Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75E4F9CEFBA511EE888D8C68017001B1.roa
File: 75E4F9CEFBA511EE888D8C68017001B1.roa (raw, json)
Hash identifier: Yg+IE1WMSBz8klCVjs0hR5kwWS1EVrY+bc3E04wihDY=
Subject key identifier: 9C:C8:20:5F:30:78:DF:79:9C:43:A3:29:27:81:66:93:A2:FA:62:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD71
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75E4F9CEFBA511EE888D8C68017001B1.roa
Signing time: Tue 16 Apr 2024 03:57:36 +0000
ROA not before: Tue 16 Apr 2024 03:57:32 +0000
ROA not after: Wed 24 Apr 2024 03:57:32 +0000
asID: 142062
IP address blocks: 154.206.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44401 (0xad71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 03:57:32 2024 GMT
Not After : Apr 24 03:57:32 2024 GMT
Subject: CN=661df730-5797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:09:5d:4c:e1:bb:54:eb:eb:84:b7:91:89:e4:
ed:e5:2d:6c:f3:e6:60:d1:c5:f8:0c:e8:ba:11:6a:
d4:5c:6e:53:c2:01:39:dd:9f:d1:f0:a8:7d:ee:72:
a2:4f:0e:68:d3:24:eb:0c:fc:6c:25:7f:b2:41:88:
91:98:9c:db:53:ac:17:45:25:9c:e8:bc:02:24:a4:
f7:2e:5e:b4:02:84:f5:3e:c1:90:a8:e7:30:34:c8:
f5:1e:59:90:51:4f:e6:83:e9:f8:8c:24:9e:ad:c1:
1a:35:28:7f:4a:f2:0c:f4:87:62:5b:72:a9:ca:ee:
42:c1:ca:7a:6f:3c:30:09:8e:68:f7:0f:2e:22:ba:
6f:f6:1d:52:76:32:c7:b5:44:e4:d7:00:72:57:de:
e8:dc:95:e8:a6:6e:6f:d1:f5:9d:e3:b7:0d:b1:d8:
ba:ac:1c:9c:52:a9:c4:05:aa:b6:5d:47:8a:19:90:
87:73:82:b0:b3:96:e6:5c:15:f7:2f:a1:f4:d6:3e:
7e:4a:7c:f9:46:ef:da:16:ff:b1:16:b5:1d:df:1f:
98:0d:f0:a9:dd:78:17:c0:c7:cb:d3:72:f3:7d:b4:
95:79:26:6f:6e:1b:1a:90:24:86:41:36:5e:60:04:
f6:da:3d:c3:e6:c3:b2:b7:3c:64:39:f6:e0:3f:0d:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C8:20:5F:30:78:DF:79:9C:43:A3:29:27:81:66:93:A2:FA:62:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75E4F9CEFBA511EE888D8C68017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.213.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:40:f6:17:f0:2f:e7:cb:c5:d8:79:c1:41:79:f9:0b:10:83:
f8:3a:9b:91:94:7e:86:76:24:d2:95:64:d2:95:60:2e:34:07:
77:60:33:7a:a2:f4:8a:93:db:27:5a:ba:bc:dc:39:32:18:14:
b1:8b:3d:12:83:df:1d:b3:aa:87:7b:35:30:74:7a:8c:a3:a6:
ef:6b:66:8e:61:7e:fe:7d:f5:ce:7b:ba:18:8c:14:a0:e2:67:
af:74:b1:37:4c:fb:33:2e:ce:bc:56:90:a4:de:38:6e:35:14:
9f:95:c4:8f:b5:22:15:e4:04:0c:bd:9c:a1:ed:35:1a:36:51:
5b:4c:41:f7:07:aa:17:d0:38:3a:9c:3e:d8:9c:68:09:46:5d:
af:15:68:28:c1:cd:89:a4:f6:3a:0f:07:91:38:41:95:0c:18:
94:bb:54:f3:40:48:39:6f:6c:a4:e4:22:6e:77:6f:88:5b:7a:
3a:95:98:03:09:c3:9c:6f:a2:62:d6:66:a5:df:65:bb:33:55:
21:1e:bc:ee:ad:81:52:50:4f:94:2c:75:97:b8:95:e8:6d:be:
03:a0:de:5a:3b:a6:51:a2:0b:25:9b:2d:f9:d4:6f:c8:ef:23:
0c:ea:86:a6:ff:c7:55:cd:02:e3:de:49:d9:d3:84:10:01:f3:
32:e8:a3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:43 2024 by rpki-client on console-ams.rpki-client.org