Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31EE188C0EAA11EFBD614568017001B1.roa
File: 31EE188C0EAA11EFBD614568017001B1.roa (raw, json)
Hash identifier: L4vyZR98N39wakJOIg3CBfoytFRux7D8HxiYNv88NfA=
Subject key identifier: 27:89:58:25:D1:61:48:30:E9:90:58:6B:0D:C9:25:FA:06:4F:29:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B66C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31EE188C0EAA11EFBD614568017001B1.roa
Signing time: Fri 10 May 2024 08:49:22 +0000
ROA not before: Fri 10 May 2024 08:49:18 +0000
ROA not after: Mon 20 May 2024 08:49:18 +0000
asID: 142062
IP address blocks: 154.206.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46700 (0xb66c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 08:49:18 2024 GMT
Not After : May 20 08:49:18 2024 GMT
Subject: CN=663ddf92-1fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:d1:9c:08:8d:29:ee:44:1a:fe:3e:f9:16:
f9:09:6f:da:85:15:d1:cd:35:12:b7:a7:64:e3:27:
e9:3c:90:80:18:ab:fe:86:5b:5a:9a:f1:b4:9b:cd:
d5:4c:7e:45:38:6a:25:85:fc:c2:43:8f:40:cd:ff:
3f:25:42:67:98:bb:78:c2:57:4b:f4:44:f1:aa:23:
e4:d0:48:89:94:51:46:2e:5e:06:df:51:6d:39:87:
f1:40:b5:b2:4d:78:8e:d9:ec:68:af:35:79:82:01:
64:d6:78:a4:c8:ce:cc:4c:fc:88:bd:0f:c4:6f:a8:
cb:25:22:39:29:c6:0d:38:e8:20:7f:5d:44:3e:47:
75:0a:3b:17:f4:6f:8f:32:6c:4c:05:b3:5c:39:91:
0c:b8:1c:e5:ef:3a:c7:0f:37:b7:89:d9:f1:96:83:
62:1d:d4:30:a2:04:52:30:c8:db:7f:6e:3a:e6:5c:
61:67:18:96:be:03:30:fc:0f:0b:e1:aa:ca:ea:f0:
a4:ea:54:80:35:38:73:20:8c:26:07:fe:5e:cf:1e:
f7:ed:df:3f:9a:5a:2b:b5:2f:18:78:4f:5c:00:de:
b6:c7:2a:72:bc:a6:49:28:68:ae:99:c6:68:cb:7c:
43:bb:26:86:54:15:e9:e9:1d:b0:ef:38:e8:f9:4b:
f2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:89:58:25:D1:61:48:30:E9:90:58:6B:0D:C9:25:FA:06:4F:29:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31EE188C0EAA11EFBD614568017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.216.0/24
Signature Algorithm: sha256WithRSAEncryption
48:2f:79:4e:d4:0b:44:71:ed:e0:4a:fe:ef:ed:dc:f2:43:34:
db:99:60:0f:6b:a9:c4:0b:7e:ac:b2:9a:b8:7b:b3:2e:e0:40:
9a:1e:9d:ce:56:ca:ed:97:6e:fe:05:c8:e6:ba:3c:af:33:7d:
e2:d3:5b:b7:49:26:25:6f:56:0a:98:c5:65:7e:62:2c:69:dd:
93:de:73:66:b1:c7:6b:45:10:ef:c5:77:b8:06:6f:26:5a:5a:
f9:39:20:74:1c:4f:7a:80:12:a6:08:a9:80:12:3a:80:67:41:
05:7c:b8:c5:ec:ba:c4:e4:bb:d6:97:ee:5d:7c:de:53:5b:e4:
fc:c4:14:b0:7d:d3:52:ed:fa:61:b5:df:14:a9:96:67:7e:f6:
cd:bb:bf:37:fb:ef:e0:48:70:3f:a3:7b:48:57:d4:eb:c8:ac:
20:42:f1:5b:59:6b:a3:1a:d7:45:c1:5f:5f:38:96:ec:8c:8f:
ed:b8:1f:73:92:5b:7b:e4:f7:83:77:ae:66:eb:6b:8f:03:ba:
bf:77:6e:71:4d:29:50:00:64:0a:03:16:98:ee:2a:2f:01:f8:
e9:b0:c6:67:f6:06:cb:72:08:50:11:84:5f:83:27:8a:a2:f2:
00:b6:1f:6a:30:0d:65:2a:2f:0a:26:5d:aa:d1:fa:ed:3f:7b:
21:66:0f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:46 2024 by rpki-client on console-ams.rpki-client.org