Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82F850700EAB11EFBDFFEAF5007001B1.roa
File: 82F850700EAB11EFBDFFEAF5007001B1.roa (raw, json)
Hash identifier: Y5FrS0q8cwdP3haTNO+5vcJeVFHRX3SBN1hksyaQWYg=
Subject key identifier: E4:06:DF:B4:2C:81:EB:64:B5:B2:BD:35:D8:5B:58:18:92:5D:D5:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B67E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82F850700EAB11EFBDFFEAF5007001B1.roa
Signing time: Fri 10 May 2024 08:58:47 +0000
ROA not before: Fri 10 May 2024 08:58:44 +0000
ROA not after: Mon 20 May 2024 08:58:44 +0000
asID: 142062
IP address blocks: 154.206.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46718 (0xb67e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 08:58:44 2024 GMT
Not After : May 20 08:58:44 2024 GMT
Subject: CN=663de1c7-0a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:fc:68:7a:6f:50:e0:f1:08:a2:99:5d:8a:
34:10:04:f7:25:14:a0:41:e8:9f:f6:08:e3:c3:10:
bc:f9:df:31:79:41:44:9d:d6:d6:85:6e:3f:02:5d:
d5:7b:22:a2:46:85:9b:e0:99:29:a7:e5:d9:3a:e6:
68:a7:2f:97:e0:3c:aa:19:a0:3c:98:9d:d5:f6:77:
81:ea:e1:48:57:24:17:ec:67:e3:4b:3b:82:bd:87:
7e:d5:ac:5a:32:a6:77:59:be:4a:52:77:e7:2e:f4:
80:6a:a9:5d:a2:98:4c:f4:36:38:a3:42:07:09:d7:
e7:87:87:58:9c:a1:cb:bc:2d:74:6a:df:82:8f:1e:
c6:34:64:b3:c6:5b:6f:e5:dc:79:b2:ce:21:7b:8e:
db:15:52:37:c2:eb:0b:be:e0:ac:57:50:05:24:91:
f1:8b:80:84:45:b1:a8:3a:54:46:b2:2d:8e:70:a5:
be:58:a1:71:3e:28:3e:58:9c:5a:48:dc:c4:7e:e9:
b9:23:82:25:da:87:35:ea:50:1f:87:b4:08:18:e4:
69:e6:d8:2d:c9:2f:77:97:eb:6f:36:de:f2:d1:4c:
fb:a5:f2:8b:af:81:bf:bf:1b:ef:2a:8b:b8:7c:f9:
ef:c8:1e:3d:d7:4f:58:ed:ff:e3:ff:9e:50:b7:c5:
d3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:06:DF:B4:2C:81:EB:64:B5:B2:BD:35:D8:5B:58:18:92:5D:D5:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82F850700EAB11EFBDFFEAF5007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.217.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:71:69:14:5b:d9:f4:1e:da:1c:fc:bb:96:63:d9:ce:3e:f6:
11:b4:aa:a7:ed:3f:8c:0a:db:7e:33:9f:7f:36:b0:05:89:fd:
c3:04:c9:41:6c:28:f5:b2:9e:6c:4e:89:9e:6c:e2:19:ec:5d:
55:b2:25:f0:c6:08:5f:43:80:88:45:fc:27:70:0e:3f:0f:8a:
c9:52:34:d3:ea:2f:13:30:ba:1e:91:20:63:5b:e9:dd:04:e2:
5e:55:fc:c0:0e:02:6c:a6:8f:6d:f9:dd:c5:1f:36:d5:22:f0:
fe:c9:73:43:ff:26:e2:da:93:38:95:38:55:ca:8c:60:10:5e:
19:9d:31:84:2d:51:40:ce:8a:83:d2:a7:54:3a:56:3e:04:7d:
68:2a:23:db:4e:25:df:4f:0f:c0:c6:d9:6e:e4:3d:99:92:b3:
9b:44:12:72:df:d5:7b:71:1d:83:47:13:4d:11:da:3d:65:fd:
93:bd:a6:60:12:c2:92:dc:b3:2f:5b:cd:17:a2:82:59:54:4d:
9c:97:f5:70:9d:01:b3:00:73:4f:75:71:d1:ed:61:84:4b:78:
a6:12:6d:1b:bf:ac:bb:93:e5:66:41:73:0a:7a:55:60:0f:19:
b8:76:c4:72:51:bf:68:5c:9f:98:26:9e:37:37:79:03:ac:9e:
3b:26:60:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:52 2024 by rpki-client on console-ams.rpki-client.org