Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C8261C80EAD11EF8641E806017001B1.roa
File: 9C8261C80EAD11EF8641E806017001B1.roa (raw, json)
Hash identifier: Aq+TZp8IVwGJDOdWunVsNoLMuALX/FGQAxJj5O2/TFM=
Subject key identifier: 5C:60:8F:88:58:2D:D1:3B:1A:FD:12:62:A1:6E:2A:05:65:28:04:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B69A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C8261C80EAD11EF8641E806017001B1.roa
Signing time: Fri 10 May 2024 09:13:49 +0000
ROA not before: Fri 10 May 2024 09:13:46 +0000
ROA not after: Mon 20 May 2024 09:13:46 +0000
asID: 142062
IP address blocks: 154.206.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46746 (0xb69a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 09:13:46 2024 GMT
Not After : May 20 09:13:46 2024 GMT
Subject: CN=663de54d-d016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:84:ae:a5:ce:02:d2:94:84:72:92:59:bd:6e:
0d:fd:ef:6b:8d:13:f3:76:13:2e:e2:00:4f:bb:18:
ef:b9:11:e5:78:74:e2:7d:bb:d4:b8:57:a8:35:6b:
bc:c6:aa:d2:83:4e:2a:8a:cf:c7:42:a8:25:d3:88:
d4:ea:41:b4:f2:a4:20:5f:4a:de:28:8a:80:f2:31:
1b:5d:27:09:e6:42:6a:06:50:bf:48:ce:71:5e:df:
75:bd:20:b6:aa:fb:02:7b:c7:b7:c8:70:5a:b3:56:
6a:84:0e:b3:4c:8f:16:16:dc:2d:95:a9:8f:96:df:
64:67:e6:15:d7:b1:1e:21:b9:ec:44:54:c0:18:30:
cc:47:da:0c:94:e3:a2:85:67:ed:c9:37:4c:4c:2e:
c8:b8:f4:27:5d:da:c7:bb:1a:ba:38:7d:de:05:75:
e0:5f:ab:49:15:9e:36:56:e6:3b:32:95:a3:e2:04:
3f:5d:f9:04:48:b1:b0:8a:64:39:fc:0f:2b:38:49:
f8:09:e7:ae:ef:7d:48:9e:aa:ed:8e:e3:07:ab:eb:
17:0a:39:f1:66:2a:08:c6:9f:e5:50:c2:c4:77:92:
78:5f:4c:a0:1a:39:c9:95:21:70:93:0b:5e:38:96:
75:4b:a7:ed:ad:a3:4e:15:e0:d5:42:0d:4b:fa:27:
89:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:60:8F:88:58:2D:D1:3B:1A:FD:12:62:A1:6E:2A:05:65:28:04:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C8261C80EAD11EF8641E806017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.231.0/24
Signature Algorithm: sha256WithRSAEncryption
64:af:f8:a2:75:09:92:c3:a1:b0:d0:90:6e:ca:bf:31:27:e1:
34:c3:2c:ad:bb:3e:8f:b8:34:55:59:53:fe:61:db:d5:b4:e9:
50:78:1d:10:14:67:8d:1d:d7:a9:43:fb:ae:4b:0d:41:ba:8a:
bb:5b:1d:77:a9:d8:ce:76:b5:74:f9:53:c5:66:5c:43:78:3e:
cb:1a:23:82:cf:cf:11:f9:ea:e8:74:d4:c3:71:0b:ed:69:79:
ca:b4:c7:6d:a8:7f:bc:ab:2d:85:8a:8f:67:98:50:65:59:2d:
4a:fb:c8:36:cb:c5:fe:b7:64:a0:3a:b4:4f:5b:a6:62:2b:5e:
98:5f:11:61:1b:b3:84:19:f1:9d:df:1c:b3:65:c2:71:c9:9e:
56:ea:f2:b7:ff:e3:70:45:d9:05:ef:a9:3b:22:98:05:c9:1f:
d0:0f:ab:1b:bb:48:6f:47:77:8c:19:c2:90:fe:29:c3:58:ba:
3a:79:d6:97:59:e6:87:7b:70:69:c5:66:3e:63:b7:1e:35:83:
8a:d5:b4:ce:c6:d6:c6:a9:82:db:89:37:ec:a6:98:2a:23:ea:
a0:bc:ba:2e:9d:73:70:5a:f0:be:d2:67:42:e9:ed:c7:3b:3e:
fc:28:28:27:94:3e:0d:2d:75:d6:71:50:0c:e6:18:b3:dc:ac:
df:ad:e1:8d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALaaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTEwMDkxMzQ2WhcNMjQwNTIwMDkxMzQ2WjAYMRYw
FAYDVQQDEw02NjNkZTU0ZC1kMDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9YSupc4C0pSEcpJZvW4N/e9rjRPzdhMu4gBPuxjvuRHleHTifbvUuFeo
NWu8xqrSg04qis/HQqgl04jU6kG08qQgX0reKIqA8jEbXScJ5kJqBlC/SM5xXt91
vSC2qvsCe8e3yHBas1ZqhA6zTI8WFtwtlamPlt9kZ+YV17EeIbnsRFTAGDDMR9oM
lOOihWftyTdMTC7IuPQnXdrHuxq6OH3eBXXgX6tJFZ42VuY7MpWj4gQ/XfkESLGw
imQ5/A8rOEn4Ceeu731InqrtjuMHq+sXCjnxZioIxp/lUMLEd5J4X0ygGjnJlSFw
kwteOJZ1S6ftraNOFeDVQg1L+ieJAQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFxg
j4hYLdE7Gv0SYqFuKgVlKATFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QzgyNjFDODBFQUQxMUVGODY0MUU4MDYwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms7nMA0GCSqGSIb3DQEB
CwUAA4IBAQBkr/iidQmSw6Gw0JBuyr8xJ+E0wyytuz6PuDRVWVP+YdvVtOlQeB0Q
FGeNHdepQ/uuSw1Buoq7Wx13qdjOdrV0+VPFZlxDeD7LGiOCz88R+erodNTDcQvt
aXnKtMdtqH+8qy2Fio9nmFBlWS1K+8g2y8X+t2SgOrRPW6ZiK16YXxFhG7OEGfGd
3xyzZcJxyZ5W6vK3/+NwRdkF76k7IpgFyR/QD6sbu0hvR3eMGcKQ/inDWLo6edaX
WeaHe3BpxWY+Y7ceNYOK1bTOxtbGqYLbiTfsppgqI+qgvLounXNwWvC+0mdC6e3H
Oz78KCgnlD4NLXXWcVAM5hiz3KzfreGN
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:48:47 2024 by rpki-client on console-fra.rpki-client.org