Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3045598AFBA611EEA45D45F4007001B1.roa
File: 3045598AFBA611EEA45D45F4007001B1.roa (raw, json)
Hash identifier: YqziS1GidhsQftm5jQcayW1QAmpmEt07Y/ZBz0TgCoU=
Subject key identifier: CD:CB:FB:CF:0F:EB:AB:09:BA:9E:6A:70:87:0B:3E:57:B1:DC:41:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD79
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3045598AFBA611EEA45D45F4007001B1.roa
Signing time: Tue 16 Apr 2024 04:02:49 +0000
ROA not before: Tue 16 Apr 2024 04:02:45 +0000
ROA not after: Wed 24 Apr 2024 04:02:45 +0000
asID: 142062
IP address blocks: 154.206.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44409 (0xad79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 04:02:45 2024 GMT
Not After : Apr 24 04:02:45 2024 GMT
Subject: CN=661df869-e6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3f:0d:fe:7e:d7:07:11:13:da:08:41:c4:e1:
f6:70:b5:35:81:70:3b:21:13:4c:f7:11:5a:70:e9:
a5:71:bf:f1:06:d3:d4:73:ea:b5:88:1a:26:c1:d5:
e8:ba:92:95:b7:1b:c2:8c:b5:ff:32:7a:40:23:92:
e2:89:4c:da:20:86:4e:6d:8d:58:ab:91:60:e4:e1:
5c:95:11:b5:5f:97:96:f7:e7:05:1b:35:65:cf:6e:
e7:09:d8:c0:c4:c7:40:10:4c:ef:57:9a:87:55:65:
f0:ab:6b:7d:78:9d:2d:56:89:9a:4a:61:a7:45:60:
40:1f:e2:82:43:72:5f:08:89:bf:04:4f:f6:cc:0b:
7c:e4:21:b2:94:92:cd:2d:cb:c7:90:cb:68:6e:ca:
b9:7c:bc:39:b6:31:2f:30:61:67:e5:af:50:38:3e:
bb:b6:fd:f4:75:cb:4b:6f:6d:8d:57:cd:f7:4a:93:
cf:d4:ea:21:b8:4b:ca:0b:66:9e:20:d9:7d:7f:33:
c1:14:b2:b2:7a:6f:e8:51:a3:95:9d:ca:09:04:25:
4a:15:26:8b:c0:e6:13:1f:c1:a9:d1:b6:6c:9c:39:
70:bd:df:24:ed:6a:8a:86:55:76:16:1c:45:1f:55:
48:4c:41:64:39:39:45:98:24:74:cd:55:97:f2:9d:
a6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CB:FB:CF:0F:EB:AB:09:BA:9E:6A:70:87:0B:3E:57:B1:DC:41:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3045598AFBA611EEA45D45F4007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.217.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:99:a7:39:b7:a1:60:9f:bb:d9:5a:50:4f:d7:c2:ff:64:c0:
66:c3:73:5a:9a:84:e3:21:7e:26:40:00:f2:32:cd:22:a2:2e:
c3:f3:0c:fd:f2:19:ff:01:bf:eb:01:66:6a:7b:56:8b:3a:75:
bd:c6:d0:52:78:98:bc:54:19:ad:ba:37:dd:21:84:80:01:e9:
78:1a:cc:ff:48:e2:4f:dd:46:e0:68:fb:aa:b6:3e:34:2e:c1:
22:3f:43:f4:12:5a:11:51:38:79:a5:42:70:13:3a:8c:e1:76:
3d:03:f5:4f:4b:8a:0b:65:a1:7e:38:41:8a:4a:17:85:a4:89:
f2:39:4c:dc:4b:55:50:ac:ad:21:07:79:5f:12:1b:9d:f9:a8:
f9:6e:a2:93:41:0d:68:f3:3d:d4:9a:bc:31:cf:63:ab:7f:e5:
70:82:89:72:2c:84:81:74:80:c6:db:dd:f4:66:2f:ae:ce:08:
20:fd:43:50:38:29:42:70:76:75:a9:05:76:a2:5d:b8:1f:6e:
06:a4:58:5c:c0:fc:26:f9:6d:55:ed:ae:f1:cd:1c:10:ab:98:
4b:71:d0:48:7a:4f:3a:98:75:7c:f2:3a:cb:bc:93:d5:af:b6:
aa:63:b7:68:35:00:db:c4:cf:3f:b7:4d:21:81:27:58:0e:8a:
c5:68:63:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:43 2024 by rpki-client on console-ams.rpki-client.org