Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2FC1A00077611EFBE720643017001B1.roa
File: F2FC1A00077611EFBE720643017001B1.roa (raw, json)
Hash identifier: 78g7xhtUBuL75KVOjAlRbwsPREyoovKvJlnBMBfxfu8=
Subject key identifier: 62:B5:C1:7B:3C:06:6C:A6:F7:DB:F3:61:93:8C:A7:50:E0:2E:53:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B32E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2FC1A00077611EFBE720643017001B1.roa
Signing time: Wed 01 May 2024 04:54:54 +0000
ROA not before: Wed 01 May 2024 04:54:50 +0000
ROA not after: Sat 11 May 2024 04:54:50 +0000
asID: 142062
IP address blocks: 154.206.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45870 (0xb32e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 04:54:50 2024 GMT
Not After : May 11 04:54:50 2024 GMT
Subject: CN=6631cb1d-bad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:62:c1:1c:24:df:e1:85:14:42:46:9f:fd:
21:5e:2b:73:0f:c9:62:06:1e:b3:b0:94:26:9a:b2:
2f:c0:d0:3b:e3:f0:cc:d4:e6:66:73:65:82:3c:05:
d4:f3:32:d0:c2:bf:ca:47:08:c4:dd:b3:21:fd:f8:
de:84:89:f3:00:43:b6:37:82:c7:0e:9d:02:d7:28:
cf:41:c2:27:90:05:ad:78:e4:48:9a:66:76:2b:37:
df:96:e7:a3:d6:85:d9:57:ec:c4:c8:30:53:de:df:
af:77:93:e6:f0:20:b0:5e:1a:6a:2f:40:e7:81:0c:
07:f6:27:99:8f:06:f6:47:9d:53:9b:59:8c:23:1c:
43:38:20:bf:85:c2:dc:b6:5b:c1:da:dc:02:0b:f1:
62:f5:d7:0f:e0:e8:ba:e1:38:e5:c1:14:dd:4a:9b:
14:7f:74:62:60:3e:32:1c:b7:05:6c:83:42:85:6c:
33:7d:6f:ee:19:81:81:78:18:f4:50:29:98:37:04:
51:24:b6:0b:bc:6d:d6:48:8f:cd:25:b6:c6:e8:a5:
1b:1f:22:73:1d:d8:76:a2:12:af:81:39:f3:4d:fd:
0a:16:8f:bd:71:01:81:88:20:9f:53:86:c0:68:96:
78:b5:0e:c7:14:04:52:46:25:ff:e1:64:a4:21:c2:
23:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B5:C1:7B:3C:06:6C:A6:F7:DB:F3:61:93:8C:A7:50:E0:2E:53:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2FC1A00077611EFBE720643017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.222.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:d9:36:26:18:c4:08:27:1b:6b:5d:a7:26:60:f7:0e:6e:22:
63:11:d9:7f:71:3c:68:cf:1b:f6:0e:da:f5:72:c0:03:25:7e:
a6:bf:37:5a:7a:ad:89:ba:a9:32:ce:cf:b1:a0:b4:b1:a8:e1:
d2:2b:b5:31:f1:03:0d:3d:64:e6:d9:af:b6:1f:d3:99:4d:65:
26:e4:6e:64:4e:96:9d:12:4b:4b:e6:ab:45:0c:99:ad:f9:9c:
66:99:c5:2e:dd:45:16:6a:7c:8a:94:a1:64:dc:c2:42:d0:4a:
f2:a8:e1:c6:32:75:93:97:3b:e9:4c:03:01:73:b6:49:b1:e0:
7a:da:5c:5f:5d:81:14:7e:dc:2d:1c:07:2a:40:37:01:87:9b:
09:b4:a3:66:ec:d2:a0:b3:a8:96:c1:e5:16:43:e1:e9:3c:a7:
1b:e3:89:92:99:d2:38:35:f4:ae:27:6a:f7:d1:9f:f1:a0:61:
24:d9:f6:ab:8b:1c:e2:74:21:76:6e:a7:ff:bb:fa:b5:a2:de:
52:ec:4d:45:d7:03:c3:7d:df:eb:31:32:6f:0a:be:08:e5:71:
1c:ba:79:d1:16:2a:43:55:df:9c:ae:e7:0a:af:7f:fd:f0:db:
25:61:57:f2:50:ba:01:4f:0d:f2:6a:b6:50:3f:32:d5:3b:3d:
04:80:45:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:49 2024 by rpki-client on console-fra.rpki-client.org