Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08F277BA077611EFB642043D017001B1.roa
File: 08F277BA077611EFB642043D017001B1.roa (raw, json)
Hash identifier: +sXuVcyrBHXe0lnTdf6NauMziSP6hB0y8I4UxC1TFuE=
Subject key identifier: E4:9D:03:3E:70:6C:B1:EF:CA:87:14:FF:FF:03:CC:E4:35:49:B6:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B326
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08F277BA077611EFB642043D017001B1.roa
Signing time: Wed 01 May 2024 04:48:21 +0000
ROA not before: Wed 01 May 2024 04:48:17 +0000
ROA not after: Sat 11 May 2024 04:48:17 +0000
asID: 142062
IP address blocks: 154.206.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45862 (0xb326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 04:48:17 2024 GMT
Not After : May 11 04:48:17 2024 GMT
Subject: CN=6631c995-96c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:26:82:60:57:16:11:f7:0f:7a:6b:96:ca:02:
9a:af:ad:a0:f1:b8:eb:e2:e3:f6:29:4d:23:4d:95:
4c:f2:fe:00:5b:1a:cf:7d:6a:0d:a1:e9:5e:e1:45:
c8:67:67:56:cd:9a:d3:3c:ba:1e:d3:c5:82:30:9c:
85:bf:ed:1d:83:d0:33:29:85:b1:49:4c:5f:69:c2:
76:47:36:7d:05:4f:95:53:d1:97:00:e4:be:a4:b8:
04:dd:9c:09:e5:ab:38:b6:5f:67:62:91:32:0a:27:
bb:3c:2d:f5:d2:af:71:70:ab:53:57:88:fb:0d:5a:
40:67:97:da:c0:6c:dd:e6:28:38:dd:97:01:2e:7c:
c7:ce:e3:0f:5d:0a:fd:33:97:02:e7:74:c8:eb:f3:
56:2d:92:ec:8f:5e:d3:f8:df:65:fd:70:c5:8e:a3:
50:9b:65:60:ff:b2:6b:0c:ef:fa:09:49:f4:85:8a:
9b:2e:3b:7d:bf:b3:23:f9:78:0f:ed:10:c8:73:ef:
3f:32:68:55:53:ef:a6:ed:5a:be:a1:2a:e0:ee:58:
06:be:a6:29:35:2a:a6:a0:6b:b4:5e:ba:4f:f4:d6:
8f:85:17:47:f1:1e:72:a6:97:1a:80:22:74:9c:4b:
2e:05:8e:e2:55:d0:89:8d:c8:d1:d7:33:95:de:5f:
47:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9D:03:3E:70:6C:B1:EF:CA:87:14:FF:FF:03:CC:E4:35:49:B6:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08F277BA077611EFB642043D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.218.0/24
Signature Algorithm: sha256WithRSAEncryption
66:9c:52:4e:aa:f0:cd:bf:20:cb:fb:93:24:ad:81:af:02:cf:
ed:85:8e:12:29:9c:24:de:0a:45:a0:93:a0:6e:d7:78:16:b9:
d3:b6:64:17:d9:08:15:5e:d3:11:4e:9e:c9:cc:35:14:7c:5c:
2f:45:bb:0e:bd:ca:86:42:d9:9c:6d:8f:99:5e:2e:05:83:e7:
ac:ce:f4:86:83:34:ca:b4:33:fe:7c:85:01:81:b0:4e:fe:95:
f0:88:6e:56:75:80:b2:6a:5f:d5:ae:5d:59:5d:8e:79:54:db:
4e:48:da:25:e7:71:28:61:c4:7d:19:4f:2d:b3:19:e5:a9:72:
8f:c8:12:37:24:86:07:cf:25:21:13:23:5c:32:72:93:ea:18:
08:eb:b1:dc:bb:17:ba:0a:07:d5:69:b8:63:61:fd:9e:24:48:
ce:7d:b1:41:79:b3:f2:06:1e:9f:e7:5d:d7:7e:b4:26:d5:9a:
d3:69:92:bc:8b:58:04:40:85:68:2b:f1:db:9b:d4:8b:ac:0c:
68:ff:8f:c2:53:d8:e1:32:b0:12:e2:62:c1:2a:77:92:73:a0:
b2:27:49:f7:a5:35:38:74:24:87:9f:0b:c2:7a:6f:16:30:c2:
f7:6c:fb:7b:bd:b4:8b:7b:25:7f:ac:1b:38:de:6d:0b:2d:f4:
39:82:d4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:19 2024 by rpki-client on console-ams.rpki-client.org