Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AB96CB4FADD11EE98683508017001B1.roa
File: 2AB96CB4FADD11EE98683508017001B1.roa (raw, json)
Hash identifier: HWcDiVI7qfuNFpUWDhO1xZcguRrNRRMBLfJFn35hhPg=
Subject key identifier: 71:77:4B:CF:A3:AB:48:06:AD:F8:FF:C3:3F:A2:B0:55:CE:03:89:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC33
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AB96CB4FADD11EE98683508017001B1.roa
Signing time: Mon 15 Apr 2024 04:03:51 +0000
ROA not before: Mon 15 Apr 2024 04:03:47 +0000
ROA not after: Wed 24 Apr 2024 04:03:47 +0000
asID: 142062
IP address blocks: 154.206.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44083 (0xac33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 04:03:47 2024 GMT
Not After : Apr 24 04:03:47 2024 GMT
Subject: CN=661ca727-14ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:39:38:c3:3c:48:04:2c:71:2c:f2:b1:dd:86:
15:fe:ae:72:42:a9:4b:72:b9:06:46:1b:5f:e0:9d:
1f:f9:6f:91:05:73:01:ae:31:00:32:7b:21:35:8c:
10:da:1a:3f:ad:bc:5f:a9:e2:d6:85:03:19:53:c9:
ec:98:c3:50:8b:f8:1a:c5:6e:18:c2:d4:75:75:57:
b2:7c:f0:fc:4e:50:32:7a:06:fc:1e:6b:e8:8e:50:
09:10:c1:96:88:c6:d2:b0:71:df:ca:46:24:44:d9:
f6:eb:3a:90:b2:e9:96:83:dc:13:65:db:b3:00:3a:
84:92:bb:5d:09:25:39:36:86:5a:fb:cc:c6:15:6b:
e6:3d:49:52:6c:e7:b5:a5:ab:88:25:75:0a:ee:55:
00:a9:7f:d9:30:21:9b:9c:f2:5d:22:31:1c:c0:43:
22:0c:1e:10:a8:45:9f:83:fa:4c:f6:96:52:da:88:
f2:fc:b5:98:3c:79:08:50:bd:5b:03:16:1d:45:33:
8e:3d:21:95:24:c9:05:a4:b1:0a:b7:b6:20:e8:64:
5c:48:99:38:46:2a:f0:db:47:00:e6:ff:f9:05:36:
33:78:96:e8:d1:de:12:7d:af:4a:7b:11:07:bb:15:
29:35:31:ee:59:e3:2b:96:f2:4c:fe:ae:f4:0e:73:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:77:4B:CF:A3:AB:48:06:AD:F8:FF:C3:3F:A2:B0:55:CE:03:89:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AB96CB4FADD11EE98683508017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.231.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:f0:0a:9b:14:f8:41:7e:c0:56:26:69:9f:85:fe:b4:87:58:
5b:7d:60:4c:e1:2b:ce:2b:85:92:52:65:68:85:0d:f5:20:af:
c3:66:dc:09:f7:71:01:0f:5b:0f:df:55:a1:ca:d9:47:56:5b:
d7:70:df:43:cb:a2:63:59:53:9e:56:97:ef:91:f0:85:4e:53:
97:08:4b:24:52:c1:52:ae:5f:f4:00:ae:bd:52:f7:02:4c:57:
a3:1a:9c:56:8e:56:1a:50:e1:0f:d2:5d:cb:8d:6f:74:81:45:
15:c6:98:90:8b:ae:6c:b9:f6:08:03:83:52:dd:be:75:6f:b5:
5a:70:40:3c:14:65:11:31:eb:51:bd:69:a7:b9:22:1a:14:c9:
fc:87:ab:92:93:82:53:2b:02:8b:bf:90:6c:89:29:82:5c:d0:
f2:86:6c:fd:4b:d3:ae:43:05:5d:51:13:5c:31:e3:c8:42:af:
95:8e:97:31:b4:73:f7:0a:ba:70:99:36:bd:25:d8:20:7e:bb:
e0:04:57:b4:bb:3c:21:82:ba:ac:67:de:eb:c7:fc:8b:37:2c:
f7:6d:5a:93:e2:43:ae:4d:95:04:17:cd:b6:24:4a:7e:11:71:
00:68:d3:d2:e6:41:cf:f6:4b:91:3a:49:7d:b0:75:eb:2c:70:
04:0d:87:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:38 2024 by rpki-client on console-fra.rpki-client.org