Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17C6B990FAC911EEBAD32F57017001B1.roa
File: 17C6B990FAC911EEBAD32F57017001B1.roa (raw, json)
Hash identifier: w+3mduCclZt+2C2Jj79Hcj3f/qPgk//8+KbFE8nvCfI=
Subject key identifier: 09:83:62:C9:4C:C9:6B:41:F6:39:9F:68:C7:E1:6C:A6:80:67:52:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ABE9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17C6B990FAC911EEBAD32F57017001B1.roa
Signing time: Mon 15 Apr 2024 01:40:09 +0000
ROA not before: Mon 15 Apr 2024 01:40:05 +0000
ROA not after: Wed 24 Apr 2024 01:40:05 +0000
asID: 142062
IP address blocks: 154.206.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44009 (0xabe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 01:40:05 2024 GMT
Not After : Apr 24 01:40:05 2024 GMT
Subject: CN=661c8579-becd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:4b:78:66:a2:68:ff:19:43:b9:18:8d:f0:
94:9e:ba:a4:8b:6d:3c:55:08:b0:d9:0d:b5:be:11:
db:3c:7a:04:57:8f:c4:62:dd:e3:7a:5f:e6:c6:a3:
55:a0:fa:83:00:11:e7:81:68:2c:ec:49:28:c1:bd:
21:2a:aa:ff:7d:b2:92:3c:01:c8:08:34:81:26:86:
38:dd:ad:27:a9:fc:bc:23:80:f1:1b:d8:15:e8:78:
60:ba:33:2a:ed:2f:09:84:0c:02:f8:91:64:44:05:
b6:49:24:9c:1a:1b:0f:0f:78:81:39:4f:0e:c4:63:
94:71:dd:33:eb:d1:d2:48:6d:85:21:5f:b2:8f:38:
46:77:69:7a:be:72:56:6d:b9:45:6a:97:f8:56:99:
03:de:8c:dd:d0:28:42:bc:6a:7b:ea:79:f4:f8:aa:
f0:f9:c6:2b:50:42:af:a5:c1:e4:b1:88:7c:60:b4:
e0:98:bc:06:56:f3:c1:27:50:55:c8:7d:86:60:01:
58:24:13:1e:99:e2:e8:a3:ce:d2:af:a9:7d:52:a3:
2e:99:5e:0a:0a:3e:de:85:30:50:54:dc:9c:92:e7:
0b:b3:85:0f:c7:70:c8:90:0e:0d:c2:b4:a3:68:fd:
4b:e1:83:21:99:fa:83:c5:44:f2:a3:4a:63:a8:69:
be:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:83:62:C9:4C:C9:6B:41:F6:39:9F:68:C7:E1:6C:A6:80:67:52:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17C6B990FAC911EEBAD32F57017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.194.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:14:4d:af:d5:31:19:cc:4e:31:5f:d0:89:cc:3e:0b:93:b6:
6d:18:67:4f:94:78:69:5d:c7:3f:cb:e2:3f:59:86:20:b0:5c:
30:1d:2f:c5:9f:fe:1f:6c:4b:25:ee:c3:e9:38:90:7b:e4:c2:
f5:67:9e:3b:1a:a0:04:43:24:01:95:89:10:48:1f:41:f6:44:
16:e0:b3:7a:6c:0f:cc:42:06:06:4b:15:5d:12:e1:0d:04:90:
2a:18:8b:75:df:d2:58:af:d7:c4:57:63:d1:5c:2a:bc:d5:25:
9a:0f:2f:05:3d:4b:e9:32:a4:69:db:2a:49:49:ef:bb:7d:b8:
01:47:95:6d:d8:6b:96:11:48:d7:05:7d:db:44:05:25:5b:42:
b6:0b:e2:fb:28:35:ee:3a:1b:49:fd:18:b2:db:a1:c7:f4:cd:
2f:43:82:7b:88:77:39:b2:99:3d:6b:b8:a0:70:33:e6:7a:82:
71:86:80:b5:46:15:e8:04:19:46:36:f9:05:58:dd:c0:a4:a1:
0c:05:ec:57:7e:1c:5c:ab:31:31:f8:f7:25:c8:b9:b9:13:3a:
30:7d:4a:1a:6f:11:3c:9f:7e:99:2c:40:bf:25:3b:61:b4:ce:
7d:2c:5a:c4:7e:09:38:e3:31:e4:c3:aa:3c:09:bb:cd:86:51:
5d:07:14:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:38 2024 by rpki-client on console-fra.rpki-client.org