Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC10051E155E11EEA8B5C54F4AD9E6FC.roa
File: DC10051E155E11EEA8B5C54F4AD9E6FC.roa (raw, json)
Hash identifier: cyyd/aVXvmOpY0dNZgxxZCrI1GfhlhnoZeq/Jik9rZw=
Subject key identifier: 05:A5:79:F1:9D:82:7A:43:19:87:80:90:31:A7:8E:F2:9B:55:2C:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2E67
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC10051E155E11EEA8B5C54F4AD9E6FC.roa
Signing time: Wed 28 Jun 2023 02:52:46 +0000
ROA not before: Wed 28 Jun 2023 02:52:42 +0000
ROA not after: Wed 01 May 2024 02:52:42 +0000
asID: 140227
IP address blocks: 154.86.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11879 (0x2e67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 02:52:42 2023 GMT
Not After : May 1 02:52:42 2024 GMT
Subject: CN=649ba07e-5bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:67:b3:8a:1f:fb:94:6c:35:17:e1:fa:02:
06:ef:20:90:7d:af:5a:24:60:99:d7:f5:64:78:0a:
58:57:28:0a:57:1f:c4:81:ee:df:b9:0f:3f:40:f7:
bf:a3:7d:d5:a0:6a:7a:36:84:71:d1:80:89:9d:33:
9d:f2:c8:6a:25:67:86:0f:1e:15:d3:ce:7c:dd:84:
c8:48:a0:58:5c:83:06:9e:85:b5:87:62:8a:fb:e6:
61:1e:08:e8:98:6b:44:87:d7:28:ad:e0:de:00:27:
98:e7:47:08:27:10:fb:32:fb:c9:89:79:73:2c:df:
cb:4f:91:51:9c:54:7b:92:62:31:22:dc:ab:d0:11:
e2:01:f3:b8:2f:d0:ba:af:af:2a:48:82:53:c0:82:
a4:a4:84:20:42:75:31:d2:6d:eb:db:64:91:44:dc:
4b:ce:3f:dc:b2:f5:91:ec:1e:50:8b:be:14:9b:1d:
a9:58:e3:3b:96:c5:99:ef:64:5c:a0:25:35:90:22:
68:00:78:81:db:80:a0:53:f4:bb:b6:80:8f:e6:f0:
e5:d2:b4:08:4e:ce:83:63:c2:1b:7b:6b:d1:39:59:
65:0c:18:63:e2:53:7a:f5:20:2f:18:cc:10:bf:87:
02:22:7c:87:11:ba:0d:84:7f:fa:1c:7f:b7:6d:e7:
6c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A5:79:F1:9D:82:7A:43:19:87:80:90:31:A7:8E:F2:9B:55:2C:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC10051E155E11EEA8B5C54F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.18.0/24
Signature Algorithm: sha256WithRSAEncryption
41:aa:30:9c:5f:47:bf:c1:9d:a5:4d:2a:91:d4:0d:bb:72:ba:
2b:0a:bd:6a:9d:de:f1:b9:1a:45:f9:43:ef:28:1f:05:aa:f0:
c6:ac:2a:7c:e7:2f:1a:f6:65:cd:26:da:05:94:fd:fe:71:d2:
92:ea:9f:29:a0:8e:b9:2f:e6:3f:cc:47:5b:cf:d9:cf:dd:64:
5a:6e:d8:88:5c:40:ee:6f:25:b2:3f:cf:2e:64:cb:40:f5:fc:
3b:d5:7f:d8:8b:06:8e:55:8b:8f:ee:ed:9b:f5:ee:9c:2d:28:
21:04:de:9c:d8:6e:1c:f1:f9:25:32:cf:c9:19:0b:42:f7:e7:
ae:3a:0d:15:b4:ce:7a:e4:c7:81:c6:0e:5f:fd:e4:e5:21:0e:
c3:f1:94:0d:3a:d7:2f:69:43:80:83:6c:24:93:b4:c8:75:6e:
c0:75:f6:9b:de:49:ba:c1:4f:f9:a8:4a:d9:67:be:79:6a:79:
01:ee:ba:ae:02:fd:b5:65:7a:c8:3a:c1:52:71:54:0b:f4:08:
14:4e:df:05:9b:d4:2d:87:7d:cb:fd:84:54:7d:4b:ff:11:d4:
74:12:04:ae:e8:af:a7:cb:b2:36:51:89:ad:5a:4c:46:74:5a:
f5:77:b3:f7:de:cc:0a:7c:11:5f:fa:15:4e:8e:97:18:1a:64:
e2:7c:16:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 06:28:07 2024 by rpki-client on console-fra.rpki-client.org