Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37014590077711EF809AFE43017001B1.roa
File: 37014590077711EF809AFE43017001B1.roa (raw, json)
Hash identifier: NSuOp/SW4D3aoZFTnc6oKfXTMAAl44PZk44ub91wlF0=
Subject key identifier: F9:DB:5F:0F:37:4D:7F:BB:82:CD:89:85:BA:79:94:CA:A9:8D:97:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B330
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37014590077711EF809AFE43017001B1.roa
Signing time: Wed 01 May 2024 04:56:48 +0000
ROA not before: Wed 01 May 2024 04:56:44 +0000
ROA not after: Sat 11 May 2024 04:56:44 +0000
asID: 142062
IP address blocks: 154.206.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45872 (0xb330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 04:56:44 2024 GMT
Not After : May 11 04:56:44 2024 GMT
Subject: CN=6631cb90-4f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:b9:e7:c6:70:af:b0:2e:bc:da:f6:74:b3:
f9:10:52:53:c0:a5:44:1e:a6:86:80:2a:19:a6:9d:
95:6e:08:2c:75:05:60:6c:78:29:9e:99:dc:46:5f:
4c:b8:f2:3a:6e:99:4f:3b:63:40:5f:fa:2e:3a:7b:
f1:fd:17:5e:17:af:7b:32:60:32:f8:37:79:8c:25:
a8:e8:66:c3:0e:77:86:4c:86:7f:c6:b7:df:ab:73:
6b:6c:8d:82:da:0a:52:36:47:d2:d4:95:f1:68:3a:
e2:39:12:fb:4d:3d:29:09:3b:a1:8d:63:8d:1b:c2:
3e:81:df:30:cf:90:a9:3d:ee:4d:06:89:76:2d:4b:
ab:5f:44:d2:c1:32:81:fd:cd:72:87:10:ca:cc:ac:
2f:0f:91:f3:eb:89:53:8e:eb:5c:46:2b:2c:69:79:
f4:0c:de:95:d4:31:7e:6d:b3:1d:4c:33:bb:31:8f:
25:fc:ab:21:8d:4e:9e:2d:19:8b:93:7e:7d:7a:ec:
8a:29:b4:59:21:8c:88:5b:a9:dd:37:eb:ac:1f:93:
7d:79:98:28:89:f3:fc:9c:0c:ff:6d:fb:88:65:82:
d6:0f:97:46:9d:02:96:3a:fe:c8:82:72:09:92:8a:
c6:34:4e:85:04:ea:25:a4:d3:bd:8f:e8:08:a0:b0:
ef:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DB:5F:0F:37:4D:7F:BB:82:CD:89:85:BA:79:94:CA:A9:8D:97:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37014590077711EF809AFE43017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.226.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:23:39:9d:93:93:67:0a:4b:6e:53:af:b5:a0:74:f9:da:11:
c2:08:36:8b:64:dc:59:b1:a0:75:6f:62:bc:a8:94:a1:94:27:
a0:0f:03:dd:1f:f5:0e:e3:55:6c:bb:ba:b4:dc:8e:ec:6a:12:
ef:af:3f:55:4e:1f:9f:79:65:58:3c:65:2e:f2:04:0e:7e:82:
8b:dd:a7:8e:e4:cd:c0:76:35:5f:44:a6:f8:69:64:ec:ef:13:
7f:c3:61:d3:75:3c:54:59:e8:7d:a6:82:5d:48:61:9f:ed:e6:
a6:f8:b2:46:62:ca:ba:86:fc:ef:06:71:58:f5:6d:39:10:74:
cd:00:40:73:1b:84:d0:4c:95:9d:fb:e9:1e:18:11:18:cf:1b:
02:ad:c7:1b:a2:96:d4:84:ad:36:0a:53:c7:71:1d:ca:41:aa:
93:9c:48:2d:11:eb:c0:ea:92:0b:61:2a:61:34:27:0d:68:94:
ae:dc:84:25:de:49:93:52:b1:a2:4b:1a:5f:80:90:4b:c8:14:
74:d3:aa:11:0b:e9:c7:14:ac:f4:f9:3d:dc:b4:49:2f:1e:c7:
53:0b:c8:34:8d:4c:d8:bd:21:6a:51:0e:bd:aa:38:cb:57:81:
62:fd:57:39:b2:f3:a5:09:af:f8:0d:db:3b:ae:f7:cf:ee:74:
4b:30:67:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:20 2024 by rpki-client on console-ams.rpki-client.org