Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA414D8606D311EF90D24E0D017001B1.roa
File: CA414D8606D311EF90D24E0D017001B1.roa (raw, json)
Hash identifier: ay0QIgrYdUtJhopxkZ+08HHoRMd+mUf5IMZXEw2djFo=
Subject key identifier: F2:A8:3C:8E:8F:62:CA:24:45:E0:C8:78:C7:96:93:4E:4F:F4:48:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B2C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA414D8606D311EF90D24E0D017001B1.roa
Signing time: Tue 30 Apr 2024 09:26:57 +0000
ROA not before: Tue 30 Apr 2024 09:26:54 +0000
ROA not after: Fri 10 May 2024 09:26:54 +0000
asID: 137443
IP address blocks: 154.218.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45763 (0xb2c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 09:26:54 2024 GMT
Not After : May 10 09:26:54 2024 GMT
Subject: CN=6630b961-7e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:da:9f:b2:c1:66:ed:f1:f0:98:2e:b5:77:cd:
96:79:f9:42:8b:ca:c8:4f:d4:ec:78:b9:ba:8f:ce:
6b:61:36:fc:03:e3:cc:6f:74:7e:b5:63:dc:d7:e6:
25:cc:3c:3b:ab:fa:3b:ff:20:9f:8f:e4:c4:f3:ea:
ce:cc:40:1d:b4:b0:0f:3a:b5:80:fc:ee:ef:f9:a6:
fc:09:41:44:1a:0b:7d:5d:b1:3f:98:75:fb:2d:fb:
cb:1d:2a:45:7b:3b:57:44:e8:98:30:1a:8c:ec:b1:
0e:aa:a1:e5:6e:80:12:1a:dc:40:7b:f9:74:90:17:
12:9a:eb:b3:50:de:b0:b0:86:70:42:63:95:29:e3:
8a:ce:74:20:75:a4:e8:59:e6:7e:70:bb:70:54:42:
f7:b4:3f:90:9a:82:a5:80:72:a7:66:4e:ca:1b:bb:
f4:15:74:58:f3:07:d8:d8:e6:ed:c3:b9:56:f6:4b:
82:4b:f4:33:a4:71:e6:e6:a7:52:89:b0:78:25:44:
76:8f:6c:12:aa:41:3b:c3:d9:2b:22:48:9a:0b:6b:
3b:74:88:e9:02:7d:c2:be:6a:2b:b4:0b:73:6d:77:
e2:e9:3c:09:fc:df:69:d1:31:e7:6a:6a:3d:18:42:
df:97:f2:71:4b:46:57:75:a3:ae:05:42:8c:df:23:
3d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A8:3C:8E:8F:62:CA:24:45:E0:C8:78:C7:96:93:4E:4F:F4:48:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA414D8606D311EF90D24E0D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.6.0/24
Signature Algorithm: sha256WithRSAEncryption
70:70:fb:8a:ad:cc:5e:63:71:cd:df:e6:5c:a4:67:5e:37:ee:
19:e8:f0:de:94:f9:f9:a5:7b:84:9e:5a:8a:a2:0b:74:41:97:
71:21:a4:bc:df:8b:30:d4:72:09:c9:a7:c1:3a:ba:41:32:d2:
83:e8:f4:df:28:87:c2:c3:0a:91:3f:e7:6b:58:be:ab:55:7c:
31:9a:de:3a:0b:e1:f6:29:e5:f2:61:8d:2a:db:1c:35:e9:e3:
51:3c:1c:37:7d:68:41:47:74:5b:38:18:3f:8c:1f:ce:9b:64:
32:ca:41:03:61:b9:3a:68:61:d4:67:eb:72:3a:1a:71:56:31:
3a:2b:c2:76:8a:bd:e7:2f:d7:85:4d:c5:0a:4a:f9:49:9f:1b:
ec:af:6e:a8:7b:99:36:5a:0d:3d:75:a3:ea:58:7f:9e:0f:a7:
d9:62:9a:0b:8a:de:41:cf:cc:26:1c:92:ed:8c:8d:f7:ba:d0:
43:55:6a:6b:38:80:1a:85:db:ad:fc:9e:11:71:b4:f6:b7:4b:
35:46:56:39:01:0d:ee:f1:6b:68:3c:60:45:aa:fc:2d:c6:d4:
3a:5c:15:f9:b6:b6:ec:9b:f5:b8:47:fd:f3:21:6f:ad:1b:2a:
d9:20:12:5d:29:49:c3:f5:8c:f1:31:a8:26:48:f6:9e:c0:b7:
a3:67:33:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 13:38:25 2024 by rpki-client on console-fra.rpki-client.org