Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24F77BCA06D311EFBA25F707017001B1.roa
File: 24F77BCA06D311EFBA25F707017001B1.roa (raw, json)
Hash identifier: iS+w/CYBs4Le9l7PyyW0hUhvw+q2zYwGssGDD51SLaQ=
Subject key identifier: 81:3D:5D:A8:74:D9:A4:F2:71:38:B8:C7:C3:E5:79:68:CE:4D:DD:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B2C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24F77BCA06D311EFBA25F707017001B1.roa
Signing time: Tue 30 Apr 2024 09:22:20 +0000
ROA not before: Tue 30 Apr 2024 09:22:17 +0000
ROA not after: Fri 10 May 2024 09:22:17 +0000
asID: 136744
IP address blocks: 154.206.14.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45761 (0xb2c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 09:22:17 2024 GMT
Not After : May 10 09:22:17 2024 GMT
Subject: CN=6630b84c-bde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:42:82:77:61:05:f6:a2:ba:93:c1:8d:d8:
41:cb:79:9b:07:7c:da:3e:e0:a2:8b:c3:9d:81:f3:
30:b9:a5:5e:f3:f6:75:b8:53:2b:3e:05:71:e2:3c:
79:c9:50:f3:f8:c3:eb:e6:83:69:d4:27:54:29:e6:
03:69:ad:97:6d:86:46:1c:5b:e4:24:4a:81:56:75:
17:01:40:0f:f4:5b:e3:08:fd:0b:a1:a9:2a:59:0e:
d9:d8:62:54:cb:ca:d4:c3:82:ca:fc:84:09:ae:64:
60:33:68:7d:41:f7:6e:70:b8:16:5a:e4:f0:16:ec:
45:81:1d:6f:60:7d:b2:6f:ca:36:44:08:b4:17:0b:
53:d2:a2:a5:8a:86:ff:8d:23:5a:a5:ac:e6:60:4b:
1f:03:81:a9:06:62:f5:ac:a0:f8:30:5c:fb:f2:4e:
58:8c:a2:b4:8c:95:a7:b3:13:bb:b2:50:14:d7:a3:
89:06:ac:f0:6e:43:fb:4d:04:9d:d9:eb:29:5b:64:
ee:c5:be:35:d6:1b:36:87:dc:9c:6d:29:c7:2c:7a:
7b:dd:e2:7f:36:f5:83:63:5c:f8:37:c0:6f:8b:c4:
3e:b7:e3:e4:b1:c9:0f:4f:da:f7:0f:8f:7a:9e:06:
f5:df:bc:d0:c1:b8:35:f9:80:98:a4:ad:66:9b:a1:
49:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3D:5D:A8:74:D9:A4:F2:71:38:B8:C7:C3:E5:79:68:CE:4D:DD:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24F77BCA06D311EFBA25F707017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.14.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:9f:31:7c:fa:6b:4f:46:cf:19:e5:11:7a:8c:5c:6c:8f:c0:
39:7d:5f:08:9e:98:f6:6e:e3:43:a8:64:42:65:c4:84:40:5d:
ee:53:9e:71:f1:c0:ef:57:90:8d:ab:66:07:40:5b:56:7c:fb:
fe:2e:23:e3:18:0e:a3:e6:7c:08:4b:45:dc:aa:ad:db:8b:ed:
b3:15:d3:8d:70:ff:2d:e7:08:f0:ef:a4:78:4a:71:aa:81:9c:
5b:fd:d8:95:18:3a:f0:75:d1:de:c8:db:0e:54:01:e8:65:a9:
a4:e0:7f:03:d5:96:eb:61:af:21:bc:35:89:38:5b:60:fd:d4:
48:27:c1:77:80:04:4d:f9:af:00:56:81:de:50:8a:f2:d4:bb:
c7:d0:b1:aa:b5:9f:64:36:0f:c7:b4:15:8b:2f:d8:a6:5f:e7:
9d:82:fd:01:27:cb:5a:0b:11:c9:ff:50:1f:dc:02:bf:4d:c5:
d6:3c:cf:43:2f:2f:23:43:f4:c5:d5:1f:c9:a3:93:0d:3d:93:
7a:d6:7e:42:66:a1:f7:c4:4e:1b:d8:9f:45:f2:e0:41:fc:b5:
b1:ea:ac:72:24:26:36:60:5c:3c:26:22:74:06:a4:9c:68:24:
c8:f5:de:6a:f2:2d:56:0c:a6:f4:a9:75:29:99:7d:6f:b0:7c:
a7:cd:b8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 13:38:25 2024 by rpki-client on console-fra.rpki-client.org