Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/627FEE7E0EAC11EF93F425FC007001B1.roa
File: 627FEE7E0EAC11EF93F425FC007001B1.roa (raw, json)
Hash identifier: fuYSr2POBCSOe4pc1UazmVUq8MyvXNQ0qXrgOLmEBzg=
Subject key identifier: 26:13:CB:39:C4:CA:C2:69:2E:7E:57:65:83:EF:AD:A4:AD:56:E8:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B68A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/627FEE7E0EAC11EF93F425FC007001B1.roa
Signing time: Fri 10 May 2024 09:05:02 +0000
ROA not before: Fri 10 May 2024 09:04:59 +0000
ROA not after: Mon 20 May 2024 09:04:59 +0000
asID: 142062
IP address blocks: 154.206.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46730 (0xb68a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 09:04:59 2024 GMT
Not After : May 20 09:04:59 2024 GMT
Subject: CN=663de33e-0057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:5f:34:bc:12:5c:57:88:45:43:e9:d6:e5:
d4:23:ef:1f:d6:df:c8:ed:a5:51:2f:95:83:dc:1f:
60:2b:7e:12:22:bd:73:10:b7:4a:4b:cb:43:3f:40:
26:01:1a:89:4e:a7:4f:8a:8a:bd:5f:1f:68:2d:c0:
1a:3b:8e:e3:06:0e:82:f4:f0:ca:6b:90:a1:c7:f1:
3a:97:c7:40:42:6b:3f:05:51:b6:15:5f:72:6b:b8:
32:22:c9:9e:01:ba:c6:fb:38:c0:2b:7e:b8:32:68:
01:9f:f3:3f:5d:e0:9d:9e:bb:dc:a1:2d:21:6d:de:
35:48:5a:87:71:54:f8:30:49:c2:85:32:d6:70:60:
ef:fc:7a:ac:4c:40:13:45:db:06:03:6f:6c:08:fa:
6b:d5:dd:fc:db:a9:c4:0b:af:d4:34:27:1b:22:18:
ed:be:96:5c:26:c0:67:3a:71:80:ea:f5:ad:14:04:
cb:d5:49:76:3d:10:57:fb:07:34:ec:ec:61:a3:19:
39:4f:c5:58:6f:90:32:85:5a:b1:94:c7:0a:3a:59:
23:89:00:35:c6:59:5b:56:74:36:b4:b9:ce:4c:c6:
03:a3:3a:8f:4b:f8:82:5b:a3:dc:12:67:14:a9:9b:
10:eb:ba:c3:c1:08:66:7a:b3:41:29:c5:ac:b7:b6:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:13:CB:39:C4:CA:C2:69:2E:7E:57:65:83:EF:AD:A4:AD:56:E8:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/627FEE7E0EAC11EF93F425FC007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.226.0/24
Signature Algorithm: sha256WithRSAEncryption
72:c6:82:9c:ed:53:71:74:29:b1:9d:75:94:f5:8d:40:24:58:
fd:12:a0:a4:56:44:0e:d4:34:30:bb:7b:66:20:c4:73:b7:65:
4e:1a:cc:e0:b8:eb:40:16:37:94:34:f9:6e:d2:f7:4e:e3:f6:
b2:6d:32:4c:dc:13:75:68:90:a0:52:b9:f5:95:e6:7f:04:d2:
b9:85:ba:a1:ed:6f:bd:3d:a5:d2:06:86:2d:cb:48:27:83:35:
1d:08:07:15:ff:3c:bd:34:5d:af:1a:e3:78:a0:8c:de:1e:33:
a9:6a:95:ef:0f:53:75:4d:a0:b9:10:d5:6f:f7:84:aa:f8:23:
05:3f:1f:8d:36:9d:39:04:a7:06:e9:c1:30:e9:0a:c1:dd:e3:
ba:5c:c9:2f:0c:4d:a3:63:e5:bf:5d:6d:89:a5:5d:66:b1:6d:
de:a6:c4:72:7a:66:5a:1f:43:c4:a5:03:e4:b2:70:c0:be:a0:
97:f2:1e:d1:6f:7a:c7:59:df:63:45:6f:eb:d7:f0:c0:f7:56:
a6:8e:ea:53:6b:a8:53:f0:84:98:0a:df:b2:7e:75:1e:2e:64:
92:45:c1:04:b1:ba:82:be:be:38:76:c4:73:27:9c:da:72:02:
5b:b3:ef:e8:10:24:84:64:d6:9c:c6:84:d6:19:76:73:d2:84:
b4:ad:bc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:23 2024 by rpki-client on console-ams.rpki-client.org