Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/030AE1A8FBA411EEA8075B5D017001B1.roa
File: 030AE1A8FBA411EEA8075B5D017001B1.roa (raw, json)
Hash identifier: EjNTXhcmcpVqbGGp7nUqlaMF0ZHi4GIVen+D9mNdpPk=
Subject key identifier: 06:07:16:CE:90:86:BE:58:E7:06:DB:4F:D9:2A:5F:FD:53:1C:3B:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD61
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/030AE1A8FBA411EEA8075B5D017001B1.roa
Signing time: Tue 16 Apr 2024 03:47:14 +0000
ROA not before: Tue 16 Apr 2024 03:47:11 +0000
ROA not after: Wed 24 Apr 2024 03:47:11 +0000
asID: 142062
IP address blocks: 154.206.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44385 (0xad61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 03:47:11 2024 GMT
Not After : Apr 24 03:47:11 2024 GMT
Subject: CN=661df4c2-b1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:40:bf:cd:1a:8b:f4:39:79:f6:23:80:0b:
84:c1:3a:a1:81:a9:1d:e5:c5:40:df:a4:51:df:c4:
e6:24:e2:64:68:b1:36:d1:9d:0c:10:5f:39:51:d9:
9d:45:15:ef:91:52:e3:d5:2e:28:a6:04:26:e6:00:
0a:a0:e1:c7:d2:02:5f:05:29:a1:f8:36:d0:3f:71:
59:94:ac:b5:c2:92:ca:1d:4c:aa:96:0f:3c:7b:ee:
37:46:db:d7:90:d3:6b:9b:e4:d8:e4:8a:8d:9e:48:
f6:e2:98:66:a2:3f:c5:e1:8c:b1:b8:ee:a3:b5:b9:
15:81:93:09:1d:d7:5f:30:b8:0d:9d:b9:71:96:ce:
37:da:25:63:9c:4c:94:97:6a:13:2e:fd:ff:90:2e:
7e:e4:4a:48:d0:76:8c:60:f7:c7:c9:6b:7f:d1:96:
e1:90:d0:a0:35:a0:50:5b:c8:67:ff:82:3f:59:83:
63:13:66:dc:cd:2b:3b:d9:3f:e3:54:ef:24:a9:f6:
1e:d7:a1:18:66:5f:94:9f:d0:c5:8d:21:b5:bd:30:
94:77:38:a4:ca:3d:de:15:a8:f9:7c:35:c7:9a:81:
c3:d4:8e:cc:7b:e9:36:d5:3f:73:b7:58:41:d9:49:
0f:c0:66:54:1d:af:40:f6:8e:21:e7:9f:3f:43:84:
ad:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:07:16:CE:90:86:BE:58:E7:06:DB:4F:D9:2A:5F:FD:53:1C:3B:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/030AE1A8FBA411EEA8075B5D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.205.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:9f:9d:32:fd:4e:ae:26:d0:3a:c7:6e:ba:f2:27:2e:6a:3f:
0b:f8:93:90:ca:04:fe:0e:94:4a:95:cd:c7:54:d1:17:2e:5b:
50:1f:df:59:f8:19:b0:4d:b7:b9:28:81:6e:8c:cf:db:99:ee:
61:24:f2:1b:6a:60:db:6c:52:5e:b1:75:0b:6d:d0:2f:42:21:
bd:ea:e4:37:d4:8b:96:cb:bb:02:1d:68:60:3f:0e:a4:2b:28:
f4:61:a4:b0:63:aa:b7:75:2a:24:89:06:b9:25:11:24:c9:92:
f6:2d:f0:c3:8e:06:0a:80:a5:c1:03:25:b3:52:0b:fa:81:c7:
17:80:c0:1a:fa:16:b0:bf:06:0b:47:cb:90:50:7d:48:fd:9a:
ed:6d:e0:bf:b4:18:08:0d:6d:2e:eb:35:9b:af:f7:75:f2:c1:
21:9f:f7:38:d9:0f:7a:ff:f2:10:1d:04:2f:3a:26:dd:94:6a:
0d:0e:d7:06:a2:8e:71:1c:31:63:46:1c:b6:9e:ca:c1:5f:4f:
f5:ed:ce:06:6e:68:b5:4a:94:16:ae:80:c5:f2:46:59:cc:0d:
a1:dc:d0:34:38:ea:b7:6c:b2:40:51:3f:ed:e5:7a:3c:bd:0f:
70:d5:3c:3f:6c:59:e9:e4:5d:7a:5e:3e:bd:05:04:34:b0:91:
f4:02:a9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:43 2024 by rpki-client on console-ams.rpki-client.org