Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE36FD6E155E11EE96641E504AD9E6FC.roa
File: FE36FD6E155E11EE96641E504AD9E6FC.roa (raw, json)
Hash identifier: EaEX2XwyP9D6+QPqp+DPpZ/nYjLvtuAZBpheLo0hbcI=
Subject key identifier: 79:73:CB:87:30:E5:E2:C2:0C:6C:BE:77:1A:10:B3:3F:2F:0F:CC:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2E69
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE36FD6E155E11EE96641E504AD9E6FC.roa
Signing time: Wed 28 Jun 2023 02:53:43 +0000
ROA not before: Wed 28 Jun 2023 02:53:39 +0000
ROA not after: Wed 01 May 2024 02:53:39 +0000
asID: 140227
IP address blocks: 154.86.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11881 (0x2e69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 02:53:39 2023 GMT
Not After : May 1 02:53:39 2024 GMT
Subject: CN=649ba0b7-baf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:74:9c:60:51:72:01:a3:46:8e:5d:8e:57:
30:d5:08:b1:1b:c7:d9:29:23:50:07:0f:c2:5b:5d:
f9:84:e9:4c:14:87:f9:c0:7b:ba:8a:38:e7:33:dd:
21:27:9c:5f:42:43:da:24:07:7c:59:66:a7:03:97:
b1:1c:d3:9e:b2:58:45:ab:58:27:60:cc:08:36:67:
4d:ba:08:eb:ee:9e:08:96:93:3f:8e:44:55:0a:0e:
dd:8b:82:bf:0d:9c:a7:3c:10:b4:bc:cc:c1:c2:7e:
d2:3f:ad:5a:57:20:b7:85:3b:36:f4:ce:95:af:6a:
c0:99:fd:92:24:de:51:86:4e:89:59:96:22:8d:f1:
60:b9:a9:e2:9a:5c:dd:b4:52:5d:a9:4e:3e:9c:49:
82:6d:f8:9d:8f:00:69:b2:a6:b1:92:46:bd:dd:0f:
0c:e7:6d:fb:c3:97:52:6f:ab:ba:f9:e0:2f:7c:f3:
8a:bf:a2:cd:e7:b5:82:73:3a:26:89:d9:9c:3d:70:
17:55:bb:6a:cd:cc:25:ee:1a:73:c9:21:68:9d:5f:
35:8a:33:b0:6f:ad:e7:58:b2:b3:94:83:b9:35:0a:
b3:12:6a:eb:2b:a8:fc:1c:d0:e3:3f:cd:46:d1:7b:
9d:68:4f:af:27:e9:ab:45:b5:16:b4:b9:bc:17:be:
e8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:73:CB:87:30:E5:E2:C2:0C:6C:BE:77:1A:10:B3:3F:2F:0F:CC:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE36FD6E155E11EE96641E504AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.17.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:fe:df:19:de:81:32:fb:76:94:39:ad:a6:84:95:94:e4:3b:
9b:44:f3:35:2a:df:57:f1:f5:b7:fd:b8:63:21:0c:f4:c5:e7:
3e:99:b5:33:9c:12:44:11:b1:e7:c5:81:11:f8:9e:70:8d:05:
cb:25:13:64:8c:e4:bf:20:4b:d2:74:68:72:a2:c0:90:cc:a8:
87:0b:ff:02:aa:9f:6c:63:3f:a0:16:4b:2c:09:21:29:82:bf:
b8:27:e4:46:09:81:a9:8a:dc:08:67:c5:79:33:a6:ec:27:28:
dc:6b:13:bf:3f:f2:96:7a:9c:3e:ad:0a:2e:ea:d3:1c:c1:13:
38:2a:71:00:96:49:27:5c:a8:27:df:08:70:08:8e:58:62:63:
ca:d7:a4:49:60:94:a7:95:9b:79:45:72:bb:15:3f:11:a8:7c:
35:69:3d:6f:ef:af:a7:27:08:ea:7d:a8:a8:34:50:52:28:66:
8b:61:94:8c:d4:fd:c9:66:2d:fd:d9:de:a7:ff:53:ef:4d:57:
63:73:99:14:f8:d4:d3:2c:5e:f5:dd:4f:55:73:87:d4:9f:9e:
ca:02:1d:94:c6:a1:c9:4a:dc:c4:f6:56:32:e1:0b:bf:f1:d0:
75:5b:55:c7:ca:e2:16:71:cd:fa:0f:c8:53:dc:29:7a:58:44:
ff:2a:53:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 06:28:07 2024 by rpki-client on console-fra.rpki-client.org