Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/505CE85CFAE111EEB6265029017001B1.roa
File: 505CE85CFAE111EEB6265029017001B1.roa (raw, json)
Hash identifier: pXpY+yilmpFw5hMFBloYnODqMpQj79WUMsAlEnRyaJ8=
Subject key identifier: 3F:77:55:F6:B2:34:1B:00:D5:BD:13:CB:B7:56:39:8E:64:E0:C9:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC4B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/505CE85CFAE111EEB6265029017001B1.roa
Signing time: Mon 15 Apr 2024 04:33:32 +0000
ROA not before: Mon 15 Apr 2024 04:33:28 +0000
ROA not after: Wed 24 Apr 2024 04:33:28 +0000
asID: 142062
IP address blocks: 154.206.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44107 (0xac4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 04:33:28 2024 GMT
Not After : Apr 24 04:33:28 2024 GMT
Subject: CN=661cae1c-181d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bd:7f:b0:b9:06:d9:ba:c2:03:cc:17:ed:08:
66:99:02:c0:ee:31:f7:37:0b:49:cb:58:57:2a:4a:
0e:aa:f4:aa:b2:1a:a7:2c:45:4e:b4:48:40:6e:be:
6b:33:46:92:6f:79:c9:9b:84:4a:08:7e:5a:52:06:
f0:87:8f:23:10:7d:f3:04:e9:95:22:ac:8e:f1:ec:
5e:c9:a7:9e:89:14:c5:4f:aa:0b:b4:ac:15:93:79:
f2:93:ee:34:db:4a:04:5a:c3:db:26:27:f2:ae:7b:
6c:fe:2d:13:90:74:55:8a:ec:f0:9c:a1:f7:0c:4a:
6d:44:ac:aa:9d:e3:d8:ad:bc:b8:3e:f1:b5:b4:a0:
10:2d:0d:b9:6f:68:9f:c4:12:61:d1:c8:f5:51:81:
5a:3a:c4:70:e5:0d:6a:c8:81:8d:a5:aa:3a:15:08:
30:c0:92:49:f1:4b:52:cd:b2:9a:99:c9:11:51:17:
3a:9f:25:19:40:49:03:80:75:66:af:a0:ac:f5:9c:
64:29:86:c5:72:b1:1b:6b:e5:f2:0b:8c:8a:9e:23:
ae:70:4e:0f:af:9b:88:bf:aa:a6:e4:c9:85:8d:47:
d2:a2:73:41:ff:5e:f9:e7:f3:c2:20:49:0b:6e:07:
85:d4:a3:5d:2d:c3:a5:92:0c:fb:e8:6f:84:b9:73:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:77:55:F6:B2:34:1B:00:D5:BD:13:CB:B7:56:39:8E:64:E0:C9:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/505CE85CFAE111EEB6265029017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.215.0/24
Signature Algorithm: sha256WithRSAEncryption
50:65:f9:c1:7c:2f:72:47:93:4c:42:d6:f3:61:7f:8a:67:89:
63:7c:0c:02:c2:b7:65:79:8c:26:e0:21:b4:42:2a:ff:87:9d:
5c:8d:34:e7:19:59:a6:1e:12:54:38:dd:1e:79:51:1b:99:d2:
a3:fd:f4:42:96:1c:9f:40:c0:2e:47:98:e6:82:91:b7:7d:b1:
9c:f7:f4:0d:2d:31:f7:a7:04:33:75:e4:a4:ba:06:6d:a3:44:
1b:ac:ca:4f:dd:eb:3b:9b:37:2b:ba:34:d7:d9:58:49:12:53:
71:a2:ee:94:29:4f:c2:ed:2a:11:90:71:dc:4b:86:da:6d:40:
b4:01:a3:d8:f5:04:d0:34:b0:8c:ac:5e:43:e9:d1:c9:89:61:
d0:c0:23:eb:6a:be:5c:08:ed:73:b3:34:6c:c6:80:c4:f2:80:
96:52:d7:cb:4d:40:b5:64:d2:51:71:2c:5f:a6:25:d2:fb:14:
85:82:59:15:a9:a8:9a:35:0d:42:1d:42:d6:c6:bd:be:ef:7d:
99:99:cc:69:a9:f3:4b:6d:e1:9b:46:e5:d5:46:0c:24:6f:de:
0a:06:4c:90:12:42:8a:ae:79:7d:0a:b0:93:c2:34:d2:96:84:
cd:f1:cf:c5:b5:91:f5:09:f9:8d:da:ae:93:6b:ab:39:15:e6:
dd:a6:5f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:43 2024 by rpki-client on console-ams.rpki-client.org