Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77F75D56077611EFB256683E017001B1.roa
File: 77F75D56077611EFB256683E017001B1.roa (raw, json)
Hash identifier: eHi74qNQAcr9SK514bRfOqUzVck2CMsTGtel7oju/CQ=
Subject key identifier: 6B:98:72:FA:A6:14:10:69:B2:78:C9:D3:1C:31:A3:4A:70:BC:E3:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B32A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77F75D56077611EFB256683E017001B1.roa
Signing time: Wed 01 May 2024 04:51:27 +0000
ROA not before: Wed 01 May 2024 04:51:24 +0000
ROA not after: Sat 11 May 2024 04:51:24 +0000
asID: 142062
IP address blocks: 154.206.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45866 (0xb32a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 04:51:24 2024 GMT
Not After : May 11 04:51:24 2024 GMT
Subject: CN=6631ca4f-88bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9c:51:80:80:14:29:e6:cf:06:b5:3a:5a:3e:
bd:dc:de:fa:64:50:74:4f:5b:ce:93:55:0f:6e:b6:
8d:98:4a:be:e8:fc:d2:f4:cb:37:28:95:6a:a2:74:
cd:dc:f4:bc:0e:71:39:38:80:ad:b5:8a:10:ad:ca:
8a:59:07:17:f1:94:df:95:5c:dd:e5:42:3c:75:fa:
14:82:12:ff:d7:22:e4:3b:38:65:fb:c2:f7:7d:99:
ad:2f:b7:0a:c4:aa:e4:11:8d:ae:76:c9:b4:a3:f6:
1f:91:fd:7f:0a:47:22:b2:b9:d7:5f:4a:82:06:4c:
e1:7e:85:91:bb:ef:93:87:96:93:1c:b6:db:fc:29:
49:eb:e2:88:15:ba:11:b2:41:88:fe:34:b8:4d:99:
24:b0:f8:b8:db:b9:6d:8f:54:c8:91:4b:c9:66:52:
b8:55:65:7f:4e:53:94:ef:3e:6c:b7:ee:59:c2:53:
b0:f5:64:46:06:c1:e2:3f:27:9a:72:7d:1d:64:51:
94:02:55:c4:ce:18:ed:d4:6b:a1:57:30:7b:25:dc:
79:f7:b8:b1:c0:5f:0c:17:08:b7:16:83:74:7d:95:
d8:59:ee:20:bd:a7:5a:41:ef:a9:16:67:ff:6f:1e:
81:8a:c7:6f:84:f5:ec:77:96:22:41:76:90:da:54:
24:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:98:72:FA:A6:14:10:69:B2:78:C9:D3:1C:31:A3:4A:70:BC:E3:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77F75D56077611EFB256683E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.220.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:58:7a:b2:77:48:c8:5c:0e:12:07:1f:8e:2b:ab:64:1f:46:
91:b5:23:71:3b:bd:d9:72:e9:99:39:bc:61:00:40:d2:5d:be:
b9:90:53:81:bb:ba:6f:6e:0a:b5:65:24:82:93:7c:a3:75:41:
aa:fe:cf:36:a4:4e:49:5c:2d:69:7d:52:a9:1e:64:c0:c4:2d:
6f:fc:cc:a6:61:e6:30:53:57:19:fb:d7:b5:fd:2b:9c:79:ac:
5b:a2:c2:96:6d:d5:2c:aa:62:20:f0:ea:c9:3f:fc:07:45:02:
6a:a8:e8:0d:8d:e8:8f:10:45:7d:d7:ce:ce:8f:e6:93:91:26:
68:70:90:dd:bc:c1:b0:8d:9f:0a:e7:98:45:dd:c3:38:6b:07:
06:d0:2d:e0:a9:56:03:89:6f:89:74:3e:6a:76:89:60:cc:49:
53:c5:fe:d3:00:14:08:ec:8c:e3:e1:53:04:81:d8:f5:24:e6:
ae:43:bd:55:5c:5a:ec:ac:89:a9:e3:18:60:0b:4d:98:e9:87:
c7:2e:5c:82:21:15:2e:cd:77:5b:dd:4f:ac:ce:7a:d9:f2:2d:
37:0e:d4:1f:61:70:3c:51:ac:91:9d:83:7c:31:05:1b:25:5e:
aa:c5:90:db:3c:6b:57:88:b3:34:f5:83:69:7a:b1:59:2a:4f:
40:bc:47:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:47 2024 by rpki-client on console-fra.rpki-client.org