Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/359B4A54FADC11EEBC296EFE007001B1.roa
File: 359B4A54FADC11EEBC296EFE007001B1.roa (raw, json)
Hash identifier: UxbPPI7jYt0mW0/ZKWmyesa0AAtP19RbiJ6ATWAYXsw=
Subject key identifier: A0:58:A1:42:53:BF:E0:9D:C1:2F:9B:0D:B5:7C:E4:3C:C2:6D:6B:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC25
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/359B4A54FADC11EEBC296EFE007001B1.roa
Signing time: Mon 15 Apr 2024 03:56:59 +0000
ROA not before: Mon 15 Apr 2024 03:56:56 +0000
ROA not after: Wed 24 Apr 2024 03:56:56 +0000
asID: 142062
IP address blocks: 154.206.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44069 (0xac25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 03:56:56 2024 GMT
Not After : Apr 24 03:56:56 2024 GMT
Subject: CN=661ca58b-2036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:81:68:2b:ab:ac:51:9d:37:d0:1c:35:ed:1d:
57:72:87:ea:3c:f7:de:fd:55:93:37:20:ad:e6:bc:
e5:41:e2:2a:66:0b:4d:22:80:19:04:f9:08:b3:a8:
6d:07:7b:bb:42:85:cf:db:69:56:77:5c:86:44:d0:
13:ee:49:d2:10:3f:c4:f0:7a:1e:f2:df:91:76:1a:
35:ba:5c:3f:84:01:24:af:76:eb:2f:47:dd:7b:cc:
01:2a:ee:5d:22:9b:0e:e6:d0:da:8f:f3:f3:cb:ea:
74:3a:b8:9f:ee:65:8c:f4:5f:b5:d9:82:cb:6f:19:
af:7a:df:1e:49:d6:98:0f:41:0a:6a:94:64:fa:9b:
b9:73:ae:55:8f:97:d7:66:5b:c8:8c:ee:52:67:c8:
df:c3:5a:00:bb:7c:3e:10:3a:6c:2a:38:6c:fb:46:
72:18:dd:f4:f2:83:7f:c4:74:12:87:2e:32:f6:6d:
26:24:3a:c3:b2:3d:86:47:70:32:f5:5d:05:f2:c8:
5a:ba:ff:29:9b:d6:98:bd:dc:d2:85:29:93:c7:a8:
ee:5d:3d:3c:18:b5:59:65:21:58:ce:c1:0e:4c:e2:
51:b0:13:52:be:96:93:1a:a7:ac:57:3d:7e:03:be:
fb:e7:12:04:bb:31:3c:d9:09:07:b5:4a:24:3a:bb:
d2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:58:A1:42:53:BF:E0:9D:C1:2F:9B:0D:B5:7C:E4:3C:C2:6D:6B:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/359B4A54FADC11EEBC296EFE007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.224.0/24
Signature Algorithm: sha256WithRSAEncryption
30:71:ea:d6:14:0e:8d:1f:f0:5d:18:96:b3:29:48:67:99:ef:
45:fc:28:6b:dd:6e:55:f9:6d:8d:a6:39:64:f0:d9:22:7e:5a:
92:f4:2f:f8:3a:66:f6:fa:02:8d:de:84:d6:0b:a3:ed:72:c5:
15:42:fb:60:3b:43:e7:bb:64:52:6c:7c:6d:ec:f6:16:18:9a:
fe:41:7a:9e:61:31:d0:82:37:05:9c:e9:9d:03:65:59:0a:2c:
43:6b:e3:2a:9a:35:49:a2:31:15:6f:a9:c4:4c:a3:f5:34:29:
22:04:c5:c7:db:f3:d8:94:90:23:ba:c8:90:f5:3b:7f:5f:27:
14:9e:99:a9:0c:00:a0:81:6d:b3:8a:83:70:f2:1e:3b:7a:7b:
72:da:97:44:67:9b:8b:3b:9b:ef:95:a5:97:31:51:b0:41:15:
88:84:52:e5:3e:62:af:27:c3:da:8f:da:db:6f:19:d8:61:ee:
e1:f1:2f:81:36:a6:0b:bf:e0:c1:2c:48:ad:40:9b:34:77:91:
85:c6:60:af:b3:84:cc:9f:13:06:0c:cb:a4:a0:f5:e2:c8:30:
07:30:e9:ed:bd:f6:ae:62:20:35:c8:5c:e9:c3:ac:dd:92:f1:
f2:fb:e6:91:6e:22:db:99:d8:b1:fc:19:f9:1c:f2:a7:27:c1:
ed:09:e8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:38 2024 by rpki-client on console-fra.rpki-client.org