Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E40A9EA6848311EFA7886CA9762E951A.roa
File: E40A9EA6848311EFA7886CA9762E951A.roa (raw, json)
Hash identifier: mUAZKonbzm0SgA6kiZINVVBj0Ud8GxU+y1OUxUlMVbY=
Subject key identifier: CC:F5:01:80:74:E2:D4:CD:A9:7C:F7:19:F0:B3:2D:CE:37:AE:DD:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FA82
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E40A9EA6848311EFA7886CA9762E951A.roa
Signing time: Mon 07 Oct 2024 08:12:27 +0000
ROA not before: Mon 07 Oct 2024 08:12:23 +0000
ROA not after: Fri 08 Nov 2024 08:12:23 +0000
asID: 25198
IP address blocks: 154.197.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64130 (0xfa82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 7 08:12:23 2024 GMT
Not After : Nov 8 08:12:23 2024 GMT
Subject: CN=670397eb-ba7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:12:43:9e:ea:53:65:e6:a5:53:a5:6b:82:82:
4c:9b:68:4e:b7:8d:29:9f:57:83:c7:79:07:e0:5a:
40:0b:9a:ec:f3:08:97:eb:9f:de:ef:42:73:f0:43:
d7:54:91:5e:56:f1:b9:68:ba:d1:41:db:33:e1:87:
54:d1:a7:a3:78:2f:ba:b3:55:3d:a9:d2:47:b9:8d:
6d:e8:79:62:d7:f3:f4:25:3f:37:b7:83:4e:2d:4f:
e5:5e:75:43:5d:95:39:d4:d1:0f:30:86:00:fc:3b:
92:75:bf:84:cb:ec:73:ea:5c:d8:98:61:00:8a:d5:
62:1c:c6:5f:9f:f9:1f:3e:4e:a8:00:69:4a:6a:d0:
02:13:d5:c3:80:74:09:af:ab:e3:a5:8c:a0:78:06:
da:33:78:15:ad:9c:45:58:67:58:72:48:59:f5:d7:
74:43:bb:b2:71:08:8c:5b:e6:92:2a:6e:1e:7e:fe:
f7:6f:f8:de:aa:23:dc:d8:9a:d5:7d:10:7a:41:9a:
b9:53:ec:7d:7a:a5:c4:8d:84:47:90:30:7d:bb:6f:
0a:73:15:59:0f:c6:47:1e:e1:7b:31:d3:a1:87:35:
3f:6f:f6:13:99:19:4b:22:eb:2a:6d:c0:ac:53:a7:
77:ef:08:f9:11:cb:f9:d3:ad:30:89:4c:e8:a1:a4:
ff:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F5:01:80:74:E2:D4:CD:A9:7C:F7:19:F0:B3:2D:CE:37:AE:DD:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E40A9EA6848311EFA7886CA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.104.0/24
Signature Algorithm: sha256WithRSAEncryption
52:d6:ce:2e:91:ce:ac:47:c7:11:a4:b9:fe:ec:07:b5:e3:6a:
40:5e:6d:74:e5:2c:96:9a:67:7d:53:3b:4b:3e:cb:df:12:6e:
ee:22:fc:2d:05:9c:24:d6:23:ba:01:ce:de:7a:3e:1f:3f:4a:
41:2d:52:94:97:c8:d9:bb:d4:a1:e0:55:2f:97:88:4f:6d:13:
73:52:f9:dc:6a:f5:c7:f0:fb:fc:23:6e:3a:8b:aa:d5:0c:7e:
09:0d:27:ab:c6:e6:af:2c:c2:31:66:e7:c4:d2:9b:b7:ff:e1:
9c:ce:3d:ea:aa:f9:2f:71:6d:9a:92:74:ea:55:91:c6:ae:04:
40:4e:e9:c1:2d:f4:28:3f:f5:ba:d1:b4:00:3b:1f:95:14:c0:
40:de:8d:df:c2:00:e7:42:96:11:ea:9a:89:2a:78:e7:29:44:
dd:4c:ed:61:9e:d2:37:93:79:91:c8:42:9d:96:6b:a0:17:09:
1f:95:d4:be:29:7f:a5:b9:ad:26:ba:c9:17:6c:95:d9:57:62:
11:78:24:80:c2:48:1b:05:b4:0b:33:07:23:52:8a:d8:b9:89:
24:78:d6:a5:13:2a:9b:66:3f:8e:ae:ba:24:97:00:8a:68:fd:
b2:8f:85:55:7a:c1:75:72:a0:bd:ea:81:06:2b:ff:74:ca:35:
8d:67:fb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 12:59:00 2024 by rpki-client on console-fra.rpki-client.org