
13:62:33:9d:b7:f7:8c:ed:ae:fa:70:cf:06:12:22:
09:cf:9e:1a:90:09:28:66:6e:eb:0f:8a:3c:82:ee:
d7:da:90:42:12:87:3c:8f:a3:2f:ce:fa:4d:15:72:
69:42:9e:c7:79:87:b3:83:d4:8a:60:94:9a:fc:51:
72:fb:b3:60:8b:e4:c3:df:52:00:00:01:4c:3f:95:
42:8d:06:59:6c:6a:d7:ff:da:d7:6d:0a:56:f6:3d:
92:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D3:6F:68:BB:FD:7E:6C:03:36:41:DD:4E:F3:75:FF:64:F2:D8:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9A365ACFB9D11EEA73CB82C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.18.0/24
Signature Algorithm: sha256WithRSAEncryption
36:89:41:c2:30:66:c5:46:de:e9:4d:62:9e:7b:d6:80:bb:2f:
16:f2:a2:96:de:8e:e5:be:51:60:eb:f5:b1:be:9b:f2:60:3a:
08:60:5e:17:30:72:51:29:e3:3f:35:64:f7:d3:a9:01:34:9d:
6a:a7:a1:ab:f9:89:c9:4b:db:eb:4b:4b:ce:80:ed:8c:0d:f5:
21:6b:a1:58:cc:c0:ae:9f:e4:c2:b5:63:06:b8:de:77:45:a3:
85:c9:00:54:f0:25:78:d8:4c:fb:71:06:33:de:71:41:d4:c8:
65:fd:02:21:d3:17:39:9d:0b:12:cf:19:c4:13:f1:8f:64:0c:
28:27:84:32:48:da:bd:df:73:6f:16:3a:ab:35:1d:18:8e:dc:
78:9d:b0:77:f4:8b:f9:8c:07:74:7a:c2:a1:1c:59:15:f9:02:
d9:0b:aa:14:75:93:74:e2:4d:29:03:2e:aa:13:b0:d7:0f:94:
6b:ff:ef:90:a0:ba:c4:4d:97:af:14:87:33:4e:b6:86:31:f0:
e5:c7:26:5a:16:04:ef:38:ca:59:ee:f0:72:14:9b:95:5c:b4:
61:16:f0:0f:bc:d6:e2:1b:33:39:e9:4b:d4:58:5b:92:f0:6b:
f6:e5:59:e4:4f:bd:79:cc:bb:e8:76:7c:c5:9c:04:f0:c6:46:
2f:ab:86:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:44 2024 by rpki-client on console-ams.rpki-client.org