Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A010FB4FADB11EE926C95F8007001B1.roa
File: 6A010FB4FADB11EE926C95F8007001B1.roa (raw, json)
Hash identifier: L/nOAtnqRfnDS3n8zR6OL4PI68rKzfNsV/hQiZjiDI4=
Subject key identifier: F0:C8:95:B5:9E:CE:3C:AE:FB:86:58:42:73:F9:02:10:65:B7:C1:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC1B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A010FB4FADB11EE926C95F8007001B1.roa
Signing time: Mon 15 Apr 2024 03:51:18 +0000
ROA not before: Mon 15 Apr 2024 03:51:14 +0000
ROA not after: Wed 24 Apr 2024 03:51:14 +0000
asID: 142062
IP address blocks: 154.206.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44059 (0xac1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 03:51:14 2024 GMT
Not After : Apr 24 03:51:14 2024 GMT
Subject: CN=661ca436-00ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bb:8b:d6:3b:49:7f:05:78:bb:1f:e4:7a:f5:
9e:02:85:7c:f5:56:0e:03:a2:d0:35:8a:42:27:72:
7f:b7:e9:dc:b3:41:81:96:e5:66:66:ba:f7:ba:f3:
08:d4:7b:97:cd:06:27:24:96:9a:01:14:39:c7:71:
1f:3a:82:76:ca:ac:42:a9:c0:22:48:3a:f7:81:bb:
c3:da:6d:67:d6:82:78:81:3e:af:0f:63:e9:a9:63:
c4:b7:e5:75:f6:ce:d4:be:83:47:06:99:6d:45:d4:
4f:fe:96:0b:9c:7f:6e:cd:c2:70:37:a3:92:1c:37:
d5:e3:19:cb:ca:00:ab:58:14:2e:2b:10:cf:8b:ad:
f8:77:a0:75:c4:c3:e9:58:23:bd:68:c9:df:a5:7a:
e9:fd:f5:7d:d8:55:74:ca:54:e9:9e:a1:2a:0b:4a:
e8:e9:b9:4a:16:ba:a8:2a:12:dc:0f:f6:f3:c6:77:
1a:70:b0:2d:89:9b:94:0e:d1:de:fe:c9:ce:78:ff:
bc:43:a2:ad:d6:00:05:03:1b:fe:40:4a:53:6e:49:
ba:9b:a6:e6:2b:49:91:d1:e0:41:fd:90:39:57:39:
c5:f7:8e:cd:4b:f4:c0:6f:f4:ec:78:86:48:d9:b2:
6b:74:3a:6c:03:ce:f4:24:86:58:6a:d9:3a:8a:a6:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C8:95:B5:9E:CE:3C:AE:FB:86:58:42:73:F9:02:10:65:B7:C1:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A010FB4FADB11EE926C95F8007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.219.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:de:db:ff:6e:09:a2:68:23:e4:94:b0:54:45:54:fb:be:73:
ce:7f:88:a2:f1:19:3d:95:96:78:12:ee:23:d7:75:46:e0:b0:
fb:0d:62:49:c6:60:fc:fb:08:e1:ed:7b:dc:7c:14:21:1c:7a:
43:85:81:18:80:0d:26:0f:df:c6:bd:53:d1:c0:48:bb:3c:1e:
de:05:06:19:23:2b:24:bf:b7:79:61:6e:1e:45:e1:0a:d3:48:
89:26:73:5a:ec:7f:81:96:ba:fa:59:14:6f:74:fb:77:e2:df:
f9:c4:30:5b:a0:01:ae:b3:3d:26:91:21:27:ae:40:41:ce:90:
4d:ef:07:7e:3e:43:35:b7:11:1b:12:33:f5:e2:ea:4a:79:39:
c7:20:14:b5:77:ec:15:f3:80:f4:cb:9e:a8:0a:96:48:9f:e8:
b3:31:3b:88:83:e3:bf:51:df:f5:80:d7:72:d4:97:c5:9a:20:
d1:ed:b1:3e:93:a2:fe:4e:9e:7f:01:83:8a:0e:12:f3:6b:34:
e5:da:92:71:c9:a6:2e:89:ee:39:bd:fe:37:bd:cf:47:22:78:
14:ea:c1:97:fd:51:29:77:10:61:ce:c7:e0:7b:d7:ff:53:10:
86:66:1e:9e:de:c3:4a:ae:c9:7d:60:b2:75:44:d4:4e:9d:74:
a1:45:b4:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKwbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE1MDM1MTE0WhcNMjQwNDI0MDM1MTE0WjAYMRYw
FAYDVQQDEw02NjFjYTQzNi0wMGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA47uL1jtJfwV4ux/kevWeAoV89VYOA6LQNYpCJ3J/t+ncs0GBluVmZrr3
uvMI1HuXzQYnJJaaARQ5x3EfOoJ2yqxCqcAiSDr3gbvD2m1n1oJ4gT6vD2PpqWPE
t+V19s7UvoNHBpltRdRP/pYLnH9uzcJwN6OSHDfV4xnLygCrWBQuKxDPi634d6B1
xMPpWCO9aMnfpXrp/fV92FV0ylTpnqEqC0ro6blKFrqoKhLcD/bzxncacLAtiZuU
DtHe/snOeP+8Q6Kt1gAFAxv+QEpTbkm6m6bmK0mR0eBB/ZA5VznF947NS/TAb/Ts
eIZI2bJrdDpsA870JIZYatk6iqbN8wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPDI
lbWezjyu+4ZYQnP5AhBlt8FqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QTAxMEZCNEZBREIxMUVFOTI2Qzk1RjgwMDcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms7bMA0GCSqGSIb3DQEB
CwUAA4IBAQAs3tv/bgmiaCPklLBURVT7vnPOf4ii8Rk9lZZ4Eu4j13VG4LD7DWJJ
xmD8+wjh7XvcfBQhHHpDhYEYgA0mD9/GvVPRwEi7PB7eBQYZIyskv7d5YW4eReEK
00iJJnNa7H+Blrr6WRRvdPt34t/5xDBboAGusz0mkSEnrkBBzpBN7wd+PkM1txEb
EjP14upKeTnHIBS1d+wV84D0y56oCpZIn+izMTuIg+O/Ud/1gNdy1JfFmiDR7bE+
k6L+Tp5/AYOKDhLzazTl2pJxyaYuie45vf43vc9HIngU6sGX/VEpdxBhzsfge9f/
UxCGZh6e3sNKrsl9YLJ1RNROnXShRbRB
-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:43 2024 by rpki-client on console-ams.rpki-client.org