Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E6DD736FAC611EE862F913E017001B1.roa
File: 6E6DD736FAC611EE862F913E017001B1.roa (raw, json)
Hash identifier: LNK3plLV/OPMUfcSrVwJvH+qDwbFIi8MXe/HZ9M7y+A=
Subject key identifier: C0:D7:A6:41:A3:12:68:A7:E9:AE:F2:3C:9E:94:8D:32:A9:53:52:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ABD1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E6DD736FAC611EE862F913E017001B1.roa
Signing time: Mon 15 Apr 2024 01:21:06 +0000
ROA not before: Mon 15 Apr 2024 01:21:02 +0000
ROA not after: Wed 24 Apr 2024 01:21:02 +0000
asID: 136933
IP address blocks: 154.213.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43985 (0xabd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 01:21:02 2024 GMT
Not After : Apr 24 01:21:02 2024 GMT
Subject: CN=661c8102-b272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:73:c1:01:d4:52:91:a1:e7:fe:20:31:c2:
4b:da:73:7e:a6:7f:9d:32:25:11:89:8f:35:ac:fc:
b7:c1:94:ba:0e:45:d7:03:c9:9f:ae:10:4e:69:c2:
ce:5d:71:35:c5:e4:6c:1e:c8:95:6a:ff:d9:4a:17:
b2:5c:f3:b6:f4:1c:b0:62:0a:6e:6c:1a:92:96:35:
35:19:0c:85:e2:7f:d8:9d:30:6e:3a:86:6f:a5:65:
69:9f:6c:a3:69:6b:0b:af:fa:69:d6:bd:ff:49:bc:
02:7d:8a:69:71:a2:e5:68:74:41:ba:38:d2:1d:96:
3c:04:db:12:62:ac:51:d7:e9:85:66:4a:99:44:26:
b3:68:36:a0:eb:d2:d8:59:8d:c7:fe:71:fd:4d:03:
83:11:1a:f4:6b:2e:23:92:7d:e9:1b:fe:37:cd:cd:
f1:ec:19:f1:04:d8:58:78:1f:28:56:eb:f0:d6:7f:
a5:d2:a3:ff:05:c6:03:c0:4f:c5:83:b5:b2:08:6c:
9e:2d:cb:2f:b0:3b:ae:f9:5f:bb:82:1f:3c:e0:19:
f5:c6:34:54:5c:13:22:12:26:d7:6c:5b:af:1f:12:
0d:63:65:d2:19:fc:78:bb:60:1d:97:10:18:ca:9d:
0f:89:84:13:60:4a:66:84:9a:d0:12:a7:09:cd:38:
83:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D7:A6:41:A3:12:68:A7:E9:AE:F2:3C:9E:94:8D:32:A9:53:52:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E6DD736FAC611EE862F913E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.22.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:51:da:7a:26:88:2b:0b:47:a1:ab:ef:85:b2:76:9c:a2:72:
e8:a1:74:65:c4:bb:67:cd:ec:88:be:dc:95:9c:46:a2:59:7b:
b6:c0:8c:0f:84:67:ef:42:2a:f2:5c:48:b5:ec:a8:e8:1b:69:
5d:9e:a2:1a:d1:94:8b:29:9f:d8:34:56:24:4e:a5:ea:95:e5:
d6:cb:ba:ad:ce:c1:d2:21:88:06:e6:05:4c:42:63:2c:16:30:
02:3d:86:7f:ef:3f:31:fd:25:af:fc:03:c7:51:79:11:5e:62:
45:e1:5c:8a:7e:b6:6e:22:8d:5c:da:23:f3:86:65:cc:4f:8d:
f4:ee:6c:52:28:67:16:34:fd:ef:74:d9:56:06:74:8c:33:f6:
7c:de:22:8e:09:07:a7:31:1d:76:05:1a:2c:06:1b:12:ea:6f:
47:10:e1:b8:52:73:9d:bd:7e:f4:23:d8:05:11:c3:ab:1d:c9:
0b:16:8b:1f:9f:7f:6c:93:7b:62:b7:66:3e:44:19:01:7e:d4:
8c:35:7a:98:54:8a:6f:87:8c:88:86:ac:ec:34:c3:a5:85:19:
28:76:9b:b4:1f:b9:48:ba:f4:45:9c:f9:7c:0c:d8:c9:16:6b:
26:f6:a0:74:23:a0:c0:49:46:03:fe:4d:d1:cc:98:2e:b6:4e:
b0:a1:7b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 04:12:03 2024 by rpki-client on console-fra.rpki-client.org