Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A4ABD90FAE211EEA4FE7B30017001B1.roa
File: 8A4ABD90FAE211EEA4FE7B30017001B1.roa (raw, json)
Hash identifier: 8JOeCu88fzxryi/EvN6u8ZtRfFE822S0bQdrt3Ji2v0=
Subject key identifier: F8:9B:0D:AD:10:06:A1:2D:FD:8F:2D:BC:54:55:A1:DF:E6:8D:28:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A4ABD90FAE211EEA4FE7B30017001B1.roa
Signing time: Mon 15 Apr 2024 04:42:18 +0000
ROA not before: Mon 15 Apr 2024 04:42:15 +0000
ROA not after: Wed 24 Apr 2024 04:42:15 +0000
asID: 142062
IP address blocks: 154.206.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44114 (0xac52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 04:42:15 2024 GMT
Not After : Apr 24 04:42:15 2024 GMT
Subject: CN=661cb02a-3efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:31:9c:a3:69:2d:5d:a9:ea:a8:18:59:57:b9:
ab:c0:35:b7:d3:e1:81:28:46:6c:7d:61:c6:29:9e:
6e:10:8d:56:54:06:0a:3b:f1:2d:1c:b9:8e:83:14:
be:fb:91:e8:4c:9f:c5:09:18:b7:36:39:5a:7f:cd:
24:c7:ec:88:b4:50:b4:82:3a:8b:5c:38:ac:73:fe:
0a:c7:72:6f:c2:e9:fa:91:f9:d9:1c:71:05:3d:14:
8c:c8:d9:db:0d:2a:9d:bc:be:c2:19:f1:7b:9a:33:
13:c8:ac:8d:1f:8d:db:32:17:a4:34:80:5d:80:94:
ba:b1:ef:54:46:cb:7e:1f:cd:4b:ab:78:17:90:f6:
de:4d:ff:ce:c0:e0:49:83:75:2e:f3:5a:54:af:cb:
70:9f:10:b8:af:cd:83:0e:de:39:70:80:f0:ea:e0:
75:14:3b:58:b4:ba:76:ec:e5:59:d7:b8:31:96:d6:
bc:c4:89:88:00:4b:fe:c4:cf:bc:41:06:d7:29:16:
52:52:6d:b3:2c:63:65:42:e6:bd:61:87:21:8d:e0:
06:9f:97:3d:67:8b:b3:14:66:bd:b0:86:28:ea:e1:
71:fc:22:7a:48:6f:60:a4:8f:42:cf:1c:34:00:08:
cc:c8:2c:08:6e:37:29:18:67:cb:8a:2c:d0:7d:02:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9B:0D:AD:10:06:A1:2D:FD:8F:2D:BC:54:55:A1:DF:E6:8D:28:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A4ABD90FAE211EEA4FE7B30017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.229.0/24
Signature Algorithm: sha256WithRSAEncryption
65:26:c5:ed:d0:37:97:ad:3f:7d:bc:75:7a:e1:4d:0c:93:48:
3b:61:4d:57:52:6f:06:7b:31:cb:9a:d0:8c:99:18:68:cb:ce:
d5:67:3f:b9:6d:b5:aa:84:7a:45:97:07:bb:a5:fe:5b:1a:f1:
3e:4a:3e:c8:7e:ed:bf:56:c9:f2:cd:5e:1e:52:24:34:d8:9b:
b9:69:37:8c:ba:53:a4:29:84:9d:45:d7:a7:55:ec:b5:79:6c:
af:63:52:2a:d0:ed:ea:02:3f:dd:f8:17:3d:9d:d9:fb:fb:68:
ba:44:e9:63:12:12:69:55:af:6f:aa:fc:5d:f1:49:53:52:ea:
b5:14:6d:c5:40:87:21:22:b7:bd:ac:32:dd:d4:9b:02:4f:78:
a1:e6:66:64:7c:bb:25:c3:00:d2:94:be:db:6a:3d:2c:0a:0d:
7f:54:a2:71:e8:b2:94:36:84:fb:ad:a9:86:51:8d:b1:35:a3:
af:a5:4e:a7:71:56:d7:52:f3:d3:b4:26:23:77:83:00:a0:94:
30:dc:d5:08:24:0c:6d:84:30:9c:45:ee:23:cf:98:18:0a:ab:
c7:ca:9b:84:aa:f0:a5:ad:79:e2:08:7f:9f:be:80:07:00:62:
44:03:e2:29:58:29:d4:36:a5:ce:35:e1:1e:0e:65:e5:70:73:
ae:00:fd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:38 2024 by rpki-client on console-fra.rpki-client.org