Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB700F981A3911EEAAE7580F4AD9E6FC.roa
File: DB700F981A3911EEAAE7580F4AD9E6FC.roa (raw, json)
Hash identifier: nJHEc4LcjFiwOC1Iuq6hdHz3+tuOrFLRDn33WvNutyc=
Subject key identifier: E6:C1:7B:9E:DA:C4:DB:F9:A6:60:E8:45:17:2D:5C:1C:30:85:8C:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2FFF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB700F981A3911EEAAE7580F4AD9E6FC.roa
Signing time: Tue 04 Jul 2023 07:10:29 +0000
ROA not before: Tue 04 Jul 2023 07:10:25 +0000
ROA not after: Wed 24 Apr 2024 07:10:25 +0000
asID: 63888
IP address blocks: 154.205.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12287 (0x2fff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 07:10:25 2023 GMT
Not After : Apr 24 07:10:25 2024 GMT
Subject: CN=64a3c5e5-910e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:5a:9b:ce:98:15:9b:15:8a:f2:c2:18:dc:
9d:ae:a4:af:34:10:63:52:80:ae:61:25:13:c6:6c:
fd:bd:64:b1:75:66:87:a1:50:f8:20:f0:a3:11:d0:
c3:f2:65:09:7a:ef:b0:bc:b4:ac:5e:33:d8:6b:e8:
02:f2:4d:db:8e:32:60:a2:f9:35:15:8d:54:6a:98:
71:ff:6f:56:cc:a8:c5:4a:bd:d8:63:4c:30:67:c3:
e5:77:82:f4:6d:a3:5a:cb:ef:d4:40:3f:1d:47:62:
ca:63:d3:f1:a9:b1:d6:64:d4:c6:a7:ce:86:66:4a:
17:b8:b3:2f:7f:25:00:ee:92:09:26:0d:ae:dd:95:
f9:1c:2c:e0:e2:aa:d7:0c:ef:88:9b:a8:08:93:0a:
c4:8a:93:88:24:52:72:6f:ea:ae:94:db:e9:ea:25:
0f:02:e0:2d:9f:b6:80:bd:84:fa:cf:d7:64:5b:01:
82:5d:6f:7a:00:16:72:d5:07:c1:a4:d3:c1:f2:73:
37:59:37:2f:2f:0f:fe:9b:5e:35:cf:5b:cd:32:38:
ff:45:14:d7:d3:40:1a:89:93:7b:03:45:85:d1:25:
f0:df:1b:42:24:8a:ea:ca:e2:5e:6a:61:90:2e:d1:
39:5f:b6:26:3d:9d:f5:30:d9:af:74:cb:ca:45:45:
9c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C1:7B:9E:DA:C4:DB:F9:A6:60:E8:45:17:2D:5C:1C:30:85:8C:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB700F981A3911EEAAE7580F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.46.0/24
Signature Algorithm: sha256WithRSAEncryption
75:20:96:91:13:c4:22:29:51:31:22:60:48:b3:4a:6e:fb:64:
ac:df:fe:7d:75:89:5c:f6:48:a0:03:2e:24:7c:19:e6:17:3b:
e6:4c:52:21:7b:da:30:45:a8:88:94:b9:7a:eb:44:0b:2e:9a:
61:74:df:6d:7f:ed:09:45:2f:a8:e1:d4:62:f8:e9:a6:23:52:
ad:de:17:57:2f:4c:87:42:da:89:c4:3a:f9:42:d8:c7:08:3e:
36:67:6d:e6:c7:80:6b:f0:c4:bd:97:50:0e:1d:25:3e:54:ad:
58:4f:8e:54:5f:f3:c8:99:7d:87:33:32:43:b6:a8:ce:30:80:
66:ae:99:3c:3b:66:16:10:da:bc:44:bf:8b:eb:f3:5c:6a:95:
8a:76:18:4c:fc:a6:ec:16:b8:20:39:84:6a:5f:a2:98:a6:41:
70:4f:ff:cd:00:97:a8:ab:95:3e:dc:1e:cc:45:98:ea:d6:b4:
64:1d:b5:b6:bb:ba:a3:df:e8:84:3c:b5:9b:e0:6a:c5:24:bb:
a2:d5:17:e8:da:21:a6:00:01:74:b0:27:d2:24:aa:e6:6a:b3:
8b:a7:ad:3a:35:36:22:37:61:2d:12:a8:16:f6:b7:7d:2a:9b:
e2:e1:ce:2f:62:31:78:f7:2f:a6:58:21:22:27:de:84:93:79:
8b:59:2d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:44 2024 by rpki-client on console-ams.rpki-client.org