Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD97DBEA4A6311EFA91C4FA7762E951A.roa
File: FD97DBEA4A6311EFA91C4FA7762E951A.roa (raw, json)
Hash identifier: S/wLLxEcVrkU9eYa/nIJjS/YxoNLwqUng5byxgE9kwM=
Subject key identifier: 2A:16:9B:7F:D6:7B:B9:95:ED:84:3F:A5:0D:1D:16:DB:5A:D7:83:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D704
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD97DBEA4A6311EFA91C4FA7762E951A.roa
Signing time: Thu 25 Jul 2024 08:57:59 +0000
ROA not before: Thu 25 Jul 2024 08:57:55 +0000
ROA not after: Sat 03 Aug 2024 08:57:55 +0000
asID: 22773
IP address blocks: 154.90.2.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55044 (0xd704)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 08:57:55 2024 GMT
Not After : Aug 3 08:57:55 2024 GMT
Subject: CN=66a21397-792e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c3:07:c7:ec:84:86:e4:a5:52:89:10:a4:3b:
65:56:75:48:ed:04:0c:1b:fb:1c:22:81:75:e6:1a:
e7:38:14:e3:01:d0:9d:ac:25:68:9b:1c:7c:17:24:
bb:2c:2c:1f:42:f0:ac:52:6b:1a:c5:d4:33:a2:6c:
18:6f:c5:df:ae:b7:e5:1a:30:05:24:b6:a2:b4:7c:
b2:74:45:30:62:e7:46:49:61:f8:74:b1:82:72:06:
65:a1:f5:96:99:0e:65:d6:41:d3:e3:22:87:44:39:
89:7a:87:1f:dd:8d:0a:bf:a7:8d:1f:cd:21:41:3b:
fb:7f:29:3e:0f:02:12:22:70:b0:b9:64:d6:f4:35:
1d:0c:ee:02:2e:29:41:f0:78:04:46:49:87:c9:22:
63:d9:4e:f5:2c:fd:a5:e4:02:fc:7a:a1:58:b2:f8:
35:6d:35:db:7c:ab:32:78:70:f0:df:fa:03:fd:6e:
3b:4f:24:e3:84:33:53:58:69:fb:4d:20:5f:0c:ae:
68:c4:47:8f:bf:f4:91:75:c1:56:9c:4e:ff:57:32:
fd:4f:e7:88:ec:39:bd:9c:ab:6c:a6:8d:98:7b:bb:
1e:71:36:f6:a3:4e:a2:1d:fd:0b:f2:c7:4e:8b:d4:
72:10:78:5e:f4:d3:f4:2c:23:73:28:09:df:9f:ac:
f8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:16:9B:7F:D6:7B:B9:95:ED:84:3F:A5:0D:1D:16:DB:5A:D7:83:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD97DBEA4A6311EFA91C4FA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.2.0/23
Signature Algorithm: sha256WithRSAEncryption
75:03:c9:4d:a8:4c:90:f9:8f:ab:0f:0d:f7:eb:f9:d7:70:6a:
e3:f4:e2:f6:fc:d4:9e:91:2f:c1:37:a8:9b:32:57:3f:0b:fa:
e3:da:f1:4d:e1:82:39:73:6e:ba:50:6b:1c:ae:8d:54:d1:a1:
e3:33:3c:87:cb:f0:b5:67:33:6b:67:d0:b6:c0:76:f7:6a:67:
bb:0d:bb:26:1b:c3:e0:11:06:dc:2b:15:ef:43:a0:13:8d:0c:
18:eb:07:27:75:97:e1:12:df:5a:df:27:4e:16:95:46:af:e5:
1f:1c:f8:34:df:4d:ee:3c:fc:4e:a6:c2:25:6c:42:09:63:84:
43:02:7e:f4:d1:29:cf:89:bc:0c:97:63:e7:ed:bf:79:74:0f:
93:5b:13:80:11:9e:c8:77:d2:fd:9f:24:77:06:d7:b4:fc:24:
c3:d1:7b:16:5f:9a:9e:cb:f9:d0:59:21:0b:67:64:fd:37:13:
db:03:c5:47:d0:b3:11:07:7d:82:02:dd:c2:07:90:44:90:44:
8c:7d:3d:fc:6d:42:10:20:cb:7d:f8:6a:fe:8d:4b:48:be:21:
cb:8e:a1:7a:9e:6c:52:49:35:84:75:8a:ad:25:db:13:b7:88:
b4:c7:6b:00:1b:85:13:c3:84:03:5a:05:65:fd:8d:3b:d1:40:
ee:0b:76:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:52 2024 by rpki-client on console-ams.rpki-client.org