Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E225D1180F3111EF9A183F32017001B1.roa
File: E225D1180F3111EF9A183F32017001B1.roa (raw, json)
Hash identifier: 4zYQ8VHZZErHxXqZPi58VOYyKFSNnGXKAPH2Q6ubLM8=
Subject key identifier: 81:E2:95:C5:0D:46:0E:6B:C4:DF:9A:22:10:05:90:E5:E9:FB:2D:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B6E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E225D1180F3111EF9A183F32017001B1.roa
Signing time: Sat 11 May 2024 01:00:39 +0000
ROA not before: Sat 11 May 2024 01:00:36 +0000
ROA not after: Tue 21 May 2024 01:00:36 +0000
asID: 44559
IP address blocks: 154.221.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46817 (0xb6e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 01:00:36 2024 GMT
Not After : May 21 01:00:36 2024 GMT
Subject: CN=663ec337-49b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:73:88:f2:cb:e7:d0:43:84:ad:61:ba:4e:
7f:75:c5:0b:05:da:91:76:5b:f1:cf:e8:44:26:9d:
32:7c:e5:21:cb:2c:f5:40:4a:dd:89:93:fc:04:53:
e9:68:cc:95:90:dd:96:9b:aa:85:7a:e3:b1:b8:cd:
b6:b0:3c:85:b8:c0:35:cf:e6:81:6f:9f:7a:2c:9b:
c6:e8:39:d5:9d:c8:04:15:50:ef:05:b0:51:e6:99:
87:6d:c3:ad:78:1c:d4:33:92:31:4a:60:3e:6e:23:
a5:01:32:21:53:f8:be:01:96:ff:f3:71:4d:ea:f0:
f8:46:a5:af:ac:8a:12:88:e5:27:c1:cd:42:a4:59:
7d:ff:41:9f:34:b0:7d:27:dd:5a:75:f6:53:46:f1:
06:d0:e6:6b:ec:89:fa:b0:34:f7:ae:da:82:d5:ec:
94:ef:87:9b:cc:d2:6a:94:4a:95:57:f1:42:99:d1:
91:40:fb:92:ec:57:fe:ff:73:a5:82:c2:69:85:79:
38:fc:60:4d:20:de:1a:07:01:07:aa:7f:62:94:d2:
61:0d:f4:d8:1b:a8:30:ab:ba:c3:df:c6:91:9d:a2:
a9:13:6f:6b:be:55:11:5d:29:f2:40:93:8b:f9:46:
7d:35:ac:5e:48:22:49:f4:37:29:f4:d0:56:7e:22:
24:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E2:95:C5:0D:46:0E:6B:C4:DF:9A:22:10:05:90:E5:E9:FB:2D:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E225D1180F3111EF9A183F32017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.192.0/18
Signature Algorithm: sha256WithRSAEncryption
8b:19:c2:2b:2c:21:4c:39:a8:62:7d:63:93:47:a7:11:e9:69:
f0:09:37:52:f6:c5:aa:fd:d8:86:6d:57:8f:e0:b4:a0:5c:d2:
54:8f:14:8d:ed:87:2b:32:9f:04:83:9c:02:39:6e:fe:30:30:
4e:f4:8a:88:58:fd:48:75:a3:0f:4c:fd:33:cf:a7:3e:be:93:
5c:ad:38:0c:76:0f:18:bf:71:a6:30:b1:38:1f:dd:ce:3e:ff:
f8:19:2a:80:e1:ef:07:81:fd:18:7b:31:61:3b:57:76:9f:a0:
eb:14:8a:32:cd:7e:4d:0f:86:b7:8f:ad:58:6a:5e:50:22:e4:
1f:b5:cf:09:9b:b5:e1:ba:51:16:2b:28:6f:45:bb:59:ec:95:
9a:a1:56:9f:be:10:ff:8a:7a:14:ba:42:c1:46:36:11:ff:ba:
4b:8d:82:b3:6a:1f:5f:da:96:5f:0a:e4:ec:c8:c6:f4:f2:c0:
97:0f:40:d2:d6:5f:7b:9c:16:de:4a:99:4b:e2:2b:c9:34:7f:
6d:b1:74:bc:cc:5e:c9:97:eb:bc:47:2d:0e:b6:bb:b1:80:a7:
00:33:ab:a4:6e:74:ba:77:34:61:1e:ca:f4:cf:89:df:7f:f6:
d2:50:78:f6:ad:df:a8:4e:6c:5c:2f:b9:42:7d:77:90:2e:4f:
4d:0b:12:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:07 2024 by rpki-client on console-ams.rpki-client.org