Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F131170FADA11EEBB821170017001B1.roa
File: 5F131170FADA11EEBB821170017001B1.roa (raw, json)
Hash identifier: WmHtcAJi6V4pE2KTYD8uHrCRBfxJUiB64xyFFzIr+Mg=
Subject key identifier: C3:C1:2F:D0:F1:D6:F0:3D:4D:D5:5F:30:8E:12:72:F3:E9:91:80:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC0D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F131170FADA11EEBB821170017001B1.roa
Signing time: Mon 15 Apr 2024 03:43:50 +0000
ROA not before: Mon 15 Apr 2024 03:43:47 +0000
ROA not after: Wed 24 Apr 2024 03:43:47 +0000
asID: 142062
IP address blocks: 154.206.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44045 (0xac0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 03:43:47 2024 GMT
Not After : Apr 24 03:43:47 2024 GMT
Subject: CN=661ca276-915d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:db:0c:07:91:55:de:4f:d9:f1:1b:27:1b:
2d:be:24:c3:0d:b0:58:77:62:3f:1c:d4:29:80:b9:
1a:52:70:ec:a8:a2:7d:78:d8:ed:08:26:25:4d:f2:
e5:fb:db:83:ee:0e:0c:af:cc:e3:81:45:53:2e:9a:
bd:2a:5a:6a:84:8d:07:6e:ee:ba:2a:c4:d0:c1:73:
4d:c2:ef:91:fe:f1:26:41:77:53:e7:9d:4d:e4:b3:
a2:b4:29:c2:62:70:ec:87:d3:b5:12:a8:cd:c9:23:
05:bf:2b:fe:a3:f4:43:92:b0:07:82:81:4c:e5:25:
2e:42:43:84:62:dc:d5:11:af:a9:26:9f:95:0e:ec:
15:71:54:49:53:94:df:43:a1:33:df:23:6c:48:ce:
c1:13:d1:e6:4c:e6:e4:2f:aa:47:21:8b:7b:70:da:
00:ae:6c:04:40:29:cb:a4:57:fa:45:56:a7:9a:b7:
8c:65:c5:be:b2:a7:9b:5a:c1:60:cb:98:8c:f0:19:
21:4e:06:d9:18:0b:84:77:ef:96:16:75:93:a2:ff:
78:3c:74:b2:16:ea:7e:25:8a:f2:9e:76:5c:9b:d5:
d0:6e:6b:0d:8c:e1:e5:6c:8a:2f:b5:f9:92:bd:bd:
26:af:6b:a0:3c:2c:07:0d:f5:14:0a:67:f0:9f:49:
72:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C1:2F:D0:F1:D6:F0:3D:4D:D5:5F:30:8E:12:72:F3:E9:91:80:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F131170FADA11EEBB821170017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.212.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e2:dc:c9:ac:f1:d5:7c:7a:54:f8:f1:a4:12:6e:e6:40:86:
4e:dd:46:b2:5a:dd:3f:b1:6b:aa:cb:37:a3:1a:03:c4:f9:22:
b5:b5:86:69:ca:7b:8d:37:9f:56:ca:86:b9:f8:93:f2:62:50:
3c:cf:18:2b:a0:45:12:d9:56:80:4a:15:47:86:45:87:2b:97:
8b:b5:83:20:1c:e4:ac:c8:fb:a1:57:47:08:43:46:24:73:2b:
21:33:d5:ae:1c:5f:c4:94:eb:07:fe:e7:2a:dc:23:19:7b:77:
ce:79:dd:41:da:46:39:ae:03:c9:43:40:14:0e:fd:03:23:63:
9b:78:c0:d1:f3:a8:3b:8e:8b:21:42:67:fa:ef:83:26:7f:9f:
60:69:0e:89:ab:8f:e8:7e:22:ad:3b:6b:06:60:69:73:b5:db:
c8:fd:29:c0:54:a3:15:ce:14:f8:b1:f9:d9:85:a8:d8:a1:34:
a3:1f:93:58:1a:49:33:00:e3:11:31:9e:3f:1f:06:68:cd:44:
ef:f0:f1:05:c1:e8:5c:fd:83:e4:10:be:21:3c:9c:0c:01:ef:
f6:f1:0a:2d:43:2a:ec:00:7a:68:87:3b:3a:07:ec:b9:48:8d:
6d:eb:d3:b3:37:81:02:8a:db:6f:fe:48:fe:08:7e:6d:07:82:
d8:b2:7e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:43 2024 by rpki-client on console-ams.rpki-client.org