Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A06769E2077711EF80948648017001B1.roa
File: A06769E2077711EF80948648017001B1.roa (raw, json)
Hash identifier: zn7vTzCxQyOnyOuXKk5tGBf+YOnQw7GGXg00NPh2oXM=
Subject key identifier: 39:52:CA:55:99:64:CB:5C:CF:4C:24:2B:B0:41:BA:F0:23:B0:70:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B334
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A06769E2077711EF80948648017001B1.roa
Signing time: Wed 01 May 2024 04:59:44 +0000
ROA not before: Wed 01 May 2024 04:59:41 +0000
ROA not after: Sat 11 May 2024 04:59:41 +0000
asID: 142062
IP address blocks: 154.206.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45876 (0xb334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 04:59:41 2024 GMT
Not After : May 11 04:59:41 2024 GMT
Subject: CN=6631cc40-0e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:ef:5f:e6:51:20:24:53:91:70:51:e7:b3:
b6:69:69:37:66:86:1f:1d:28:4b:3e:e0:9b:53:88:
1e:52:6f:91:d4:69:c6:cf:62:10:10:22:26:98:e9:
d3:46:cf:5a:db:6c:e0:e2:18:40:9d:73:2b:ac:6e:
7c:85:a6:07:fe:2d:de:33:9e:2c:31:f5:7d:43:56:
e2:c7:34:c9:29:21:bf:d9:ee:a1:e9:05:2d:df:3a:
6b:94:6d:77:ec:86:b5:ea:4d:56:7b:84:8d:5c:87:
4c:40:25:f5:8f:3a:91:b9:6c:90:92:aa:31:9e:29:
d9:20:ce:67:c9:30:e2:00:63:f6:ba:48:3b:64:06:
d4:6e:a5:71:51:4a:49:b2:77:32:1a:97:60:ad:68:
41:1b:03:49:94:b1:13:3e:c6:eb:44:16:e1:5d:60:
dd:f6:1f:42:6b:00:82:f1:60:f3:07:6e:91:4f:6c:
0a:5d:b1:0f:b4:ed:1d:94:8f:d4:d5:60:03:4e:57:
15:34:3c:ea:0d:8a:7d:ac:f9:ae:2e:b3:f2:08:f8:
e5:b7:1d:22:20:95:6b:8b:29:b4:27:63:b2:fe:c0:
2a:f9:60:46:a0:66:76:07:37:18:77:9d:9a:5b:41:
06:77:e8:e5:97:44:f7:2a:fe:5b:c4:0b:d9:bb:46:
89:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:52:CA:55:99:64:CB:5C:CF:4C:24:2B:B0:41:BA:F0:23:B0:70:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A06769E2077711EF80948648017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.228.0/24
Signature Algorithm: sha256WithRSAEncryption
22:bb:f0:cd:9d:70:b6:00:18:a7:46:36:67:4e:0e:ff:dc:dc:
47:80:be:03:c2:7a:66:39:8e:f4:95:60:2c:5b:50:71:c4:20:
c1:42:47:2a:56:35:11:d0:f1:bc:6c:97:bf:33:6c:f7:3b:52:
e0:27:ba:0b:12:8b:cc:d5:34:54:92:ce:a5:07:11:ec:23:71:
ef:d4:af:42:66:b5:8b:ef:bd:67:17:70:cd:cf:bc:c1:9d:34:
7f:8a:39:cc:70:8b:0f:03:c2:ed:27:cb:83:0b:f3:12:fb:a5:
75:ae:d7:1e:51:1a:97:8f:f0:2a:c7:30:a5:75:20:6c:d3:03:
40:82:4c:e1:4f:44:ce:55:d4:08:fc:27:f3:cb:a8:c1:8c:c2:
3f:01:13:07:11:63:69:2d:ae:8e:26:5b:17:94:0c:7f:ac:50:
88:22:79:2f:1c:d6:47:d6:44:62:c9:69:ff:6f:82:c1:b1:3d:
c6:bc:cb:f4:fb:51:97:7a:53:3c:96:44:4a:b2:70:7a:c4:a5:
4a:23:09:38:27:f6:4d:25:e7:59:cd:76:5c:63:b3:66:5d:10:
9a:d4:d3:fb:a5:25:ec:44:1e:26:70:5a:4d:26:4d:4c:47:90:
33:0d:c5:97:69:4d:36:65:d7:68:5e:b8:f2:50:fa:a9:cc:40:
be:bc:09:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:21 2024 by rpki-client on console-ams.rpki-client.org