Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E1848500EA911EF9E036C5E017001B1.roa
File: 2E1848500EA911EF9E036C5E017001B1.roa (raw, json)
Hash identifier: 4VMgsazcBlkbaIQGL7N8J4Fa1XLltciHtSDXb/wIy6I=
Subject key identifier: 9F:F8:21:41:07:7F:40:34:D9:F1:D3:67:EC:25:45:40:47:0E:24:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B65E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E1848500EA911EF9E036C5E017001B1.roa
Signing time: Fri 10 May 2024 08:42:06 +0000
ROA not before: Fri 10 May 2024 08:42:02 +0000
ROA not after: Mon 20 May 2024 08:42:02 +0000
asID: 142062
IP address blocks: 154.206.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46686 (0xb65e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 08:42:02 2024 GMT
Not After : May 20 08:42:02 2024 GMT
Subject: CN=663dddde-b51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:d0:53:39:b9:60:7a:06:3b:06:a7:85:ea:
8f:d8:12:d5:1f:a4:21:74:02:51:29:6c:64:24:26:
0c:cd:f5:09:47:d6:a3:53:25:5d:38:e7:77:b0:d4:
d4:0a:5a:d7:e3:2b:ad:0a:d8:ef:99:2b:1a:48:e9:
e4:ef:c4:26:1f:29:73:3d:2b:0e:9d:f4:33:b6:eb:
1f:11:7d:0d:20:89:c1:38:c4:32:3b:76:76:35:2a:
be:76:81:8c:17:c5:5e:e9:1e:94:03:d3:51:0d:8e:
4c:b7:d4:d2:ac:42:0d:9c:fc:fe:00:e9:9d:00:26:
d0:5b:12:fd:12:0e:6d:28:2a:94:99:9f:90:39:bb:
f7:05:7e:2b:a5:d4:79:40:ed:c7:c3:98:65:05:cd:
4c:6a:eb:31:22:02:b0:4b:f7:cc:1d:47:e6:91:db:
84:f5:b4:1a:ce:3f:28:14:c5:5d:e4:fe:e3:e3:60:
4d:ef:69:08:64:7c:2d:32:15:b5:c2:4a:0f:10:8e:
af:46:a0:46:5d:9b:92:03:bf:f9:9e:a0:27:df:78:
1e:03:e2:7f:48:c5:de:bc:e2:ab:ac:f3:64:68:3a:
48:42:f7:a9:65:84:9f:86:e0:45:02:6f:c3:6d:b9:
31:0e:6f:09:8d:3d:6e:3f:fd:6a:49:cc:6c:e0:6f:
33:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F8:21:41:07:7F:40:34:D9:F1:D3:67:EC:25:45:40:47:0E:24:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E1848500EA911EF9E036C5E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.201.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:cc:ef:8e:de:ce:3f:a6:33:d9:5b:d7:d6:9c:4c:07:74:94:
aa:81:be:71:6f:fd:81:cb:02:68:a8:47:88:34:42:db:fb:99:
20:ec:35:19:2a:79:cf:f6:02:cb:37:40:d5:94:77:4d:3f:91:
0c:a0:6a:66:94:ec:28:46:02:ea:38:20:3b:1b:fe:0c:76:02:
09:0a:1d:c6:49:7f:ab:38:b9:62:e6:55:7e:b3:e9:5f:9f:7b:
76:1e:e4:d2:55:81:34:70:5a:4b:a3:02:e9:46:c1:41:a9:09:
d1:f2:85:00:0c:74:0b:3d:d2:8f:5e:c7:60:23:33:de:ac:1c:
c3:5d:c3:06:f1:f6:75:8c:69:a1:52:85:75:d3:53:08:23:16:
26:cf:95:37:d2:54:56:60:ba:d0:19:0b:c1:e1:6d:f5:9d:4e:
59:fc:a6:bb:95:84:b4:79:82:11:cc:ac:5c:c6:74:30:d6:60:
30:fa:83:cb:67:93:46:e1:7d:af:ed:d1:9c:64:80:92:c6:2b:
a3:c2:4c:06:39:18:c7:15:ef:42:1c:63:48:22:6c:c4:f3:55:
a8:d5:6f:c8:a3:c0:50:a4:3f:43:37:20:60:86:30:c2:6e:c8:
99:39:0c:87:4c:7d:e6:a7:bf:43:04:c9:df:79:10:13:19:38:
45:43:de:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:48 2024 by rpki-client on console-fra.rpki-client.org