Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15A6E3EAFBA711EEB7D7BEFA007001B1.roa
File: 15A6E3EAFBA711EEB7D7BEFA007001B1.roa (raw, json)
Hash identifier: +jifh6RStBazF1F5AGpK+OQGc+GjZDvTv1sem9vktN8=
Subject key identifier: ED:92:E9:AD:B8:0E:94:82:D4:AC:90:0B:EA:B4:EA:B9:9F:51:D7:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD83
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15A6E3EAFBA711EEB7D7BEFA007001B1.roa
Signing time: Tue 16 Apr 2024 04:09:14 +0000
ROA not before: Tue 16 Apr 2024 04:09:10 +0000
ROA not after: Wed 24 Apr 2024 04:09:10 +0000
asID: 142062
IP address blocks: 154.206.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44419 (0xad83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 04:09:10 2024 GMT
Not After : Apr 24 04:09:10 2024 GMT
Subject: CN=661df9ea-c51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:4b:1d:b8:ba:1e:0f:60:67:e5:ca:d0:ce:
dc:2e:1a:8e:4f:05:dd:93:0a:97:d9:da:27:09:8d:
49:6a:12:42:c5:fe:c7:2c:b1:72:e3:82:fe:df:eb:
4c:2f:97:4e:b7:73:4a:99:27:de:f0:fe:7c:1d:23:
d4:46:15:ab:9b:79:5a:cc:f9:9a:07:3a:9b:3b:74:
69:36:79:57:42:ad:bd:e8:69:80:53:11:a6:0c:06:
8f:e5:ff:40:b0:17:88:3d:3f:1e:48:80:cd:9d:af:
23:0e:6b:75:f8:7a:fc:6f:a6:12:b6:03:d2:8f:75:
7a:74:51:cf:f6:26:e8:ed:12:04:df:46:60:71:2a:
46:6d:c3:c9:23:6c:90:3e:72:9c:a8:55:5d:08:00:
54:4e:2c:44:90:f6:ea:55:a9:bf:c2:b7:f6:6a:cb:
2b:c4:e7:1d:5f:b6:dd:2c:19:36:59:f6:a9:56:65:
48:05:38:90:31:b1:d5:20:92:44:7b:0b:78:40:61:
dc:74:6e:29:8c:20:9f:d8:81:5b:25:7e:07:a0:5b:
8e:fb:24:7d:fe:51:63:ea:d9:6f:d9:42:8a:17:a9:
af:3b:6c:33:5b:43:5b:ac:0d:24:c1:8d:d2:87:55:
0e:bc:54:1e:95:14:39:c1:11:1f:81:a8:87:46:81:
8d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:92:E9:AD:B8:0E:94:82:D4:AC:90:0B:EA:B4:EA:B9:9F:51:D7:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15A6E3EAFBA711EEB7D7BEFA007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.222.0/24
Signature Algorithm: sha256WithRSAEncryption
98:38:4e:6a:32:ed:69:cd:2d:11:b2:56:2e:19:33:eb:e0:00:
5f:02:39:00:3b:d8:8b:01:d7:42:2d:b5:c4:52:c9:cd:54:33:
d3:b9:e8:cd:b4:22:a0:a9:f3:bc:7e:32:c6:75:f9:67:c5:65:
9d:8a:16:0a:f2:5a:fb:6c:a6:93:b7:5d:1f:c0:85:9c:15:f1:
cb:dc:ff:ee:9a:12:cc:78:b0:82:14:14:b1:65:f4:e2:34:86:
4b:10:23:ea:e9:3a:fe:32:ef:5c:53:cf:80:91:2f:75:2a:7f:
67:32:f5:79:04:3f:fa:1a:bd:7f:dc:b7:08:1f:ae:d7:16:b3:
1e:2d:16:7c:8a:58:20:74:42:b5:8c:64:8c:90:17:5b:f4:e8:
7b:5d:2e:1f:68:84:b3:89:7a:3a:52:bb:75:03:9a:f2:e3:2f:
fd:b4:61:bc:8c:69:66:3c:4f:b8:39:66:cf:ad:f6:03:74:14:
58:d0:b1:9a:e2:ed:00:2c:19:fa:02:db:0a:8f:9e:3e:50:ce:
c9:e2:09:c9:c7:f3:2e:a0:de:dd:e7:8a:03:92:53:d2:10:ed:
4f:c7:c8:e2:36:d2:56:23:76:19:d0:ab:4d:fd:64:fc:ad:55:
d8:b1:35:15:32:61:16:03:20:20:17:1a:2c:82:a9:8a:17:83:
7e:73:77:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:38 2024 by rpki-client on console-fra.rpki-client.org