Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06C6A0CC077311EFA4C2C122017001B1.roa
File: 06C6A0CC077311EFA4C2C122017001B1.roa (raw, json)
Hash identifier: +NavLISlVqDkZI+BhTZ2TN91jN7EW1iJx5D94r7Vl+4=
Subject key identifier: 2A:38:2C:11:84:D8:40:A7:8F:47:5F:6A:4D:6B:51:31:F3:8D:73:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B30A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06C6A0CC077311EFA4C2C122017001B1.roa
Signing time: Wed 01 May 2024 04:26:49 +0000
ROA not before: Wed 01 May 2024 04:26:45 +0000
ROA not after: Sat 11 May 2024 04:26:45 +0000
asID: 142062
IP address blocks: 154.206.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45834 (0xb30a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 04:26:45 2024 GMT
Not After : May 11 04:26:45 2024 GMT
Subject: CN=6631c489-ac9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:a2:a8:c8:75:a6:30:24:92:16:4f:3f:89:
3b:a4:25:4a:ee:60:c3:ea:c4:b7:c3:67:b6:4d:29:
5a:3e:e9:e0:83:49:ad:82:08:27:96:df:5d:cc:bb:
ab:b6:3c:d3:9a:f1:96:32:a8:50:d6:5f:11:69:03:
c5:ae:9e:37:2a:05:6d:ee:d6:59:29:67:c9:8c:b3:
e9:a9:f2:e6:b8:b3:08:d6:9c:0f:fe:fd:fb:99:a1:
68:95:be:b5:43:f7:32:34:c3:08:20:3b:41:1c:df:
66:8a:70:b6:6a:50:07:72:db:7a:2d:65:74:37:ea:
ac:5b:b2:2d:13:6d:59:70:16:de:ce:97:da:d1:11:
e9:5f:7d:d2:ab:42:04:fe:33:46:b4:d7:1b:4c:cb:
92:53:53:7c:fc:75:e1:d6:2f:d8:a9:20:fe:47:94:
3e:47:e4:70:c9:3e:e3:0d:a1:e0:aa:73:78:81:d1:
ed:d3:b0:9d:01:1a:24:ee:f8:c8:a0:cd:7f:8e:5b:
1c:81:5c:dd:29:94:04:5e:61:5b:59:4e:c1:de:d5:
f0:60:2d:a5:5f:e3:9f:b1:36:90:fd:22:8a:fb:0a:
c7:36:d5:61:24:5a:cc:6e:7a:40:83:56:5b:cd:cf:
fe:46:31:91:c6:fa:51:9a:79:2b:ab:27:29:fa:88:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:38:2C:11:84:D8:40:A7:8F:47:5F:6A:4D:6B:51:31:F3:8D:73:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06C6A0CC077311EFA4C2C122017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.204.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a0:11:fd:a5:25:08:30:f3:15:33:87:01:92:d3:72:50:59:
f8:a1:ff:dc:97:e7:a6:ef:96:12:61:5f:bf:0c:8e:31:30:9b:
2a:98:62:aa:95:16:45:57:22:82:17:c8:82:a0:ac:f6:a8:b6:
56:fd:39:4e:36:4b:af:92:73:c7:16:7b:a7:70:5e:cf:4a:cd:
af:91:df:a0:f0:48:c8:f7:44:b7:6c:bb:d4:bb:93:da:a0:14:
68:17:03:ef:84:3a:c4:1b:54:48:7e:b3:e0:2b:ba:56:43:93:
b8:27:b1:0a:6a:29:c4:e6:19:7e:5c:2d:00:55:33:60:d1:dd:
a3:5c:e7:10:73:a0:55:a1:93:8c:0c:43:6f:c7:64:16:8b:34:
a0:a3:c2:59:d8:16:8b:84:26:63:16:54:ea:c5:2b:46:62:e6:
b7:0e:2b:02:28:5f:e1:3b:1d:57:35:02:8f:75:34:88:2d:3c:
a8:d3:7e:f8:23:f4:a0:45:0b:47:e2:ed:06:29:d4:c3:9a:18:
e7:7b:15:ca:d9:8e:9b:6d:dd:53:81:44:9a:48:ce:00:ef:c7:
7d:f2:9b:95:18:8a:65:d1:e6:bd:a6:9b:74:29:ea:46:0d:82:
71:c9:e7:31:9d:0d:5d:59:cb:7b:fd:18:ac:bd:04:35:fd:9f:
3d:cc:65:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:19 2024 by rpki-client on console-ams.rpki-client.org