Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B7E1596FBA411EEA6456C62017001B1.roa
File: 8B7E1596FBA411EEA6456C62017001B1.roa (raw, json)
Hash identifier: rnAl6lFljawALYaxUlZ5rPb1NoqofNtU58QXHonVTqc=
Subject key identifier: 81:82:EF:51:81:4A:A7:CA:77:50:A0:85:46:65:91:0A:5C:F8:EE:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD67
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B7E1596FBA411EEA6456C62017001B1.roa
Signing time: Tue 16 Apr 2024 03:51:03 +0000
ROA not before: Tue 16 Apr 2024 03:51:00 +0000
ROA not after: Wed 24 Apr 2024 03:51:00 +0000
asID: 142062
IP address blocks: 154.206.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44391 (0xad67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 03:51:00 2024 GMT
Not After : Apr 24 03:51:00 2024 GMT
Subject: CN=661df5a7-7f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:7f:6a:25:49:ef:cc:5f:b7:b5:5a:b2:7b:
8c:b2:ce:33:ef:98:66:ee:55:17:ad:db:04:cb:b9:
0d:7b:6f:20:0a:de:25:11:c7:4a:34:fe:97:17:23:
b5:fa:a0:a4:9e:47:53:f5:c7:88:e8:6f:cd:a2:15:
82:c9:83:42:39:d1:2c:4b:cb:99:5b:3d:4d:5a:63:
0a:6e:79:e9:c4:70:53:b0:f6:26:19:cf:c2:b2:d6:
fb:c4:53:bb:ad:e6:00:e6:e7:fb:4d:e3:f5:3d:e0:
62:2b:1c:5d:12:8d:d2:c7:6d:44:a7:47:24:2e:a3:
f3:d4:73:3c:e5:5d:39:50:8c:bf:f6:eb:70:24:80:
5b:67:dc:5f:b4:62:e8:f4:d5:b3:ab:96:de:73:54:
95:99:42:e4:1b:e2:67:ae:5f:ac:ec:c2:b0:90:1c:
0b:81:06:00:17:ff:30:8b:04:4f:c4:51:0b:ee:9b:
32:2a:9b:55:2e:9f:df:18:c9:17:e1:fd:05:51:61:
bc:48:75:ff:c6:f9:3c:a1:ce:7e:1d:98:68:c6:59:
ba:8e:22:4f:c6:d0:72:72:7c:2c:a6:31:80:97:39:
d6:24:ca:28:e2:55:d9:56:59:08:e6:dd:6e:16:5d:
96:99:0d:da:01:32:94:62:04:3b:be:a0:c2:4a:36:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:82:EF:51:81:4A:A7:CA:77:50:A0:85:46:65:91:0A:5C:F8:EE:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B7E1596FBA411EEA6456C62017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.208.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:8d:84:e1:f2:d9:50:3e:78:17:2f:27:85:92:d4:5c:07:d0:
8b:28:40:b0:e4:28:a6:e7:a0:38:f3:23:78:60:f8:b1:4b:7d:
c1:4b:14:88:da:ae:8c:64:f6:7a:4c:a0:34:4b:c2:f4:9d:c6:
a4:b0:31:ec:a9:5d:50:b7:fc:60:f1:84:24:6a:22:59:f7:da:
ac:65:e7:17:4f:bc:69:97:81:7a:95:a4:5c:25:4f:fa:a8:45:
f1:b3:30:6a:bf:e5:e8:7a:e6:99:5e:a3:ce:b3:df:ba:b3:22:
c2:b3:6f:3d:35:59:9f:14:5e:0d:e1:62:61:32:1c:ee:1a:c4:
df:18:c1:69:32:5b:dd:82:c5:cf:27:f4:5f:9e:6c:6e:5a:10:
ec:9c:cb:cd:77:75:b4:1a:ce:6b:79:4f:ba:3c:09:1a:38:a5:
f0:38:24:03:f6:44:1a:bc:bd:80:d7:81:80:55:92:c1:14:a1:
03:14:49:fe:b4:d1:fb:1e:9f:20:9e:c7:34:f9:19:af:0a:af:
75:65:ee:1a:fe:4e:d2:b1:fc:c2:99:4e:1a:a8:c2:7b:7a:83:
79:c5:d5:1e:c7:29:02:88:9a:5f:71:3e:a5:1e:40:2a:01:63:
20:13:dd:a1:4b:2d:5e:4a:cb:14:f3:46:7a:52:73:95:06:3f:
fa:cf:b1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:38 2024 by rpki-client on console-fra.rpki-client.org