Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F838D50FADC11EEB25C3802017001B1.roa
File: 4F838D50FADC11EEB25C3802017001B1.roa (raw, json)
Hash identifier: MqAbhvxlR0QLZjnCoqwsbmPz+5Sf/Vw9f3lH/yZtMJI=
Subject key identifier: 4A:D5:98:2E:BA:C4:69:CB:1B:60:17:C2:44:8E:A2:F4:9E:80:B9:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC27
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F838D50FADC11EEB25C3802017001B1.roa
Signing time: Mon 15 Apr 2024 03:57:43 +0000
ROA not before: Mon 15 Apr 2024 03:57:39 +0000
ROA not after: Wed 24 Apr 2024 03:57:39 +0000
asID: 142062
IP address blocks: 154.206.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44071 (0xac27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 03:57:39 2024 GMT
Not After : Apr 24 03:57:39 2024 GMT
Subject: CN=661ca5b7-62b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:99:8e:74:ed:ff:c1:9d:f9:e4:31:d2:e9:a2:
78:00:f6:f1:29:c6:83:d9:15:53:bf:cc:59:11:3b:
74:5e:a6:4f:08:5f:25:24:f2:38:7c:44:c9:66:65:
2c:e1:99:ba:79:88:f2:4b:2e:30:a2:3e:55:85:e8:
f5:ff:ba:49:f4:9e:2c:42:e8:aa:74:b7:62:18:39:
e5:ff:3c:ee:91:a7:5d:7d:fa:1c:63:45:90:92:07:
17:9f:73:6a:fe:ab:8a:9c:b2:bf:b8:d7:c9:e4:a1:
91:31:31:a5:d1:36:2f:c3:8d:de:e1:b2:12:76:b2:
d4:7c:09:0b:0c:55:81:43:0a:2f:66:80:f0:51:f4:
9b:c9:4f:59:39:8d:05:5c:51:dd:9b:85:16:7c:40:
0f:63:7b:d4:f4:b7:e1:47:11:df:f9:79:ae:40:3b:
7e:f0:1d:8f:9e:1d:90:94:5e:ab:67:d7:e9:38:93:
9d:c5:d3:37:e9:9f:b6:de:01:63:27:3a:06:18:ae:
49:b0:02:bb:f3:4d:6c:4a:31:76:6f:a2:58:19:a3:
04:fb:33:24:fa:b9:ab:4e:8f:f1:20:c0:00:8a:b8:
5e:dd:e0:dd:7f:85:50:28:28:4a:19:1d:e1:a8:2a:
c1:5e:62:36:55:97:73:a3:a7:c4:46:d9:fa:91:5c:
a7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D5:98:2E:BA:C4:69:CB:1B:60:17:C2:44:8E:A2:F4:9E:80:B9:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F838D50FADC11EEB25C3802017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.225.0/24
Signature Algorithm: sha256WithRSAEncryption
80:2d:b6:34:b9:7a:c3:16:83:c2:f7:10:56:7f:d2:37:73:b4:
2f:4b:28:59:ad:a0:19:7f:b5:f6:73:36:9b:c7:f4:10:24:74:
b9:15:c7:3f:3f:51:3b:6c:04:d6:02:4c:f7:ab:5b:82:d8:2e:
a9:82:4d:c7:b6:0b:5a:cf:25:75:53:0a:ff:46:c5:44:8e:c0:
ce:d8:30:29:e2:ac:b4:6a:64:f1:a7:5a:76:d9:40:a7:0b:4a:
9d:64:09:80:ef:10:f2:1a:5f:e3:fd:35:44:c6:80:af:50:c3:
37:44:7b:6f:e6:a2:78:d3:d4:0c:75:85:a1:f8:2a:bc:7a:be:
ad:57:09:21:93:ca:0a:88:f8:85:ad:3d:d9:53:af:68:24:38:
b1:68:22:86:9e:fd:68:73:cc:3c:bb:e3:35:24:5f:f0:aa:b3:
a3:d5:cc:be:79:b5:c5:a5:4d:69:1b:ac:3d:28:d1:83:52:35:
f8:1e:b4:82:dc:fb:91:0e:80:9e:5c:d0:7a:60:9d:94:ce:fc:
d2:91:71:98:fb:ba:24:81:9f:65:77:7b:fd:c8:1a:4e:cd:a4:
06:1e:5b:cd:54:31:f6:a9:5f:e5:59:a4:e5:8d:d7:d7:18:a4:
f9:a0:94:85:13:c9:1c:a0:c1:9c:f3:ba:4a:a7:ad:2f:ef:36:
66:d5:74:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:38 2024 by rpki-client on console-fra.rpki-client.org