Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15B67E92FBA511EE8D864C67017001B1.roa
File: 15B67E92FBA511EE8D864C67017001B1.roa (raw, json)
Hash identifier: BPk8yxGoZ3CDrEF6EYSMvY7DQ3mm8vWWXEL8WsFPlE0=
Subject key identifier: 3C:EE:F9:10:28:40:CE:A9:1B:B9:7A:5B:CD:EF:E5:24:A8:73:02:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD6D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15B67E92FBA511EE8D864C67017001B1.roa
Signing time: Tue 16 Apr 2024 03:54:55 +0000
ROA not before: Tue 16 Apr 2024 03:54:51 +0000
ROA not after: Wed 24 Apr 2024 03:54:51 +0000
asID: 142062
IP address blocks: 154.206.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44397 (0xad6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 03:54:51 2024 GMT
Not After : Apr 24 03:54:51 2024 GMT
Subject: CN=661df68f-865a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:86:f2:23:ea:18:86:71:3f:5c:b9:fc:bb:
8e:6b:e8:c7:c0:05:db:1b:3f:2c:d5:e8:bb:8a:44:
b4:6a:3d:a9:bb:a2:f6:00:8b:77:8a:c3:97:c2:ff:
dc:cf:29:b4:eb:10:f5:d6:f9:46:38:13:4c:c9:7d:
59:73:ac:16:1b:a4:f0:85:c0:e0:c2:7e:33:04:ae:
fd:e2:bc:9c:9b:f7:72:7d:ab:63:25:c1:b3:c5:6d:
43:a2:c0:34:9f:65:d3:ef:89:17:ad:7b:19:fb:da:
25:6f:55:dd:da:56:13:f4:36:40:99:ba:45:ce:95:
90:43:71:4f:23:63:f1:f6:fa:ad:65:96:ed:08:db:
3f:35:3e:80:0e:cb:17:6b:dc:ee:ec:57:60:76:59:
c4:c8:46:d6:bf:ed:84:a3:9a:b6:19:0c:c3:f8:1a:
b6:61:04:70:38:11:5d:f1:e7:89:15:75:6d:7a:d5:
56:1d:ec:ca:85:95:9b:f0:e2:31:c9:d4:2d:2a:70:
3c:c4:bd:d4:9c:eb:52:ef:3d:fe:42:64:0c:35:5a:
80:97:a9:e1:99:52:a6:7b:7a:4a:f8:6d:63:b9:f9:
aa:b8:d3:f2:86:e5:d6:b6:7b:7b:40:5f:62:a8:85:
e1:05:32:ff:02:e0:22:4c:ae:38:59:dd:f9:5f:75:
ad:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EE:F9:10:28:40:CE:A9:1B:B9:7A:5B:CD:EF:E5:24:A8:73:02:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15B67E92FBA511EE8D864C67017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.211.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ac:17:b0:a9:8c:e5:17:74:fd:1f:f5:bc:76:0e:be:ec:ef:
be:c3:67:a6:9f:f4:c9:66:7f:8f:89:03:bc:62:8e:1b:67:7d:
47:54:ad:30:31:db:20:ff:80:31:44:60:4b:10:04:e6:55:a9:
e0:9c:43:9b:54:a2:0c:2e:1e:49:f6:50:84:d7:41:2b:e3:61:
c3:97:f6:f4:cd:ef:65:e9:e0:55:6e:3f:51:68:c6:bc:8d:0b:
70:18:fb:6d:f4:68:e7:71:b6:3c:1a:cc:7f:de:fa:82:ec:22:
e0:1e:e2:99:43:74:13:de:14:19:4c:54:9d:88:89:58:84:fb:
b2:ea:5d:0c:95:a7:42:b7:e6:49:4e:b1:47:12:27:0b:6f:8e:
49:08:13:0c:cd:7f:0a:1d:fa:72:f9:73:97:f1:24:dc:43:fc:
74:d1:fd:46:39:7a:64:1f:4f:88:b7:f0:34:13:05:e9:a9:cb:
20:88:8b:14:86:ed:e8:c8:2a:4e:02:d6:e3:f3:61:93:1e:83:
28:93:c6:0a:44:aa:a7:72:3f:fa:ae:f9:97:a4:5b:ca:8a:f8:
a4:bf:28:c7:4c:90:b3:68:b4:4c:71:24:eb:d6:43:ce:ac:e0:
6b:36:82:d5:27:92:25:d9:31:19:3e:f8:9d:be:75:e9:7e:cc:
e3:43:55:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:43 2024 by rpki-client on console-ams.rpki-client.org