Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/241495C0077411EFBC7ED42C017001B1.roa
File: 241495C0077411EFBC7ED42C017001B1.roa (raw, json)
Hash identifier: XmXX+kaa/yswk2UAV+1aSlHjkKteHQuZbJH7OvWa6j0=
Subject key identifier: 99:1F:EF:5D:E7:2C:C2:A0:8E:65:68:DF:A0:43:71:59:58:D5:6C:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B314
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/241495C0077411EFBC7ED42C017001B1.roa
Signing time: Wed 01 May 2024 04:34:47 +0000
ROA not before: Wed 01 May 2024 04:34:44 +0000
ROA not after: Sat 11 May 2024 04:34:44 +0000
asID: 142062
IP address blocks: 154.206.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45844 (0xb314)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 04:34:44 2024 GMT
Not After : May 11 04:34:44 2024 GMT
Subject: CN=6631c667-6c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:b4:4d:c8:ff:08:e8:38:ef:13:2d:99:5a:
83:c0:2c:4f:4f:6c:7c:71:29:cf:bf:fa:28:bd:da:
cd:c7:18:97:85:92:c2:2a:d3:db:4c:75:97:35:b3:
76:45:ee:ea:db:ae:fe:ed:d3:ed:dd:c9:40:50:a5:
32:b8:0e:e7:cb:34:bb:e7:42:8f:7d:a6:85:81:4c:
01:ab:56:af:24:63:32:a8:fd:96:7a:ba:37:50:e4:
ae:cf:57:a7:b9:c3:e1:b9:eb:bb:94:bf:16:fb:fb:
f6:85:8a:11:54:0f:ad:19:bc:21:98:5f:dc:50:12:
89:ba:64:e5:f8:b1:5b:c7:46:95:bb:fe:a2:8c:9b:
82:11:4a:fe:da:f9:16:77:5c:8e:d0:ae:58:bd:75:
f9:ae:d4:8c:a0:1d:93:e8:4f:53:57:b5:1a:dd:78:
85:fb:1d:a3:fd:19:5f:39:4f:ec:91:1b:57:b1:82:
0d:a3:1f:62:2f:85:3f:9c:9f:75:c4:af:6a:d2:e9:
02:37:5f:4d:1f:55:19:64:fb:bb:18:fe:7a:29:2b:
7c:c7:81:7f:2d:51:53:27:87:2a:34:99:bb:68:b5:
22:34:92:04:7d:8e:40:ff:01:48:dd:18:28:63:d7:
00:87:5d:e5:2f:ca:25:e8:f1:e5:f7:8f:a8:ae:08:
c9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1F:EF:5D:E7:2C:C2:A0:8E:65:68:DF:A0:43:71:59:58:D5:6C:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/241495C0077411EFBC7ED42C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.225.0/24
Signature Algorithm: sha256WithRSAEncryption
04:74:33:5e:63:5c:df:88:ee:a9:26:fc:79:21:42:79:2c:0c:
c9:bc:22:73:12:4b:92:c7:6c:cd:68:ab:7e:a2:11:ca:11:59:
d9:ea:24:6b:95:1d:fa:c6:21:8b:2d:3c:8b:a0:c6:7f:d4:03:
4a:38:6c:db:1f:36:aa:c3:46:23:85:77:37:51:dd:d8:29:67:
c6:b6:9b:0b:5e:34:42:f6:a6:c6:98:05:16:13:73:c2:3e:d3:
9b:66:6f:e0:2d:45:67:82:2a:b6:80:2e:31:1f:f3:8a:67:1f:
94:64:6f:c4:7c:7e:e1:a1:78:ba:32:22:2c:63:bf:c3:a3:1c:
6e:22:68:fc:de:9b:22:36:c5:29:2b:d7:77:f8:5d:b3:5d:14:
03:49:03:1e:8f:e4:41:c2:ff:b3:38:ad:d9:d8:62:c3:62:63:
27:7c:a5:15:01:f6:3b:3f:71:ec:5c:4b:20:81:b7:62:d0:cb:
e6:f0:de:6f:99:a4:f5:ca:b4:5f:4b:b1:99:e0:63:f5:08:e1:
7f:f2:5a:1a:35:b9:be:69:02:9c:df:65:27:e8:44:49:3c:84:
2e:d0:90:ca:ef:89:71:c7:a8:aa:d9:60:06:f7:3d:ce:a4:90:
c7:7e:19:9c:69:0b:80:50:15:e3:a3:ee:32:92:67:d6:54:d8:
1b:3e:2a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:20 2024 by rpki-client on console-ams.rpki-client.org