Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9EFC026077311EF95EB3A28017001B1.roa
File: A9EFC026077311EF95EB3A28017001B1.roa (raw, json)
Hash identifier: er/KKN0aL/3wa2PZbhKSa/KQJGbbu31znW5IgPRS2Ww=
Subject key identifier: 75:82:DB:AB:17:04:2C:C7:DD:3E:F1:7E:7B:E2:F0:11:F6:D8:47:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B310
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9EFC026077311EF95EB3A28017001B1.roa
Signing time: Wed 01 May 2024 04:31:23 +0000
ROA not before: Wed 01 May 2024 04:31:19 +0000
ROA not after: Sat 11 May 2024 04:31:19 +0000
asID: 142062
IP address blocks: 154.206.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45840 (0xb310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 04:31:19 2024 GMT
Not After : May 11 04:31:19 2024 GMT
Subject: CN=6631c59a-5981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c3:7a:a6:8d:f2:e6:d5:cb:9a:68:0a:03:fa:
b3:75:97:46:2c:50:98:03:5d:f4:dd:10:97:26:b0:
6e:dc:e9:c9:8b:66:b9:93:5b:e8:b7:2c:ea:c1:58:
01:26:84:a4:10:9f:f8:7c:ed:86:d3:f6:49:41:60:
aa:a6:c7:2e:35:3f:62:e1:fa:fa:14:b5:89:b5:0a:
ac:be:4c:34:dd:27:05:dd:ba:19:5a:49:ba:f7:0e:
ce:b0:19:5f:92:c4:ab:6e:06:e0:84:96:72:31:dd:
6e:e8:3c:26:3c:f9:52:0f:a4:50:4d:71:19:65:2e:
9e:9a:e4:dc:de:a9:24:c0:65:b0:ab:bf:2d:d9:59:
73:5f:7e:aa:fe:9a:10:31:00:e4:f3:4a:fc:58:a5:
e2:06:02:8f:e1:19:34:96:48:e2:49:17:37:94:67:
77:6e:f2:09:54:46:e9:11:7e:27:57:18:7f:4b:56:
fb:81:30:c4:ee:68:10:18:8f:1f:a9:cb:60:9d:5e:
80:9b:67:c7:01:cb:e6:8f:11:2e:de:b6:7c:4b:41:
74:be:4f:39:5c:d9:1c:2d:e1:13:80:4b:2f:63:d4:
7f:2a:4b:24:27:e2:a1:9a:f7:b6:bc:b5:2d:d3:24:
e2:46:12:26:f2:b0:be:b2:eb:87:2f:c9:d6:64:1e:
7f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:82:DB:AB:17:04:2C:C7:DD:3E:F1:7E:7B:E2:F0:11:F6:D8:47:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9EFC026077311EF95EB3A28017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.207.0/24
Signature Algorithm: sha256WithRSAEncryption
74:57:15:ff:e9:6c:0d:cc:15:46:12:18:c4:57:ce:c6:ad:1a:
9d:09:3f:6d:89:08:71:cb:45:bc:81:b3:d8:51:e8:30:3d:5a:
1c:29:3f:c6:d4:48:6f:37:7d:ec:dc:49:e0:e9:6c:c2:1d:5a:
42:60:8c:8a:17:30:8b:d9:90:1d:75:19:4f:4a:25:c9:77:4e:
00:39:8f:f1:0c:85:50:7f:03:f7:7b:d7:5f:08:25:1b:65:8e:
d9:3a:a7:67:ab:5d:db:c9:4e:b1:5e:2f:0e:1f:1b:38:02:5a:
7e:9d:0a:98:29:dd:de:b1:f7:97:1c:4b:18:8b:54:99:8f:ca:
37:d8:a6:b7:42:d4:31:f4:33:9a:7f:f5:d0:8b:d7:31:d5:51:
56:2c:99:67:82:00:44:f5:60:89:58:dc:7a:38:44:27:88:88:
e7:57:f1:57:07:b4:7f:3f:b0:e1:3c:21:bd:91:b0:3c:22:19:
57:52:2c:ba:76:b8:3b:ce:6a:d4:0a:95:45:53:1d:03:a9:92:
8f:77:b4:1c:3a:25:84:ed:8c:cb:a6:b9:ac:db:d9:c7:40:76:
c8:f4:4a:3e:2b:3c:15:d4:cd:83:b9:fb:17:bd:5b:46:bc:f0:
6c:b5:f6:c6:72:b1:ad:f6:0d:d9:cd:ef:cb:f5:1d:59:d9:bb:
48:b8:41:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:48 2024 by rpki-client on console-fra.rpki-client.org