Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21E77CDAFADC11EE971650FE007001B1.roa
File: 21E77CDAFADC11EE971650FE007001B1.roa (raw, json)
Hash identifier: 8Fg4rVehd792AGr1G6xtHDn4uWbqVz6TR5YzrHZZRn4=
Subject key identifier: E2:60:D9:67:4D:4B:A6:0D:DA:78:8B:4B:3C:D2:AF:89:C6:BA:D2:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC23
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21E77CDAFADC11EE971650FE007001B1.roa
Signing time: Mon 15 Apr 2024 03:56:27 +0000
ROA not before: Mon 15 Apr 2024 03:56:23 +0000
ROA not after: Wed 24 Apr 2024 03:56:23 +0000
asID: 142062
IP address blocks: 154.206.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44067 (0xac23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 03:56:23 2024 GMT
Not After : Apr 24 03:56:23 2024 GMT
Subject: CN=661ca56a-4cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:05:59:2d:d2:5a:2f:f4:4a:41:58:f4:3f:3e:
a5:6f:ad:f4:2c:86:d0:50:43:61:f9:76:79:3b:cb:
b5:17:54:b5:be:ed:45:a7:3f:c0:79:98:9e:da:7a:
e1:12:99:e0:d6:1b:e0:d7:32:f2:a2:00:b8:ce:39:
13:78:3d:6a:e5:c0:dd:c8:55:b6:7d:ff:a6:5a:66:
de:ff:ea:59:b3:13:df:90:ac:9d:52:3a:38:4c:0d:
25:0d:c6:e6:0c:25:6f:34:4a:53:7b:5d:2e:fa:53:
2b:b7:db:24:ab:e9:b8:e6:a1:d8:5f:42:27:70:3e:
cc:94:09:75:ed:81:82:28:6f:0d:61:19:c4:b3:93:
c0:a7:15:b2:89:e7:ff:69:45:a1:df:1a:a8:28:89:
01:15:65:13:c9:b6:d8:70:cb:13:61:c0:c2:03:61:
70:f6:e8:cb:fb:e8:3e:cb:10:0b:06:6b:1b:d3:32:
dd:50:ea:b8:89:97:96:2b:e3:18:e8:40:b0:51:2e:
4f:84:e4:7b:61:5a:70:cb:8d:9e:7a:ee:7f:cb:01:
3d:50:9b:8e:f6:02:c5:b7:f3:3b:f7:4d:b6:bc:ac:
a2:5d:df:d1:23:61:c3:18:71:57:8f:3a:1f:5a:2e:
33:cd:6f:9e:b5:be:3a:79:b9:d5:68:26:ef:67:6b:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:60:D9:67:4D:4B:A6:0D:DA:78:8B:4B:3C:D2:AF:89:C6:BA:D2:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21E77CDAFADC11EE971650FE007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.223.0/24
Signature Algorithm: sha256WithRSAEncryption
48:06:dc:54:7f:d2:b1:65:1b:0a:09:10:d3:88:9c:db:53:31:
50:f9:0c:80:fa:a6:5d:b3:23:7d:a8:1b:02:f5:5f:09:4e:3b:
d4:a6:ef:24:a3:ff:e8:18:62:a1:2f:c4:db:75:22:e0:a2:c7:
84:75:46:d1:0f:24:51:b5:cf:d6:be:77:7d:a7:16:b0:5b:05:
ba:b5:e5:4c:c4:ea:6a:3d:f8:a2:96:a8:64:37:cf:fe:c7:2d:
ea:89:31:74:a4:b4:fc:99:23:08:f1:0f:cf:44:d6:55:10:1c:
d7:42:02:30:8c:54:33:24:e1:34:27:a9:ab:d7:00:0c:70:77:
9b:60:2e:cb:3a:d5:2a:76:a7:83:ed:06:8a:f8:e6:83:dd:84:
df:89:57:f6:7f:2c:00:e1:58:93:1e:f6:c2:78:f0:3a:25:57:
19:2a:8c:60:aa:03:99:6f:30:01:a1:f2:1c:d1:7b:41:17:cf:
1c:94:2e:9b:17:cc:99:c6:3f:16:28:b3:03:ce:ed:b7:ca:b6:
e1:c2:4d:63:2d:19:10:18:4e:4f:9c:2d:6c:ba:77:90:b1:59:
49:9d:45:6f:87:98:6d:0f:fc:ec:19:fc:9b:3c:26:19:fa:bf:
9c:41:f1:18:16:49:52:8f:51:5c:8f:25:01:bf:a4:f2:e3:aa:
cb:2f:1c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:38 2024 by rpki-client on console-fra.rpki-client.org