Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AA6EA76FADB11EE9A01A1FC007001B1.roa
File: 9AA6EA76FADB11EE9A01A1FC007001B1.roa (raw, json)
Hash identifier: A0cnnnOJIQ59KR1+21g0imzzpMBQVmsZtCDnDPHIgEc=
Subject key identifier: F5:9E:0C:D7:DC:BE:7A:70:1F:C4:32:19:3A:29:23:7A:D3:21:E1:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC1D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AA6EA76FADB11EE9A01A1FC007001B1.roa
Signing time: Mon 15 Apr 2024 03:52:39 +0000
ROA not before: Mon 15 Apr 2024 03:52:36 +0000
ROA not after: Wed 24 Apr 2024 03:52:36 +0000
asID: 142062
IP address blocks: 154.206.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44061 (0xac1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 03:52:36 2024 GMT
Not After : Apr 24 03:52:36 2024 GMT
Subject: CN=661ca487-bd59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:8c:16:ec:4b:b5:92:3f:ed:94:69:25:1c:
ef:1d:df:e8:7f:e1:cd:19:e4:bc:73:91:c4:51:90:
51:83:58:a1:2f:86:fa:31:7f:7a:17:a7:5d:05:a5:
07:9f:67:58:b3:bc:de:74:0f:cc:a8:43:e7:59:f7:
35:96:07:98:a8:26:f9:1d:1a:20:bf:77:ad:72:70:
57:a6:25:1b:58:89:de:65:5a:60:ef:35:8e:56:cf:
ee:a9:33:68:15:d3:f3:1d:39:96:af:72:38:e1:46:
dd:aa:9a:ca:76:e0:a1:6b:a6:a3:4d:39:3c:c0:ac:
a3:96:bd:5d:72:b3:5a:42:e1:b8:d1:c9:e1:ca:10:
6a:6f:46:30:b6:8d:1a:91:de:6b:46:6d:c6:7c:14:
47:53:61:4b:f1:32:29:dd:4d:22:ec:9a:f1:d6:1d:
8f:fd:9e:c1:26:c9:c9:0d:2c:00:1d:54:d7:ce:33:
6c:e2:4d:42:fe:bf:e8:b6:99:c6:5a:7a:23:9a:88:
24:89:93:cb:6c:a2:1e:3f:53:b4:87:9d:23:f0:cf:
8c:8a:c1:77:e1:cb:34:62:10:0a:ca:b6:59:5c:88:
9b:c4:39:c8:d6:9b:8a:5d:57:ac:14:ed:c7:16:b7:
fa:61:60:6d:19:3b:41:ff:b6:bf:08:34:b7:5f:be:
c2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9E:0C:D7:DC:BE:7A:70:1F:C4:32:19:3A:29:23:7A:D3:21:E1:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AA6EA76FADB11EE9A01A1FC007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.220.0/24
Signature Algorithm: sha256WithRSAEncryption
46:b2:3a:0f:1d:0c:65:a0:87:4e:ae:40:8b:16:c1:ab:c3:09:
0a:8d:4d:7c:41:e3:05:91:aa:fb:9d:6a:19:20:21:3c:ab:7c:
6e:00:5f:57:b4:32:8a:4b:10:13:84:56:92:8b:56:26:c0:de:
28:91:cf:1e:80:2b:22:1b:6e:14:d0:98:90:2c:34:b8:4e:ce:
16:39:ab:46:5c:03:0a:43:a0:88:f2:67:16:db:49:83:dd:b7:
c4:16:12:a7:c1:19:9a:86:89:be:15:7e:10:05:ba:a2:53:b9:
a9:0f:d1:d7:23:b2:76:10:6b:d7:87:d8:4f:4c:50:04:87:dc:
d2:27:2a:11:cf:55:5d:f1:15:30:41:ea:8f:40:d3:fc:e8:88:
9e:b2:1b:56:d8:2b:2d:5f:59:21:75:be:e7:2c:1d:fb:78:4b:
b6:4f:bf:47:d0:84:08:43:2d:80:ba:01:9e:0e:dc:74:aa:76:
7e:7c:f8:61:5d:88:c8:26:1e:3e:0d:5e:28:32:70:82:00:3c:
c7:cc:63:09:0b:88:d4:9e:4c:ae:73:0b:dd:eb:c6:59:89:d6:
d3:d2:f5:8a:73:8a:10:4a:77:1d:a5:7b:f8:ad:5b:0f:b9:7b:
6f:58:75:0e:2e:fb:3f:72:e0:08:14:fc:da:a0:6c:49:0a:d3:
83:b8:7d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:39 2024 by rpki-client on console-fra.rpki-client.org