Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54434D7C077411EFB7ECAA2D017001B1.roa
File: 54434D7C077411EFB7ECAA2D017001B1.roa (raw, json)
Hash identifier: BOwkdsHMCnRAT3VWjC5EqEQPRsvXcg6Sg44qsbphqFI=
Subject key identifier: EC:F5:AF:B0:1D:EC:BE:80:A6:0D:B1:5F:94:39:5F:F3:FE:CD:F8:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B316
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54434D7C077411EFB7ECAA2D017001B1.roa
Signing time: Wed 01 May 2024 04:36:08 +0000
ROA not before: Wed 01 May 2024 04:36:04 +0000
ROA not after: Sat 11 May 2024 04:36:04 +0000
asID: 142062
IP address blocks: 154.206.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45846 (0xb316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 04:36:04 2024 GMT
Not After : May 11 04:36:04 2024 GMT
Subject: CN=6631c6b8-4322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:79:dc:73:1e:ed:20:b4:35:98:74:55:37:
85:4a:ff:a2:f4:10:99:86:5d:d7:18:f8:18:05:5a:
97:9d:c0:75:ec:08:cf:1e:35:bc:28:c0:ce:cb:30:
72:45:5f:90:4e:04:9b:29:3d:91:9a:dd:6d:00:8a:
1d:63:3c:9b:f4:b1:e9:08:0c:df:0a:00:bd:e1:51:
c5:cf:a6:be:a7:4d:9a:09:2b:56:e4:dd:21:51:13:
93:7a:6b:81:bd:40:7d:96:74:c0:4f:e9:39:83:fb:
a9:38:b8:cd:15:30:6b:5c:fc:2a:9e:17:90:a5:1a:
f6:f4:1e:c2:36:ba:c2:c4:19:29:97:85:b8:5b:0e:
b5:f5:b3:7c:6c:56:21:18:fc:77:d9:90:37:fa:4d:
15:7c:a5:0c:40:b9:2f:76:ed:b1:a3:15:17:db:62:
52:f0:2d:4a:4a:08:f6:bd:b4:df:0b:cb:17:6b:38:
ee:e5:63:2f:c7:ac:28:ed:32:4d:eb:5f:83:c8:cc:
f2:cc:29:4c:73:3e:af:ac:38:db:15:60:3c:e0:a6:
7e:53:8e:97:bf:86:ac:97:ba:eb:28:d8:4b:93:22:
43:09:a0:e5:f3:da:03:c1:b7:bd:f1:9d:36:40:56:
d4:df:5b:7f:19:4a:46:64:09:a5:74:87:fe:8b:c9:
eb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F5:AF:B0:1D:EC:BE:80:A6:0D:B1:5F:94:39:5F:F3:FE:CD:F8:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54434D7C077411EFB7ECAA2D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.208.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:32:6e:ab:ca:7c:8b:76:04:66:2e:45:37:87:4f:94:59:f8:
e3:86:fa:a4:b8:e8:05:ac:32:f5:a4:9e:6a:ec:91:7b:af:1e:
7c:74:14:73:9c:17:f3:76:8f:9d:79:31:a3:09:58:ce:3f:b9:
e8:0d:e8:63:e3:bd:ec:1e:5c:88:d9:6e:c1:e3:40:7d:b6:d3:
9e:61:02:a9:7c:19:86:37:a2:81:92:f6:e6:9b:56:ca:a8:ee:
72:59:56:8a:fc:47:ae:48:66:5d:27:bd:e8:9a:1a:44:98:11:
51:ec:d2:9d:29:8b:d0:ec:50:25:41:fd:c2:56:34:bf:7d:35:
24:ce:2d:77:ed:55:c1:f2:00:4f:fe:54:7e:0e:e9:aa:db:d5:
a8:e8:7a:b4:a4:19:4b:3c:d5:f7:d4:78:e6:95:8d:53:fe:de:
bf:ea:8c:8c:f6:42:82:6c:e6:69:65:ef:a4:da:57:8c:2e:04:
37:e2:93:d8:3c:a1:b2:f6:16:33:1f:77:ab:c0:5a:b3:63:5e:
3b:01:e9:5c:fc:c1:0d:71:c9:a3:5d:3a:06:07:d7:43:24:52:
7d:19:73:fc:2a:2e:7e:63:bb:3a:8e:3a:10:36:c3:f0:f6:10:
5f:e5:6f:88:f4:46:58:aa:e8:18:d2:e6:80:53:1c:bd:1f:d8:
3c:36:c3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:20 2024 by rpki-client on console-ams.rpki-client.org