Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD6E697E07AB11EFAD9BA56C017001B1.roa
File: DD6E697E07AB11EFAD9BA56C017001B1.roa (raw, json)
Hash identifier: q+FQVvXi7DmS3mALO+SbftJnQyrzvbe4AONhyFzQl2I=
Subject key identifier: A0:C0:1B:F4:EE:31:C2:62:53:A7:77:FB:DA:B8:2F:FB:86:DF:F0:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B378
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD6E697E07AB11EFAD9BA56C017001B1.roa
Signing time: Wed 01 May 2024 11:13:41 +0000
ROA not before: Wed 01 May 2024 11:13:37 +0000
ROA not after: Sat 11 May 2024 11:13:37 +0000
asID: 142062
IP address blocks: 154.206.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45944 (0xb378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:13:37 2024 GMT
Not After : May 11 11:13:37 2024 GMT
Subject: CN=663223e5-ce0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9c:43:c4:bb:28:9c:66:db:d0:8a:e7:1c:2a:
d7:f6:40:97:9b:1b:c4:44:3b:44:f3:9b:c0:e4:38:
84:3e:29:01:49:f6:1a:d0:65:75:29:5d:10:4d:9a:
6a:21:9c:25:70:d8:32:b3:2a:9b:cd:46:65:a3:2b:
6f:c6:40:dd:36:e6:73:a2:26:ee:13:2d:39:38:20:
fd:01:6e:57:3e:2d:e0:48:50:5b:b2:0d:fc:8a:08:
72:21:f6:a3:c0:b7:22:36:5b:11:3f:fd:45:81:47:
b3:72:20:38:64:c8:da:32:a2:96:ec:58:44:db:64:
42:94:65:f3:88:40:ad:85:30:9b:ec:38:74:3f:a4:
07:e5:0f:bb:8d:85:76:21:ac:f8:b3:b9:ff:c0:13:
76:ce:f9:e8:75:74:2a:af:14:d2:45:80:5d:8a:dd:
a0:d3:53:ff:93:7f:4b:cd:5a:49:48:5b:cb:90:58:
c9:2d:7a:6d:d5:44:41:9e:59:78:4a:34:b7:2e:2a:
f1:84:14:05:c7:22:4a:de:46:93:b8:af:37:63:27:
a2:fd:df:bb:6b:98:52:00:16:8c:97:af:7b:50:46:
9a:42:5e:23:0f:85:a3:74:b8:62:ad:27:9c:15:59:
4e:b7:75:9a:08:6b:23:6d:3a:17:25:50:16:0e:c5:
6a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C0:1B:F4:EE:31:C2:62:53:A7:77:FB:DA:B8:2F:FB:86:DF:F0:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD6E697E07AB11EFAD9BA56C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.195.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:87:b3:99:ae:b4:f7:67:63:8e:65:dc:5d:2d:a3:ca:47:99:
ba:b5:2c:f6:53:41:87:67:52:d7:6b:42:5d:2a:40:93:6d:fc:
9d:a2:92:d8:7d:a6:26:e1:f8:95:8d:17:43:21:e6:a0:2d:4a:
78:fe:52:60:b4:52:92:e1:40:f5:dd:1c:96:6d:a5:c5:0a:29:
4f:59:26:cf:ab:17:d5:e4:a4:7d:56:5b:ce:c5:c8:30:99:90:
7b:bc:ab:6a:d7:d8:a7:86:b3:03:df:b5:83:00:34:2a:86:35:
49:23:4c:2b:af:3a:f1:b6:0d:0d:41:bd:c2:94:35:09:d8:d8:
ed:7e:02:fc:ff:6b:e0:88:34:60:67:c1:d9:5a:0b:a8:55:38:
f9:48:e9:a2:6b:73:e0:de:d1:2e:0b:39:a1:d0:e7:20:9c:a5:
63:b6:36:1f:43:e2:82:d1:53:6a:54:36:07:a2:e6:23:ec:de:
70:ab:56:3e:86:cb:75:5a:11:55:7d:67:33:f3:47:84:50:37:
c5:2b:00:0f:9d:7e:09:f7:9a:bb:57:a5:6d:50:95:86:e9:be:
a4:03:f9:fd:c6:3d:8b:e2:d9:e8:87:62:a5:ee:dd:06:9f:ca:
93:fc:e2:88:b3:0d:2b:be:9e:8a:be:d4:64:83:6f:4d:cc:05:
e1:e6:cc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:36:22 2024 by rpki-client on console-ams.rpki-client.org