Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9C55EE2077211EF8D760E22017001B1.roa
File: D9C55EE2077211EF8D760E22017001B1.roa (raw, json)
Hash identifier: Kg5tx0dTrQ/eTMmIUale8yfNxTmpZAxD7Vdfffqq6hw=
Subject key identifier: 3C:74:50:B9:46:67:F9:4B:98:5C:8C:80:86:17:B2:66:E0:05:C2:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B308
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9C55EE2077211EF8D760E22017001B1.roa
Signing time: Wed 01 May 2024 04:25:33 +0000
ROA not before: Wed 01 May 2024 04:25:30 +0000
ROA not after: Sat 11 May 2024 04:25:30 +0000
asID: 142062
IP address blocks: 154.206.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45832 (0xb308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 04:25:30 2024 GMT
Not After : May 11 04:25:30 2024 GMT
Subject: CN=6631c43d-7a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:92:05:a7:e9:5e:0c:5a:32:db:a0:34:bd:
4a:83:ef:db:41:64:f9:b6:dd:c9:d0:46:51:37:ea:
8d:6f:a3:75:e6:47:90:97:95:4b:bc:c6:05:f6:00:
95:17:ba:74:26:8a:87:c5:58:c6:9c:44:da:cc:58:
8d:ac:86:75:a7:da:4a:a6:d4:8b:99:09:df:5e:57:
9a:4f:18:42:69:0f:9e:ae:02:1c:29:7f:cd:e0:38:
c9:32:5b:13:37:b4:8a:67:6b:d5:38:b9:66:34:78:
2d:0e:e7:87:08:6f:d3:50:63:0b:9a:d0:dd:cb:ba:
af:55:9e:f2:b9:f0:30:3b:e1:42:43:13:b2:de:3d:
d2:a6:6d:e4:7f:d1:9c:19:ae:2c:ae:9f:80:be:ae:
9f:2a:67:ba:85:51:85:eb:9b:e1:52:47:4e:ce:9d:
87:b7:9d:99:07:cf:0d:b1:89:f8:5e:7e:38:89:59:
1e:db:16:e1:b0:40:ba:8d:34:d6:33:f8:03:64:48:
38:77:bf:5a:18:38:92:bf:d9:3f:58:b8:66:00:e3:
d8:ae:0e:e7:25:3e:df:e5:ed:27:1f:48:0c:43:0f:
46:a3:e6:7e:cc:34:9a:04:3b:fb:1c:12:d4:0a:d7:
eb:c0:01:20:f1:f0:2f:0f:8a:52:c4:ee:a3:b3:02:
d7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:74:50:B9:46:67:F9:4B:98:5C:8C:80:86:17:B2:66:E0:05:C2:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9C55EE2077211EF8D760E22017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.203.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:49:7c:e3:9c:3b:40:0c:25:51:52:25:af:e1:c4:23:ac:a6:
5d:3d:a1:d1:2d:12:67:b8:eb:72:8b:db:12:4f:59:cd:22:1d:
ad:83:9f:82:15:38:e2:dc:1f:85:3f:51:f4:c7:25:38:4d:34:
94:73:da:e0:d2:a3:49:32:b9:5a:6d:7c:88:7f:89:b7:2c:40:
53:ac:66:12:64:6f:99:cb:b4:4b:69:10:26:d5:0a:b5:96:e4:
6f:37:f5:f6:82:88:c7:26:4f:48:ca:aa:f5:64:0e:5f:bd:e7:
c8:c1:c0:32:e7:d3:23:04:40:db:25:f6:f7:59:5d:92:59:4a:
a0:97:82:f9:3e:2a:eb:3d:04:36:ed:07:45:2d:bd:f5:f2:3b:
ad:f5:86:33:20:c2:17:0e:08:5d:fc:12:f9:0a:2a:03:fa:bd:
e5:79:59:db:51:ac:ee:6a:a6:82:b8:c0:18:da:73:a4:35:de:
44:53:f1:7c:c7:8a:13:9a:42:83:be:cb:85:fe:b2:03:8d:3e:
80:d0:23:88:52:9a:52:88:65:4b:8f:29:d7:7d:5b:da:c3:93:
e9:fe:93:b0:2e:05:e6:8d:63:f9:38:6d:07:ad:d6:3f:a9:10:
fd:d7:91:04:10:e7:1b:c8:6d:d2:5f:ca:ff:1c:83:25:50:bd:
b0:73:f2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:48 2024 by rpki-client on console-fra.rpki-client.org