Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/411D1750F48311EDA9EBFA2B4AD9E6FC.roa
File: 411D1750F48311EDA9EBFA2B4AD9E6FC.roa (raw, json)
Hash identifier: AjN52jFk0GFHhYKuqCOhcW2c5I6UUsLV8K1eXfTbP84=
Subject key identifier: 26:9F:49:C1:D9:A6:EE:22:1B:2C:0A:11:32:F6:97:AA:99:40:7A:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 24DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/411D1750F48311EDA9EBFA2B4AD9E6FC.roa
Signing time: Wed 17 May 2023 07:20:09 +0000
ROA not before: Wed 17 May 2023 07:20:05 +0000
ROA not after: Tue 30 Apr 2024 07:20:05 +0000
asID: 136744
IP address blocks: 154.206.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9438 (0x24de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 07:20:05 2023 GMT
Not After : Apr 30 07:20:05 2024 GMT
Subject: CN=64648029-b905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:e8:d4:1e:da:55:a2:ce:46:31:3f:b8:f6:
6b:57:83:e2:52:86:7a:19:d2:9a:15:93:d1:fd:84:
dc:df:88:e5:27:7e:c7:76:64:e2:1c:fc:c8:78:36:
ff:49:91:3d:75:b6:5f:8b:b8:26:76:21:28:e9:48:
36:09:05:b8:15:b3:49:e7:37:dc:79:6a:43:be:09:
40:29:30:f6:d3:02:02:f1:dd:11:ee:77:3f:0f:18:
61:82:2d:3c:28:5d:c3:79:74:1d:f5:bf:60:f2:cb:
1a:f7:63:8a:49:21:ac:75:5a:27:02:34:1c:09:5f:
6c:b3:fa:72:c8:1f:ca:8f:33:00:89:85:60:76:4e:
96:7d:8a:80:0d:b0:a2:9e:a3:6f:f3:c8:12:4d:5d:
89:69:0c:d4:fc:d9:6b:c7:0a:b1:15:d1:95:19:22:
e8:e3:09:13:a5:2c:1b:5e:fe:32:df:f9:5e:79:39:
e8:31:b0:28:73:e4:7d:4b:dc:7d:63:82:59:d1:83:
77:3a:89:b6:34:77:9c:cd:8e:2e:c8:16:e4:83:03:
2d:57:a0:3e:ce:a6:b2:81:59:53:e6:27:d0:22:78:
f5:00:c6:8c:26:ec:a7:c5:c4:d5:21:c5:4d:24:dc:
13:a5:09:e1:75:8d:21:67:d5:84:4e:b6:bf:f6:61:
f5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9F:49:C1:D9:A6:EE:22:1B:2C:0A:11:32:F6:97:AA:99:40:7A:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/411D1750F48311EDA9EBFA2B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.15.0/24
Signature Algorithm: sha256WithRSAEncryption
94:cc:93:ea:ea:10:d1:4f:4c:21:16:d6:72:96:1b:22:b8:54:
b7:0d:d8:45:54:9c:77:bb:ec:49:cf:bf:34:ea:b8:f1:2c:fa:
f5:bb:e8:6d:e1:ee:c6:98:cf:98:7e:84:4c:ed:4e:ab:3a:f6:
b9:b7:91:8b:b5:9d:47:90:b7:3f:55:0c:96:75:c1:ca:f6:b0:
af:e5:60:2e:44:cd:ca:9d:6f:74:3a:cb:12:9b:ca:42:6b:5d:
a6:b0:50:b1:da:56:6c:19:29:1a:14:4e:ea:87:c6:54:0e:9c:
69:ee:1e:be:94:4e:d5:c3:d2:6f:c0:b8:88:87:dd:d5:27:a1:
4b:10:18:81:23:10:cd:6d:95:b9:10:3c:2c:0b:dc:76:3c:30:
3d:17:d3:5a:1d:59:fb:27:5a:32:b5:89:dc:68:2a:13:89:7b:
58:f7:7f:ba:75:36:e2:d8:03:2f:6a:d2:15:9c:6c:30:26:0b:
d2:50:f3:e1:9a:d4:70:fd:2e:dd:62:e3:0c:e1:9a:35:a0:b4:
3f:d1:04:43:54:31:2e:a3:88:b6:6c:5e:30:05:12:6b:2d:97:
58:b0:a1:c3:e7:b7:62:00:43:1a:a8:69:31:64:39:09:fa:7a:
65:9d:90:45:a6:8b:11:3a:92:a4:8d:18:a4:f6:e5:a9:e5:b1:
7e:0e:e0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 12:15:42 2024 by rpki-client on console-fra.rpki-client.org