Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E89273C849AE11EFA9C21257762E951A.roa
File: E89273C849AE11EFA9C21257762E951A.roa (raw, json)
Hash identifier: Q+nGlBVRgr7mYBkGjA51NcF+oA7zt3I3YFNs8+HwxlI=
Subject key identifier: 4E:FB:A3:9E:B7:55:A4:B7:EF:C0:AC:43:66:6E:B3:C1:21:6C:7F:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D688
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E89273C849AE11EFA9C21257762E951A.roa
Signing time: Wed 24 Jul 2024 11:21:45 +0000
ROA not before: Wed 24 Jul 2024 11:21:41 +0000
ROA not after: Fri 02 Aug 2024 11:21:41 +0000
asID: 20473
IP address blocks: 154.197.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54920 (0xd688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 11:21:41 2024 GMT
Not After : Aug 2 11:21:41 2024 GMT
Subject: CN=66a0e3c9-8103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:56:2d:d5:9d:18:7b:9a:42:98:aa:d7:e9:45:
69:23:15:fb:b4:48:3b:14:f1:65:9e:e6:7e:87:cf:
c3:af:6f:aa:49:1f:e7:37:b6:ad:a2:3b:f3:7e:a0:
6a:ff:0a:e2:d9:d7:ee:4d:1e:f0:ff:a1:a1:c8:4e:
43:3d:bc:c8:9e:28:e1:f9:76:93:d5:b4:43:97:94:
6f:7d:8e:9d:eb:48:75:d3:ea:cd:ae:5c:86:27:15:
90:b7:29:94:90:93:ae:72:d0:76:2c:c1:bd:1b:85:
6f:b3:25:50:a4:0b:13:8f:df:70:05:12:4b:0f:09:
2a:71:2b:83:04:fc:93:d3:7d:33:0d:26:e8:b2:d8:
6f:c9:13:48:9c:4c:f4:c6:f5:4b:c7:58:b2:38:de:
fd:7b:23:f8:75:95:11:00:4a:da:e4:d7:3d:fa:cf:
06:76:eb:c5:d7:8b:10:76:b9:82:b6:30:24:bf:9f:
6e:16:f3:67:65:95:9b:5e:a1:4f:39:26:b1:30:05:
20:b0:0d:51:4f:88:51:1a:c1:ae:cf:9b:ba:b2:7a:
67:26:c2:b9:93:9a:aa:6d:4c:fe:5e:e2:65:8d:af:
fb:8c:4e:99:86:ef:18:aa:0b:d3:5d:15:aa:07:85:
6d:b6:47:63:1b:80:72:05:8c:48:73:05:d3:ec:f7:
1d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FB:A3:9E:B7:55:A4:B7:EF:C0:AC:43:66:6E:B3:C1:21:6C:7F:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E89273C849AE11EFA9C21257762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.32.0/24
Signature Algorithm: sha256WithRSAEncryption
24:4d:4e:88:ce:e1:40:89:0b:c6:90:c4:3c:4f:b1:e2:87:20:
f8:9b:1b:0b:80:e9:8c:ef:51:2a:da:a7:ed:ce:61:e8:35:28:
38:82:be:2f:02:01:b1:2f:7e:b7:df:e3:7a:e1:c3:a7:1b:06:
9c:3a:9b:4d:44:a7:71:f2:bf:26:b3:ac:99:92:79:39:3e:e9:
ea:53:82:ae:e1:63:fd:36:a5:7e:f8:6a:94:23:e0:66:8d:03:
23:4d:4e:90:ea:3e:3f:35:fc:8a:65:71:e5:92:9c:04:d4:e9:
4c:0a:7e:47:38:2c:d3:17:cc:79:7d:7c:9d:fa:97:24:d4:31:
7b:27:33:de:30:01:e5:a8:c0:72:d4:24:41:d0:c6:1b:b3:e2:
2e:39:65:38:cf:26:9e:9b:fd:dd:09:d7:2e:60:62:b4:c5:67:
4e:7d:33:b8:e1:8f:18:fd:60:58:83:40:08:a1:e4:28:7f:83:
c3:5a:5d:48:c9:56:ae:23:85:dd:f7:54:48:63:20:85:e3:10:
03:0f:60:0a:0e:4e:50:2d:ae:5d:8f:fd:a1:59:a5:31:90:c2:
4c:ac:59:0e:4b:2b:00:c7:59:d4:1e:08:39:6b:07:55:96:4b:
8e:f9:f3:2b:a4:3a:cd:46:b0:3c:cd:bb:4b:79:d4:15:4d:88:
1f:12:80:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 16:11:32 2024 by rpki-client on console-fra.rpki-client.org