Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/112B0040FACA11EE8C6ABD5E017001B1.roa
File: 112B0040FACA11EE8C6ABD5E017001B1.roa (raw, json)
Hash identifier: sw7hA15tsux5ndepWTe8LN4jZNV4uTBdC8+OIyK6q9o=
Subject key identifier: 47:D2:C7:4B:14:E9:79:6B:1F:BE:CA:60:E9:D3:D3:16:95:D1:EC:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ABF3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/112B0040FACA11EE8C6ABD5E017001B1.roa
Signing time: Mon 15 Apr 2024 01:47:07 +0000
ROA not before: Mon 15 Apr 2024 01:47:04 +0000
ROA not after: Wed 24 Apr 2024 01:47:04 +0000
asID: 142062
IP address blocks: 154.206.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44019 (0xabf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 01:47:04 2024 GMT
Not After : Apr 24 01:47:04 2024 GMT
Subject: CN=661c871b-7bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:f8:36:4f:15:22:68:18:58:23:b9:c1:c4:
ec:a5:74:2b:74:69:74:28:7d:fb:c9:7d:73:39:0f:
4c:55:bb:0d:5b:6c:a6:44:74:ab:d9:68:56:d1:04:
ff:d1:cd:6d:8e:7d:aa:72:31:1b:95:3e:5f:a8:dc:
ec:24:1a:11:ed:32:96:0b:14:37:b0:06:bc:8f:25:
07:a1:86:a4:42:79:a6:29:2b:61:c1:4b:28:a1:c4:
ca:92:ae:db:e0:ba:d2:90:c6:ff:2a:ef:6e:3d:43:
70:fb:18:d7:f8:ff:d1:1a:e1:6b:14:0c:6d:e3:73:
cc:1e:67:9f:61:29:16:8f:cb:0a:ba:21:e1:3f:59:
56:5f:a7:81:ec:43:27:f1:1f:8b:f8:e8:08:fc:75:
8f:38:7b:1a:52:45:ff:f8:11:32:4f:90:a5:9c:5a:
50:24:f6:8d:1b:b8:1a:05:59:9d:84:0f:0d:69:ba:
52:dc:c8:4f:1b:b2:fc:31:9a:36:0f:ca:ef:b6:ba:
37:e2:ce:c5:d1:f8:62:d9:7b:52:b8:4a:6f:1e:17:
99:07:0a:20:fd:16:c7:ec:32:a4:3e:1b:51:3f:7a:
c3:35:da:a1:8d:d7:e9:3a:7e:86:cd:75:f0:66:04:
ab:c2:23:3e:db:59:b9:13:99:2d:ec:4a:78:ec:8f:
d0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D2:C7:4B:14:E9:79:6B:1F:BE:CA:60:E9:D3:D3:16:95:D1:EC:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/112B0040FACA11EE8C6ABD5E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.199.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:f0:ba:6c:7d:81:18:66:c5:9b:61:a2:67:86:f9:78:70:41:
5e:3b:90:73:f0:d4:07:c9:3b:90:b4:50:00:df:0c:2c:36:c5:
c4:e2:a8:d6:88:49:39:92:7d:d8:dd:04:9a:d2:19:f8:82:e0:
82:49:d5:62:58:a7:ff:de:ad:43:ee:ef:b4:4b:e4:7b:6a:b7:
8c:14:f9:c0:66:b1:8e:af:86:5e:53:94:c0:bc:d4:04:c5:28:
48:3d:80:41:6d:b6:87:22:20:e8:8b:c4:b9:66:7a:c9:7f:3d:
45:e6:c8:75:14:02:ea:76:c8:a3:4d:98:ff:25:8f:6b:28:87:
c0:e6:31:b3:8f:a2:72:d3:54:ac:3c:ac:1e:f2:83:d4:91:ba:
b2:aa:47:fb:d3:cc:06:da:ad:7a:61:fc:49:e6:8d:ae:b8:46:
18:75:a7:ae:d3:b0:71:e8:d1:cf:84:54:61:ca:5a:9d:03:22:
79:ca:dc:21:0a:77:12:08:1a:4f:3c:dc:03:46:6f:fd:41:03:
c7:74:aa:59:2a:3f:8b:ca:98:46:86:68:8b:c8:2b:73:ea:5c:
7a:16:97:0b:b4:4c:20:85:81:c2:3a:17:72:1e:7f:cb:27:b4:
74:5f:46:49:c8:8c:b3:99:9f:35:f3:f2:d0:07:f9:9e:da:55:
bc:ea:93:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:43 2024 by rpki-client on console-ams.rpki-client.org