Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DBB72EC0EAB11EFB2A4C170017001B1.roa
File: 5DBB72EC0EAB11EFB2A4C170017001B1.roa (raw, json)
Hash identifier: RJb3wRsvXFD4Q+cvOpVKcx8IErTMSSudWrEN/Zs7xdM=
Subject key identifier: FA:C9:45:E4:E4:89:1E:D9:16:16:9D:2D:83:E3:1D:C8:AE:DE:AE:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B67C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DBB72EC0EAB11EFB2A4C170017001B1.roa
Signing time: Fri 10 May 2024 08:57:45 +0000
ROA not before: Fri 10 May 2024 08:57:41 +0000
ROA not after: Mon 20 May 2024 08:57:41 +0000
asID: 142062
IP address blocks: 154.206.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46716 (0xb67c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 08:57:41 2024 GMT
Not After : May 20 08:57:41 2024 GMT
Subject: CN=663de189-df46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6a:cb:0c:f2:b2:ad:26:3f:15:1e:39:55:83:
f0:ed:d3:1d:59:17:8f:a6:c1:40:76:a9:6c:e3:f4:
19:23:86:de:ad:15:c5:18:96:e4:66:9c:ed:85:16:
e2:c2:80:7e:b1:fc:ab:8a:3c:31:04:38:57:51:26:
45:ad:b9:a2:a5:50:0c:60:9d:80:cf:63:5e:77:0c:
e7:31:cf:04:26:f8:63:f9:07:9c:ff:bf:9a:01:cc:
ba:c3:5f:a0:2b:60:c5:b4:09:ba:29:9d:67:a6:f1:
dc:5d:d6:de:06:a3:85:b8:62:1f:3b:bb:b7:32:5c:
87:70:a9:8e:7e:ca:97:d8:14:c9:f1:93:ba:ef:1d:
90:c9:09:9f:b2:9a:67:9d:b1:be:cb:c8:67:f8:5b:
04:8d:fe:0a:0a:42:8b:99:15:8e:d9:b0:d8:ba:85:
48:57:a9:9a:b0:bc:ef:fc:b3:66:59:94:58:45:fb:
20:d7:da:b8:52:83:04:26:5b:37:66:ff:2f:d7:c0:
fb:7d:1a:0e:51:c0:a7:13:fd:ac:a5:d7:a5:88:e3:
22:11:c2:2f:36:11:67:c2:2b:ab:1d:9e:58:45:e4:
de:c0:9b:1d:96:a4:04:5b:a6:83:06:f8:ed:95:c0:
51:0e:bd:91:07:86:6a:78:8f:3e:ce:d0:29:2c:8c:
03:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C9:45:E4:E4:89:1E:D9:16:16:9D:2D:83:E3:1D:C8:AE:DE:AE:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DBB72EC0EAB11EFB2A4C170017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.214.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:fd:09:18:df:14:9d:29:0e:37:63:ed:54:c9:2c:43:c0:1e:
71:a5:08:7a:2b:6c:a6:64:fc:93:76:02:b0:49:1a:40:be:4d:
f3:5e:ba:06:66:8a:4c:29:62:1d:fb:8f:3e:40:2c:8d:ee:59:
3f:12:e8:e3:c6:a0:ea:e8:e4:22:44:fd:76:90:cb:83:fc:fa:
8a:82:a0:b7:93:18:b9:2a:2d:8e:4b:0b:af:84:67:8c:d3:da:
da:5c:05:17:90:8e:cd:8b:fd:31:bd:d5:4b:79:89:54:2d:63:
4b:78:07:9e:c5:e2:10:0c:aa:3b:ec:7a:17:d1:e0:9b:18:5b:
3c:9b:5f:9e:db:d2:76:8b:3b:07:00:b5:e8:4b:99:ca:9a:3f:
7e:32:96:3e:b2:86:11:f2:9c:5c:3e:2c:76:3b:77:3d:ae:54:
a7:02:5b:de:ef:48:c2:8a:e2:f0:cd:1d:4b:b5:6e:84:0c:59:
01:40:e1:99:7d:dc:ed:5d:55:16:ac:6b:71:4c:44:75:06:e6:
1d:79:d9:42:b6:06:46:1a:0a:71:db:2b:94:9b:cb:e0:33:b1:
a9:52:9b:ee:92:72:e3:76:af:c2:bb:70:47:da:54:05:cd:6b:
e2:c5:66:73:fc:0b:5f:95:6a:20:66:71:86:e1:94:63:9d:ce:
cf:36:b9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:40:32 2024 by rpki-client on console-ams.rpki-client.org