Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/006CCC469F9011EF952FFFB0762E951A.roa
File: 006CCC469F9011EF952FFFB0762E951A.roa (raw, json)
Hash identifier: IM/6V4+rLU7p0vzp7/mDKioIx014RFkmTYnMAb2+XkQ=
Subject key identifier: 58:5E:B1:E2:D4:C0:49:5B:50:B5:92:59:D6:51:5A:2F:1A:76:06:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010B70
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/006CCC469F9011EF952FFFB0762E951A.roa
Signing time: Sun 10 Nov 2024 18:17:10 +0000
ROA not before: Sun 10 Nov 2024 18:17:07 +0000
ROA not after: Thu 21 Nov 2024 18:17:07 +0000
asID: 44559
IP address blocks: 154.203.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68464 (0x10b70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 10 18:17:07 2024 GMT
Not After : Nov 21 18:17:07 2024 GMT
Subject: CN=6730f8a6-39cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:41:25:43:1a:c0:a2:61:a9:8a:4c:b0:77:
2a:0d:cf:0d:43:8e:3f:cf:db:46:56:57:23:4b:90:
31:9e:22:2c:14:00:d5:f5:93:43:5b:ca:8e:bf:dc:
00:57:84:62:3d:a9:68:d8:89:3c:f4:c5:0e:16:e4:
67:4e:da:e2:24:0a:57:4f:03:2e:a0:cd:7a:aa:25:
61:a5:1a:2e:17:04:ff:c6:69:b1:9c:3e:f5:f2:76:
67:c1:97:56:76:0e:2e:6d:7a:c1:a3:bb:1c:35:0d:
3a:5c:43:d2:f7:5a:08:0e:ce:56:ea:f5:b2:91:8c:
77:58:1d:e7:d0:4d:c6:76:88:e4:e1:14:1a:5c:d4:
17:4f:e5:a8:8a:04:c3:85:fc:79:19:a2:b7:a6:ea:
68:d7:e3:c9:a8:2d:a3:b1:57:73:7c:4f:06:60:1f:
42:61:35:4c:85:ad:eb:3b:87:f4:06:53:cd:14:0b:
b1:b3:f8:e6:88:c9:2c:12:32:d1:ef:f3:54:48:f9:
24:79:b5:f6:aa:cf:0d:1c:c9:8a:7c:51:42:08:1d:
3e:6c:eb:4c:58:cb:a7:eb:29:98:a2:6e:be:88:8a:
70:bf:af:11:31:79:a1:6c:c5:3c:bd:bf:5a:55:62:
db:60:fd:27:40:4e:d8:24:d6:02:8f:67:3a:b2:b1:
9a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5E:B1:E2:D4:C0:49:5B:50:B5:92:59:D6:51:5A:2F:1A:76:06:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/006CCC469F9011EF952FFFB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.248.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:c3:9b:cc:14:69:bd:ba:ab:bd:48:21:18:6a:b9:71:77:3d:
c2:e2:c2:4a:65:0b:6b:a1:67:68:20:0a:73:95:66:88:1c:44:
09:85:e0:b5:fc:aa:37:58:f3:64:9f:c2:c2:7a:bb:65:9a:e4:
bd:3d:c9:8d:7b:36:67:bc:0c:2c:84:ad:e3:01:f9:c5:cd:0d:
a2:68:71:67:17:15:0f:31:8f:b7:3c:61:83:38:60:4d:05:e9:
ba:69:92:d4:c1:6e:16:5a:be:1b:e8:b6:13:b8:48:a7:e4:e0:
b1:bc:b2:62:7f:6d:ce:e5:0c:99:53:0a:d8:c0:77:43:87:ca:
c9:e0:3a:9a:1f:a0:85:90:13:07:ba:6e:17:d3:2d:f6:8f:ab:
f0:c6:79:99:89:2c:59:1f:5b:24:f4:24:79:23:a1:0a:d6:05:
f9:f4:b5:ad:e3:56:b7:df:62:d2:00:f6:28:1e:26:04:7c:b4:
d4:44:42:da:a2:1d:e2:bd:50:65:0f:af:5a:75:c4:d4:03:a5:
f3:bf:d6:8a:fa:ec:90:a5:72:3d:0c:61:46:34:01:b3:b0:be:
84:7e:6f:57:c0:07:5f:37:d1:18:13:75:fc:96:79:d6:d8:ae:
59:36:df:01:56:f4:fa:d7:45:ee:6c:06:0b:6c:18:11:58:c3:
34:27:80:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:47:22 2024 by rpki-client on console-fra.rpki-client.org