Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C3E7A98077711EF91AD0B48017001B1.roa
File: 6C3E7A98077711EF91AD0B48017001B1.roa (raw, json)
Hash identifier: 9D6eXhy8y8eTPHXdGGGPDSMMoNdwmLrYwFK73FR7cSU=
Subject key identifier: 83:27:3A:E8:5C:CE:A4:EA:3E:DC:21:DB:D8:37:02:6A:A3:2C:8F:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B332
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C3E7A98077711EF91AD0B48017001B1.roa
Signing time: Wed 01 May 2024 04:58:17 +0000
ROA not before: Wed 01 May 2024 04:58:14 +0000
ROA not after: Sat 11 May 2024 04:58:14 +0000
asID: 142062
IP address blocks: 154.206.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45874 (0xb332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 04:58:14 2024 GMT
Not After : May 11 04:58:14 2024 GMT
Subject: CN=6631cbe9-904d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:57:42:47:2a:8b:00:d9:41:b0:59:7e:73:
1a:40:4e:a6:9f:2e:55:2a:0b:0d:3a:72:2e:47:25:
c1:11:be:a3:4b:a2:62:46:1d:de:2b:aa:6a:ef:f9:
6e:27:9e:bb:99:41:7a:47:f6:24:01:bf:d0:b5:97:
1d:c8:fa:6b:e5:15:7e:ed:4a:d9:92:44:85:d9:d6:
e3:1e:28:83:f4:f7:5e:6e:99:e8:a4:40:ab:65:7d:
c5:28:15:4d:a8:d3:1a:06:c1:ac:6d:0c:7e:cf:d3:
b6:73:23:b3:4f:20:fb:40:a6:95:58:91:44:d8:51:
8f:b4:64:2a:72:d2:65:24:8b:72:85:f9:da:29:dc:
f5:24:7e:95:95:68:13:28:ef:6e:81:47:d2:91:69:
22:77:b2:b3:12:5e:90:5c:35:a6:71:fb:80:45:c3:
c9:93:47:11:dd:2d:e8:e6:a1:13:b3:b6:6e:ec:7b:
2f:53:40:1e:8f:82:74:41:2e:fb:09:a7:90:61:bb:
c8:6a:a1:5f:2c:65:5f:0c:7f:3c:45:1e:3d:53:45:
b4:6b:49:69:c5:40:82:7f:6a:d9:3a:82:d2:78:34:
02:3a:e2:20:f5:c6:f1:4f:74:29:8a:ef:58:ee:2c:
2b:49:5e:09:a6:6d:8f:cf:ff:9e:9a:e9:51:ba:37:
fe:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:27:3A:E8:5C:CE:A4:EA:3E:DC:21:DB:D8:37:02:6A:A3:2C:8F:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C3E7A98077711EF91AD0B48017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.227.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:7c:9c:b6:b7:ed:be:0a:ce:2f:a2:88:e4:64:37:42:58:3c:
f2:4b:26:2c:39:fe:bb:ba:58:f4:4e:07:37:e7:97:6b:ad:d3:
03:cb:42:bd:db:a2:77:80:60:de:90:b7:8e:30:5c:7c:99:13:
23:f4:ac:6f:06:a1:3f:ee:56:a6:d1:98:2e:53:58:19:3a:4d:
18:b3:e7:98:6d:b4:0b:ae:83:96:80:04:50:07:d9:a0:e8:ac:
87:df:40:65:d9:f1:8d:ef:25:ae:c3:e1:5a:db:23:d1:0b:16:
f4:0b:d8:40:6f:cb:63:0d:4e:38:c4:e2:b3:a5:60:63:91:36:
ef:2f:63:56:fd:8e:81:96:fb:6d:7e:f8:80:a1:68:e2:5d:31:
82:81:9f:e5:04:25:77:46:1f:fe:99:f0:4a:93:d5:1c:f7:d8:
d1:da:8d:e3:ae:8d:5d:5a:6e:f6:47:b4:7e:e4:9d:0a:81:5b:
c7:f0:8a:ce:73:e0:41:20:c6:b0:f1:14:7b:eb:ee:88:b8:aa:
08:60:1f:2f:be:3a:3b:b5:a9:e7:17:3b:d5:e4:0b:f8:8e:01:
6d:15:be:ed:02:39:66:14:65:79:3b:28:d1:6a:7a:f9:bd:97:
bf:df:56:d5:51:ca:c3:97:0e:41:63:61:e4:97:65:3d:79:7a:
19:1c:5f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:47 2024 by rpki-client on console-fra.rpki-client.org