Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEA49CEEE33011ED947029C52F6D8C1D.roa
File: FEA49CEEE33011ED947029C52F6D8C1D.roa (raw, json)
Hash identifier: Uy/0EGos2hkEzN4TfJQuS1MOI18oAydoc530m1qyysw=
Subject key identifier: 74:6F:31:10:F8:3C:AE:33:1D:67:EC:47:9A:BC:17:7E:DC:E4:E8:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1FC7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEA49CEEE33011ED947029C52F6D8C1D.roa
Signing time: Tue 25 Apr 2023 06:18:29 +0000
ROA not before: Tue 25 Apr 2023 06:18:25 +0000
ROA not after: Tue 30 Apr 2024 06:18:25 +0000
asID: 209242
IP address blocks: 154.83.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8135 (0x1fc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 06:18:25 2023 GMT
Not After : Apr 30 06:18:25 2024 GMT
Subject: CN=644770b5-0bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ea:63:4f:a7:af:2f:a7:44:e7:c9:10:ea:3a:
df:af:d4:ea:aa:d9:c7:1c:2d:99:8c:08:9d:65:04:
fd:ff:1a:21:ae:29:5b:f5:b0:91:bd:de:54:66:cb:
96:bf:15:1d:aa:95:01:b8:72:dc:f0:47:3b:b1:37:
f1:d8:65:e8:2c:08:05:49:d2:2c:c8:0e:a3:ce:9e:
a0:07:4b:2b:9b:f6:6e:96:2e:cd:bf:e7:93:77:dd:
f6:47:09:f6:4a:98:47:69:a5:12:c6:0f:dd:bd:59:
08:a8:54:b7:db:21:3f:af:5d:22:7b:f3:db:e6:dc:
7c:58:af:51:94:0b:cc:56:2c:f7:6a:47:cd:7f:0b:
28:e4:5b:6f:6c:50:5e:a5:1f:14:28:2a:4d:de:3a:
f6:3c:c2:f1:3b:21:47:7c:62:ab:b7:dd:b2:0c:4a:
92:8f:37:45:3c:bd:39:25:09:ef:93:20:38:cb:91:
e5:7f:8b:bf:29:ff:09:b7:28:2f:3d:3e:d3:d4:0a:
cf:f9:3d:02:b5:d4:19:1f:5e:c0:ff:b5:20:d7:5c:
f5:4e:3c:76:7c:d3:c2:9d:ef:53:7b:1a:6d:91:ce:
98:55:17:fd:b2:18:66:de:f0:e0:54:33:b4:d5:bc:
95:53:f1:0a:66:b3:db:1d:f6:fe:f1:ce:c7:e7:49:
7d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6F:31:10:F8:3C:AE:33:1D:67:EC:47:9A:BC:17:7E:DC:E4:E8:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEA49CEEE33011ED947029C52F6D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.2.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:11:95:8c:57:6b:9f:18:af:95:83:7b:ad:d8:e4:5b:2d:05:
24:cf:6c:33:83:b2:26:af:50:c9:19:04:06:8d:31:d8:eb:b0:
2b:0e:6d:d4:31:de:cf:c9:9d:11:95:71:0f:79:b7:75:67:31:
95:79:bc:0e:67:7e:08:0e:9f:a1:69:be:35:2b:6d:9e:9b:12:
20:d3:da:ac:83:3a:12:ee:39:d8:93:9c:63:82:71:dd:9d:13:
71:0e:db:ba:ac:f9:bf:78:fe:c1:7c:2e:7d:bc:0a:f9:45:37:
b1:e7:2e:1d:2e:0c:92:69:df:09:71:ba:96:87:b0:1e:f3:8f:
3c:26:dc:d0:80:fa:58:d6:f0:9e:96:6a:04:9e:30:87:e2:9d:
c1:26:56:a0:82:98:7f:be:89:e5:f0:d5:56:9a:b6:ac:72:19:
97:1f:1d:82:fd:93:b7:75:e2:bd:9f:a9:2f:1e:7b:90:e1:25:
b6:14:43:f9:ea:6d:0c:a5:f1:0a:8f:94:a5:02:19:81:ef:74:
f8:26:61:7e:22:c3:2f:55:13:c1:a3:5c:b3:a2:86:e7:da:0a:
4d:77:b4:8f:0c:27:39:25:20:e3:1f:a5:34:6e:4b:07:13:e8:
e4:a4:11:f7:ea:86:c3:67:d0:f8:1b:08:2d:c5:79:54:4f:3e:
af:70:49:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 12:15:42 2024 by rpki-client on console-fra.rpki-client.org