Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F87666A26E8211EFB5B0CE56762E951A.roa
File: F87666A26E8211EFB5B0CE56762E951A.roa (raw, json)
Hash identifier: w4TfojOOV5i27J1UnB+ZdN9JAxOsc6GQxMDyPdscmcE=
Subject key identifier: EE:C0:7F:2A:16:DA:92:C6:38:D6:0C:1A:05:C5:A9:83:B6:94:05:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EBB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F87666A26E8211EFB5B0CE56762E951A.roa
Signing time: Mon 09 Sep 2024 08:10:26 +0000
ROA not before: Mon 09 Sep 2024 08:10:23 +0000
ROA not after: Mon 11 Nov 2024 08:10:23 +0000
asID: 397423
IP address blocks: 154.202.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60342 (0xebb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 9 08:10:23 2024 GMT
Not After : Nov 11 08:10:23 2024 GMT
Subject: CN=66dead72-24c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:64:9d:7d:19:36:0c:3e:62:ab:ef:43:8c:e2:
9e:7c:59:8c:aa:83:66:34:e1:eb:9b:ff:df:f2:fc:
03:29:ad:43:8a:50:a7:b2:37:aa:4e:c1:c2:60:56:
c3:83:fb:0a:69:a0:69:79:02:8f:02:73:d5:42:b4:
1f:64:b3:90:cb:6c:5d:1c:26:37:41:15:aa:a4:8f:
c2:90:5c:f8:78:b3:5d:3d:aa:22:5d:16:f4:aa:0d:
62:98:c7:a8:35:0a:42:ff:de:a7:c6:14:50:20:57:
a2:ee:57:4b:f3:c2:f9:89:b0:b2:3d:98:3e:98:ec:
8e:52:f5:8e:a4:0e:62:a7:11:02:8a:ce:c2:1d:c2:
02:c8:cd:70:d8:48:84:38:e6:22:30:a1:13:ff:94:
8f:7a:8e:91:b6:94:b6:bf:90:19:e4:60:f5:5f:6c:
c6:2f:ce:7c:57:1f:33:a1:31:da:e8:39:9d:14:d9:
39:f3:47:24:06:21:25:8b:57:70:05:13:97:c1:f6:
0b:38:f5:3d:ea:3e:ea:f7:7e:98:e4:31:37:e4:b8:
a1:4c:c0:18:8c:d0:8a:60:d9:2c:41:74:e7:2b:01:
1a:2d:c6:bf:1e:b1:03:ff:67:68:87:9e:c1:fd:40:
18:2d:e9:8c:c7:bc:83:28:51:9d:6f:cc:12:cc:77:
e5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C0:7F:2A:16:DA:92:C6:38:D6:0C:1A:05:C5:A9:83:B6:94:05:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F87666A26E8211EFB5B0CE56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.3.0/24
Signature Algorithm: sha256WithRSAEncryption
09:70:30:55:85:24:64:18:d8:e2:35:f3:3f:1c:1b:d2:54:c2:
44:37:c0:59:3c:7a:4e:1a:e7:73:3c:7b:58:d9:f7:0e:63:6b:
65:24:d2:44:09:c8:77:79:44:e5:fd:b2:78:03:d2:c9:58:45:
b2:03:f2:8f:3b:7c:0d:2b:be:da:96:5f:17:d7:b0:32:14:28:
cf:48:e2:32:0a:7d:b6:0a:9f:82:a2:e1:cb:9a:70:31:71:a6:
d8:d4:ba:09:3c:4a:8f:58:7b:e6:11:92:1f:d7:d6:de:e6:56:
95:71:bf:cd:c0:71:28:7b:bf:af:b8:e2:07:f5:19:59:cb:dd:
1b:d1:d3:7a:74:9d:db:08:37:1d:ed:11:8c:ca:9f:d0:cf:96:
88:43:a1:bc:ac:90:79:03:df:f7:0a:56:f3:c8:7f:68:88:8a:
2f:ef:1c:e7:74:03:ed:c4:02:df:54:68:cc:59:0b:05:b0:f2:
87:06:ac:bf:4b:62:cd:e5:bd:8a:41:f4:39:3f:de:0c:a2:5d:
e9:ba:a2:d2:84:07:c6:fb:ac:8b:86:0a:22:d1:1e:e7:24:5f:
61:58:b7:3a:b2:e4:fa:99:ba:a3:df:30:2b:c2:f1:6f:59:e2:
37:57:c6:60:70:43:ef:e6:e2:0d:e1:93:0b:1d:18:5b:0d:e8:
9c:cb:be:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 12:47:37 2024 by rpki-client on console-fra.rpki-client.org