Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F69C1700038E11EFBA8C8E65017001B1.roa
File: F69C1700038E11EFBA8C8E65017001B1.roa (raw, json)
Hash identifier: Ntbu/iv9GsPX0QA/GFUIqdu2RsRf7ffY2zETquEfcJQ=
Subject key identifier: 03:B4:23:DB:25:1C:15:10:DC:4C:CC:3A:9C:08:1A:AA:D1:6F:3E:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B17C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F69C1700038E11EFBA8C8E65017001B1.roa
Signing time: Fri 26 Apr 2024 05:36:43 +0000
ROA not before: Fri 26 Apr 2024 05:36:40 +0000
ROA not after: Sun 05 May 2024 05:36:40 +0000
asID: 139646
IP address blocks: 154.208.14.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45436 (0xb17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 05:36:40 2024 GMT
Not After : May 5 05:36:40 2024 GMT
Subject: CN=662b3d6b-8d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:89:37:f5:37:d8:e5:38:0b:c0:07:ea:e7:
bd:f1:1b:0b:e1:de:20:a2:64:36:39:23:6f:7c:0f:
e4:38:5b:50:e2:da:d7:b2:c4:69:7f:cc:a0:f4:b0:
6f:41:5d:97:ac:51:02:f0:2f:ab:23:f4:5a:fb:f7:
20:47:8e:ba:72:b9:b8:52:85:48:b8:4e:33:15:83:
5a:3b:dc:b1:b2:df:99:a5:f7:99:c9:c6:ef:2b:ee:
44:c2:e8:8b:fd:1c:67:1d:e7:93:05:56:b9:8f:0b:
38:5d:bc:69:6a:49:3d:0b:fa:24:76:29:dd:51:5c:
e5:e0:ad:be:93:58:40:ff:69:55:31:3d:c9:a4:08:
52:17:4f:b9:dc:c1:c1:a7:11:04:99:1b:84:e6:a6:
73:58:04:fb:1d:72:99:d5:45:f5:03:77:10:be:21:
3a:49:8d:43:7d:f8:ab:69:72:54:51:b2:c0:e5:82:
1c:47:85:c7:c7:76:de:8a:c9:93:8e:88:3f:4b:76:
9d:9d:ba:79:f4:90:8a:78:ab:f6:d3:35:ee:d2:58:
b0:4f:a9:26:8b:db:13:bd:b2:49:8f:4c:0f:38:c2:
4a:60:0a:57:66:80:7e:ee:16:fe:79:b9:8d:86:e4:
b4:83:fd:1c:93:7f:cf:36:56:5d:98:51:91:c4:d7:
15:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B4:23:DB:25:1C:15:10:DC:4C:CC:3A:9C:08:1A:AA:D1:6F:3E:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F69C1700038E11EFBA8C8E65017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.14.0/23
Signature Algorithm: sha256WithRSAEncryption
97:5e:29:38:5a:d0:2d:7b:88:8c:52:ff:32:d2:be:45:f2:2c:
45:a0:76:ba:30:b5:32:16:70:d0:c8:76:4a:45:d1:51:39:d0:
b0:dc:a3:bf:bf:11:04:a6:22:0f:fc:da:e6:29:02:c1:2f:cf:
82:30:1d:06:79:22:40:48:19:2e:58:23:06:e2:d7:5e:0a:59:
5b:11:6b:4e:a2:4e:c8:a0:d7:94:a4:43:a4:62:e9:45:de:90:
56:f8:53:f4:c1:6b:cd:82:55:1b:33:af:b9:b5:87:fa:10:a4:
0e:13:05:a6:59:e1:d8:a3:f9:6a:2b:08:45:c5:9c:c3:60:79:
d6:70:79:d9:d6:92:e5:55:41:d0:be:37:1d:e1:1f:77:4f:07:
04:25:5d:d4:89:90:6f:89:9e:f7:02:ba:8d:57:93:40:90:de:
0d:4f:df:07:9e:11:d1:a1:1e:50:c0:80:3b:eb:f2:25:76:b5:
be:3b:df:32:e8:97:25:90:a2:cf:f2:b2:1e:74:18:a5:1c:e8:
de:19:5d:91:17:92:dc:d6:eb:b5:90:c6:bc:7c:54:59:af:58:
ba:6f:74:0a:75:62:5b:86:52:30:ef:4b:64:42:da:69:95:70:
e4:ee:09:1f:bd:1a:98:11:26:5d:d6:f4:46:1d:38:b4:9b:93:
79:90:72:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:11:10 2024 by rpki-client on console-fra.rpki-client.org