Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F740DAA8FE2311EEAB2E483D017001B1.roa
File: F740DAA8FE2311EEAB2E483D017001B1.roa (raw, json)
Hash identifier: 0dueQnTQI2oHd1lQJtvjNRNlEofHmjlz98BAF4in1gw=
Subject key identifier: 83:0A:E1:08:C1:03:AA:41:A6:84:92:F7:25:B7:B4:70:5A:3A:83:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F740DAA8FE2311EEAB2E483D017001B1.roa
Signing time: Fri 19 Apr 2024 08:08:12 +0000
ROA not before: Fri 19 Apr 2024 08:08:09 +0000
ROA not after: Mon 29 Apr 2024 08:08:09 +0000
asID: 5065
IP address blocks: 154.86.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44648 (0xae68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 19 08:08:09 2024 GMT
Not After : Apr 29 08:08:09 2024 GMT
Subject: CN=6622266c-a0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:49:e8:3e:95:27:e2:2a:39:d0:9f:bd:70:27:
0a:dd:51:8b:21:b6:3c:b0:d3:f7:94:a7:0c:c4:a2:
21:c7:8d:e6:d9:f8:ec:17:b7:1f:dd:63:db:4d:88:
b7:55:a5:14:38:27:68:f2:ef:14:af:45:cf:04:77:
16:7b:71:50:f6:4b:d3:e5:6e:92:a1:43:7f:88:35:
e4:76:c9:3a:85:e5:2b:39:8a:23:f0:f9:f0:a9:7a:
51:da:70:4d:08:86:c2:43:c2:76:d6:d4:09:55:62:
9e:7f:05:c7:02:6c:4c:69:7f:4b:a5:b7:68:3f:75:
53:ee:37:82:c8:a5:b5:81:3f:85:17:a3:46:99:37:
06:5a:af:ec:4f:28:a5:3c:58:02:a2:ef:39:90:38:
ab:b3:6b:60:7d:b7:75:d3:ba:79:1d:2d:b8:c5:f3:
36:ff:ff:92:9d:ac:75:2d:af:1c:26:87:c1:6f:da:
51:b1:cd:5c:69:d5:80:cf:ac:ae:56:d5:ea:b7:b0:
fa:b4:28:4f:bd:1e:5e:2d:2c:32:25:8d:f2:c2:b9:
92:1f:56:a7:0d:1f:18:00:42:71:f8:e4:c5:b3:ca:
80:92:ff:43:fb:f6:f8:9c:6d:86:2b:42:ca:5c:76:
ef:68:cf:a4:17:f0:6c:d8:4d:85:57:64:26:76:43:
96:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0A:E1:08:C1:03:AA:41:A6:84:92:F7:25:B7:B4:70:5A:3A:83:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F740DAA8FE2311EEAB2E483D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.12.0/22
Signature Algorithm: sha256WithRSAEncryption
69:fd:de:b3:d8:a6:7d:75:76:2c:99:92:81:60:be:85:c5:8e:
cf:05:e8:51:7d:d3:e2:c1:18:cf:57:61:69:2c:6e:b3:ae:15:
c3:6a:13:e4:ea:11:91:56:bf:ca:c8:c4:39:9a:4d:5f:ce:a2:
ce:be:07:46:7f:3d:03:07:6e:4a:15:c1:03:bb:92:95:0a:d1:
cf:25:a2:38:3c:f9:e9:98:1e:f3:58:a7:6e:ea:75:e3:43:6f:
18:95:63:fc:d2:c8:45:76:03:c2:69:23:24:15:3f:64:81:e7:
b7:b0:10:05:43:93:03:c0:75:3e:d4:15:10:e1:e0:de:97:ef:
59:71:35:b9:15:33:f0:83:26:70:e6:b4:92:c6:26:87:fd:5f:
2e:47:df:9f:8f:21:00:5c:a6:b0:88:b7:ec:1e:e4:98:77:bb:
77:63:8f:97:34:75:89:80:68:06:a0:b2:4f:e2:cb:7b:1e:a6:
2d:78:da:3c:33:7b:ab:d0:14:fd:a9:e1:53:f9:18:1c:6e:85:
a9:c0:4e:bf:41:8d:73:ef:3f:d7:5c:8f:56:26:69:2c:f4:24:
21:c1:6d:d5:87:1d:92:26:0c:ee:0f:dc:2f:d7:87:86:1d:b1:
63:2c:68:bb:d7:15:f1:66:ff:11:79:0e:51:d2:75:d3:4c:65:
65:01:34:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:25 2024 by rpki-client on console-fra.rpki-client.org