Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5264A8B607AB11EFB1EF7467017001B1.roa
File: 5264A8B607AB11EFB1EF7467017001B1.roa (raw, json)
Hash identifier: 8/mWZvWKsX55Vf3lcAhceGtPSQzM9XSWW9CTtRWFkCQ=
Subject key identifier: C0:EB:9F:21:30:71:A5:01:BE:60:32:01:17:52:D7:59:A4:F7:96:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B370
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5264A8B607AB11EFB1EF7467017001B1.roa
Signing time: Wed 01 May 2024 11:09:47 +0000
ROA not before: Wed 01 May 2024 11:09:44 +0000
ROA not after: Sat 11 May 2024 11:09:44 +0000
asID: 142062
IP address blocks: 154.206.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45936 (0xb370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:09:44 2024 GMT
Not After : May 11 11:09:44 2024 GMT
Subject: CN=663222fb-f064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:af:c6:ac:59:75:96:3a:75:1e:65:d1:b3:6f:
47:7c:8a:5d:c9:b4:02:52:0b:cd:8a:21:bc:0e:41:
b4:63:b5:7d:82:d2:d1:fb:5a:f4:97:74:85:da:eb:
54:ef:fe:25:3a:2e:47:18:9f:ed:79:6c:9e:12:0f:
10:48:4f:33:a7:ab:69:2c:e9:de:f0:ad:aa:a5:df:
9a:cd:9d:56:73:7b:f0:25:31:3f:a6:d8:0a:a4:1d:
5b:6a:54:27:a5:58:73:fa:3c:44:c6:1b:9a:ce:b9:
a6:c3:76:0b:60:36:88:65:bf:fe:58:ed:4d:dd:3c:
8f:d1:54:57:80:aa:c1:46:56:84:5d:21:e3:b0:43:
2f:0b:d1:3e:ba:54:3f:d1:e0:da:56:78:7f:9a:7b:
d9:69:b5:56:57:84:27:25:93:ff:0a:41:4b:4a:a4:
78:07:61:78:19:93:16:9a:3b:c8:57:ab:86:54:b9:
0f:c0:c0:71:93:5d:d3:b3:7c:52:29:a7:ad:9b:ce:
57:d5:88:93:e0:5c:02:a5:66:92:3c:03:ec:e2:42:
33:c9:b6:fe:60:ac:25:01:d9:55:d3:5c:c4:79:8e:
ee:58:90:7d:a3:bc:4b:03:9b:c8:d6:8e:cd:2f:a3:
d9:19:f1:92:51:06:77:4e:92:21:03:d7:b8:bb:14:
11:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EB:9F:21:30:71:A5:01:BE:60:32:01:17:52:D7:59:A4:F7:96:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5264A8B607AB11EFB1EF7467017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.192.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e7:a1:09:b9:c7:bf:06:a0:b7:de:a3:80:ee:75:20:de:32:
7a:65:46:60:e8:b9:da:51:7f:29:96:4c:db:a3:0a:8d:9c:06:
d0:e8:e2:ac:0f:8b:11:2b:23:87:00:31:97:72:6a:4f:d4:90:
eb:4d:29:49:bf:66:83:2c:94:d8:c2:ca:40:6b:f6:0b:70:13:
d3:5b:f2:05:1b:7c:eb:7b:e7:2b:b0:07:6b:5d:91:5f:9b:bc:
b2:bd:e0:68:01:af:06:d8:03:3d:d4:bb:33:42:43:42:60:92:
31:cd:62:6a:5c:5d:87:8a:90:4a:5f:16:dc:ed:aa:10:1e:ef:
d9:95:39:4d:37:d0:1b:e2:a6:a4:84:a3:1f:1b:96:bb:f4:30:
8f:31:b8:c3:b8:c6:90:7a:af:48:08:ee:34:1b:1b:e5:58:dc:
a7:86:c3:c4:f6:75:3e:3e:17:67:9d:91:a2:d3:bb:9d:d7:84:
fe:78:99:23:70:75:0b:03:e3:56:df:d9:f1:f3:db:6f:59:be:
2d:99:43:97:eb:fc:88:0d:4d:a6:f9:f6:6e:1d:bb:89:2e:00:
39:d4:1e:ce:1f:c1:c6:79:d4:9f:30:a7:20:f0:b4:d4:70:52:
80:3a:fc:7b:aa:76:26:13:0a:24:db:0c:47:5c:dc:61:b7:d5:
85:6a:06:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:47 2024 by rpki-client on console-fra.rpki-client.org