Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4401942EFBA711EE900E74FB007001B1.roa
File: 4401942EFBA711EE900E74FB007001B1.roa (raw, json)
Hash identifier: K8KViGvUFNgT+cCEHF4/QKmhcPQbyRpCTGGRkPI0onk=
Subject key identifier: D5:E9:AC:DA:FC:9F:AF:83:07:B8:F2:7A:E7:BF:BC:06:2B:E5:25:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD85
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4401942EFBA711EE900E74FB007001B1.roa
Signing time: Tue 16 Apr 2024 04:10:31 +0000
ROA not before: Tue 16 Apr 2024 04:10:28 +0000
ROA not after: Wed 24 Apr 2024 04:10:28 +0000
asID: 142062
IP address blocks: 154.206.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44421 (0xad85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 04:10:28 2024 GMT
Not After : Apr 24 04:10:28 2024 GMT
Subject: CN=661dfa37-091c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:57:6d:c3:82:34:d5:9a:ae:63:6f:08:39:
32:cb:fa:74:1d:45:83:48:c1:4c:ec:20:2f:f0:23:
ca:87:37:6a:09:74:93:19:3b:c7:c0:a8:d6:6b:52:
e0:4c:40:42:e3:a6:e7:38:20:72:28:03:4e:c3:87:
2c:0d:cb:6b:25:e8:65:44:5b:28:4e:97:64:64:da:
1c:be:5c:5f:b2:d6:38:51:67:1c:62:6f:97:40:99:
7e:4e:9f:31:17:c2:c5:3a:f5:04:4e:02:6b:f9:23:
f6:31:a2:48:cb:33:21:ff:26:9d:1d:58:5c:eb:24:
57:ad:1b:d0:46:01:4f:8c:e7:58:3b:6f:1e:a2:23:
61:21:ef:d3:4f:42:de:d7:d6:6d:a6:2f:c6:d7:22:
2d:1f:bd:84:f2:47:dc:15:d9:d0:f1:72:00:56:ad:
7d:8e:01:f9:ea:09:df:81:96:d8:e8:c7:04:7d:09:
b8:21:ba:4e:5f:14:f9:34:d1:10:80:60:9a:c1:d4:
32:2e:b6:70:b0:df:48:f4:4d:74:fd:15:f8:4f:34:
9a:ce:e5:ff:f0:1f:24:65:b8:67:38:80:a6:bd:71:
2b:f4:0b:e8:c7:be:68:2a:bd:ca:8e:d8:7b:af:88:
18:15:fe:ed:8f:16:44:ea:7d:9c:ca:02:7d:23:65:
aa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E9:AC:DA:FC:9F:AF:83:07:B8:F2:7A:E7:BF:BC:06:2B:E5:25:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4401942EFBA711EE900E74FB007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:91:bb:7b:82:cb:f5:41:22:f6:03:3c:a8:31:2e:25:9d:5f:
8b:b4:ce:95:47:89:52:e0:c2:52:f3:f6:8f:ef:e6:a3:1d:4b:
59:e8:25:ca:4d:87:22:9d:9a:3e:69:d9:1a:2f:1f:73:9d:0b:
94:e2:42:a6:35:41:9c:68:5e:59:db:3c:a5:00:80:b3:e5:02:
3a:de:3a:ee:91:4b:c4:65:c8:42:2e:d3:1d:d3:f9:18:e0:47:
26:70:6d:aa:5a:68:89:b5:2c:ab:09:aa:31:75:51:4a:dc:9d:
f9:82:af:4e:ee:26:66:60:cb:45:00:bb:c3:18:2c:1d:19:f4:
26:3c:17:73:84:40:22:1a:8f:25:3c:78:ec:f0:2c:00:2a:27:
f2:a4:40:84:67:b3:3d:67:b1:37:06:e2:9c:b4:33:c8:ef:dd:
87:35:64:9f:0d:28:19:2c:cd:d2:ea:53:8d:d8:17:15:e1:da:
d6:27:14:d2:ba:34:bc:34:da:16:ad:e4:42:82:1f:83:95:1f:
05:81:0f:06:5d:ca:06:ab:35:51:01:0e:de:03:ea:5a:c6:88:
9d:23:ae:ee:01:1c:0b:80:cd:03:76:4d:1b:76:92:91:8e:62:
c5:dc:c8:5d:7d:db:0d:f6:c1:4c:01:22:32:91:ad:8c:e3:48:
85:ce:bd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:38 2024 by rpki-client on console-fra.rpki-client.org