Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D5C5CB8FBA411EEAE82B761017001B1.roa
File: 5D5C5CB8FBA411EEAE82B761017001B1.roa (raw, json)
Hash identifier: QS+4J1j4QQLkfSMduUuOhvEHVKdQ6u2VINOx5oOTgmg=
Subject key identifier: 97:42:D2:DE:F3:C4:91:4B:02:3B:EE:D3:AD:DD:07:BC:FF:D5:AF:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD65
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D5C5CB8FBA411EEAE82B761017001B1.roa
Signing time: Tue 16 Apr 2024 03:49:45 +0000
ROA not before: Tue 16 Apr 2024 03:49:42 +0000
ROA not after: Wed 24 Apr 2024 03:49:42 +0000
asID: 142062
IP address blocks: 154.206.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44389 (0xad65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 03:49:42 2024 GMT
Not After : Apr 24 03:49:42 2024 GMT
Subject: CN=661df559-05eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:36:34:d5:d2:ba:03:bf:81:1c:dd:9d:21:
80:85:8c:c8:39:d3:8b:a0:b3:9e:7a:97:56:1c:73:
ad:e5:44:e2:56:aa:aa:ce:16:86:f1:4e:9b:09:bc:
15:f1:fd:70:ce:fa:b6:6f:29:c3:eb:32:97:af:65:
a7:c7:04:f3:84:4b:65:7e:bf:db:46:5c:22:d5:5a:
cb:5d:e3:09:71:ae:da:38:0e:84:c7:06:43:d8:77:
ef:2f:fe:32:27:83:45:d6:e5:c2:16:04:15:2e:21:
44:a3:43:24:80:d6:42:d2:52:e4:5c:34:12:cc:ba:
de:2e:dc:ec:6e:77:7a:a8:46:a6:63:d4:91:e8:d9:
87:03:f2:ea:92:9f:56:fc:91:a7:ce:ff:10:43:f6:
e8:07:8b:27:7f:45:d0:0d:86:4b:f1:bc:a4:c7:9e:
93:31:c9:10:c4:3a:59:bb:cf:f5:d3:8f:f3:c0:09:
5f:14:6b:9b:32:21:b8:f9:27:9a:9d:6f:5f:1f:1c:
25:80:78:dc:25:49:a4:c2:79:89:95:b5:80:59:cd:
80:69:9a:bb:6e:73:f6:84:b1:48:bb:cc:72:f8:98:
d8:f6:6e:68:8f:ac:6b:04:76:21:20:61:b2:3e:71:
d4:77:69:7f:d3:cb:f7:a2:22:a1:44:c7:de:33:81:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:42:D2:DE:F3:C4:91:4B:02:3B:EE:D3:AD:DD:07:BC:FF:D5:AF:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D5C5CB8FBA411EEAE82B761017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.207.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:79:9d:60:a8:b5:a6:cc:e7:55:8a:58:60:34:d8:e3:e8:83:
d5:ab:66:ac:3e:78:ec:d6:9d:e0:0b:98:74:b6:fa:5c:dd:3f:
17:ae:50:47:1a:2a:6c:65:db:02:14:54:ab:bb:74:58:48:8f:
a6:43:43:00:b6:a0:7d:33:76:86:fa:e0:8f:4a:ec:9b:e1:7c:
4a:81:af:9f:fe:c7:b4:3c:25:99:5b:85:f4:e9:66:b9:86:3b:
01:b4:2d:59:4b:50:8f:b2:d5:3c:c3:6b:02:1f:fa:3f:36:ef:
0a:cb:bf:b4:9a:d1:0e:d2:30:e3:51:f3:20:59:25:bc:b3:9b:
12:6c:1e:f6:f5:75:c4:75:36:f9:07:73:54:84:e3:86:07:b3:
c3:17:23:51:6d:8e:d3:65:96:12:e6:be:8b:a9:87:0e:76:0e:
cc:e6:82:2b:ee:0e:09:8e:3a:81:2c:03:8c:07:5d:43:5b:d0:
71:f8:ec:35:34:96:4d:aa:94:8d:44:65:d1:e6:7b:11:1b:18:
96:c6:37:7a:d3:a8:d5:d1:ad:59:ed:69:e2:52:4b:3c:ee:8f:
16:33:24:30:76:5c:3f:d5:d5:7b:08:41:6c:ff:62:bf:42:d4:
fa:7d:ef:e6:aa:0f:ae:29:60:43:6e:c2:5a:00:62:d9:4f:12:
b1:f0:b5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:38 2024 by rpki-client on console-fra.rpki-client.org