Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ED20F0605F311EEA1D3DD2F4AD9E6FC.roa
File: 8ED20F0605F311EEA1D3DD2F4AD9E6FC.roa (raw, json)
Hash identifier: 6LCjYNSW/8Ncp/0Obrc3Xh1N2p4TE62c4nxcVnHcrhg=
Subject key identifier: 4C:8F:FA:89:D6:DC:AE:4C:5C:01:E9:99:D3:01:31:26:B5:96:8F:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 29D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ED20F0605F311EEA1D3DD2F4AD9E6FC.roa
Signing time: Thu 08 Jun 2023 11:56:53 +0000
ROA not before: Thu 08 Jun 2023 11:56:49 +0000
ROA not after: Wed 01 May 2024 11:56:49 +0000
asID: 137443
IP address blocks: 154.218.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10710 (0x29d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 8 11:56:49 2023 GMT
Not After : May 1 11:56:49 2024 GMT
Subject: CN=6481c205-2160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d4:4d:e5:2e:e9:2d:38:6e:1e:21:36:8f:e1:
79:3d:c6:00:fd:4f:4d:8b:0f:07:77:a8:85:d9:c6:
cd:23:9b:b9:98:fa:79:d8:9b:0e:90:7f:28:f2:ef:
54:68:fe:bf:92:3d:50:79:99:1d:20:ad:a1:97:8c:
e2:95:06:be:5a:34:1a:3f:f2:fb:77:d7:0e:37:8c:
e4:3c:04:4d:04:76:8c:04:2d:0e:3a:92:0b:c9:2e:
45:4a:77:96:6d:b4:43:27:f9:f1:8e:70:0d:5c:b5:
90:e1:b9:45:cc:64:21:65:7c:ba:c6:31:d7:73:ad:
5e:0c:22:a3:3e:53:9f:9e:ff:53:41:55:e5:ee:ab:
03:e1:be:9f:82:16:b4:1a:16:af:b5:5e:71:81:36:
ae:3e:4c:ae:97:76:c5:a1:88:9a:ab:01:83:35:ab:
ee:31:51:93:1e:09:ed:35:93:b2:17:da:a6:03:02:
77:f4:b4:ca:b0:67:d8:4a:c5:ac:a7:19:49:b8:c6:
56:9e:8f:12:a7:5f:7c:8e:2b:73:81:aa:34:9f:ee:
b6:23:08:ac:e3:54:53:31:fd:09:4e:8a:b5:63:e6:
e2:86:6e:06:93:e6:ef:1d:ec:51:fd:ae:5e:6a:5e:
44:13:36:5b:fd:09:b5:29:df:4b:fc:84:14:70:5e:
90:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8F:FA:89:D6:DC:AE:4C:5C:01:E9:99:D3:01:31:26:B5:96:8F:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ED20F0605F311EEA1D3DD2F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.6.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b9:8e:02:93:a5:4c:ed:4a:ba:fd:da:cf:68:69:fa:7d:03:
f2:9d:aa:a5:e2:93:98:c8:a0:eb:76:9a:70:5f:7a:30:07:bd:
e3:78:70:0e:3d:5a:47:cc:e6:93:38:85:cd:e5:db:a0:f3:60:
ce:dd:69:d4:e2:29:bc:85:f8:79:9e:f7:19:ee:4a:13:8e:c4:
ae:cc:de:c2:cc:af:cd:41:a9:0c:32:e9:c4:9c:80:62:73:0a:
10:18:51:9b:1e:35:fc:ec:5f:2a:26:fb:f8:a7:79:45:74:aa:
d2:ba:1b:72:9e:38:1e:1e:5d:fd:0c:4a:06:62:77:7e:f1:19:
d5:ff:b6:6d:d9:e0:6a:b0:a1:85:44:41:50:6f:48:8e:b3:8b:
df:fc:ba:1a:e9:ea:e4:97:dd:b4:37:92:d3:8b:1e:05:f2:58:
22:e4:27:44:f8:f4:af:9c:72:2a:4a:1f:16:75:23:4a:67:b2:
ca:8f:12:52:b2:a7:e4:34:ac:e9:10:db:bd:a5:68:00:83:5c:
4d:51:84:99:14:e9:a3:33:8d:8f:d6:07:4f:0e:1a:ce:ca:ba:
50:40:75:5b:48:f5:63:85:73:a2:1c:0a:79:b8:a7:5d:5f:cb:
e0:3f:f0:0b:2b:e9:11:74:28:a0:a1:7d:2f:22:87:c9:5d:ec:
07:17:6b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:38:48 2024 by rpki-client on console-ams.rpki-client.org