Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB3B50DAFAC611EEA285F043017001B1.roa
File: FB3B50DAFAC611EEA285F043017001B1.roa (raw, json)
Hash identifier: 6zNK7xfuWFV/Zo6E8mpt92XN8Z7JQ2PK6YMUHJph598=
Subject key identifier: 2C:0F:5E:D8:3F:EA:24:07:D1:D7:0E:B2:E2:D2:D4:49:9F:7F:D1:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ABD7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB3B50DAFAC611EEA285F043017001B1.roa
Signing time: Mon 15 Apr 2024 01:25:03 +0000
ROA not before: Mon 15 Apr 2024 01:24:59 +0000
ROA not after: Wed 24 Apr 2024 01:24:59 +0000
asID: 132325
IP address blocks: 154.213.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43991 (0xabd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 01:24:59 2024 GMT
Not After : Apr 24 01:24:59 2024 GMT
Subject: CN=661c81ee-770d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:76:22:d6:20:2d:32:65:63:82:65:57:53:
4f:70:7f:50:a3:4d:69:62:1c:ec:76:94:e5:3e:6b:
84:81:28:16:b1:22:b0:71:6a:41:31:99:6c:ed:fc:
a9:8a:53:5c:5e:e0:31:a0:f3:e2:3e:dc:a9:cd:94:
fa:22:5a:98:ff:13:7e:b3:39:18:8c:0f:f0:24:6f:
cc:dd:cf:36:83:91:71:ec:85:72:60:f3:54:0d:db:
58:01:e3:17:15:b0:25:54:f7:f8:9d:e8:b9:52:1b:
4b:9c:8b:48:62:73:4e:85:e2:30:6c:88:b9:98:46:
fa:89:67:2b:40:46:6d:0e:2e:4d:2d:d8:db:5d:81:
9a:87:5c:14:b9:b7:20:7a:4a:1a:6c:35:e9:96:6d:
e8:5e:08:ca:c9:89:a8:7a:69:2a:a9:5d:d5:0d:19:
65:44:13:64:11:07:06:41:37:b4:29:fd:74:5d:84:
b0:1d:56:23:87:4a:51:83:d1:d8:5b:dc:03:9c:bc:
e8:ed:ff:9a:97:44:a1:72:9b:d2:70:12:04:32:34:
a9:ac:49:1d:c4:cd:5c:0b:dc:61:20:8b:bb:a0:8f:
f3:91:d5:1a:07:ba:00:5f:ed:65:2a:a3:77:5a:73:
e4:af:30:2f:e2:a2:ee:cf:0b:39:56:ef:b8:8a:c6:
1c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0F:5E:D8:3F:EA:24:07:D1:D7:0E:B2:E2:D2:D4:49:9F:7F:D1:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB3B50DAFAC611EEA285F043017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.19.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:b7:4b:3f:34:b0:56:64:6a:31:0f:df:f6:43:1f:0d:03:37:
65:97:8b:c2:31:57:7a:36:e8:85:bc:15:37:f2:ad:07:34:ca:
79:aa:4a:92:48:4f:8f:c9:45:b4:ae:07:5e:44:dd:1e:ae:72:
93:07:c5:60:a4:ac:d1:6b:10:ef:07:1f:40:dd:72:0e:52:76:
4a:4c:b6:d6:62:9c:d8:9c:54:51:ef:b1:fd:7c:cf:97:3e:fe:
8d:52:43:e8:6f:c0:5d:23:4c:56:64:dd:5e:6f:ca:b5:13:36:
36:5d:7f:ca:4e:21:48:bd:71:55:bd:7e:e3:66:37:fd:ee:5b:
6a:38:67:fa:6e:0d:c9:41:bb:db:c5:89:a5:86:b3:d5:e8:73:
d4:70:6c:cf:ea:3d:9c:7f:da:eb:62:19:ce:6c:b0:26:75:62:
f8:44:92:a0:be:95:16:7c:40:5f:b4:9f:9f:34:a3:a7:47:0c:
a7:5e:5c:e8:1b:43:a1:44:9f:63:be:10:16:77:0e:0e:9e:a8:
b5:de:02:2b:65:22:79:82:4f:9f:74:53:12:f3:25:78:91:f6:
75:35:27:8e:51:01:83:46:ef:92:68:59:44:47:f2:f5:ab:1d:
7d:4b:b0:15:79:f9:62:d0:37:a5:92:39:2e:93:03:36:59:09:
9a:2a:b4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 04:12:04 2024 by rpki-client on console-fra.rpki-client.org