Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EB58B00FBA711EE85D7DFFF007001B1.roa
File: 9EB58B00FBA711EE85D7DFFF007001B1.roa (raw, json)
Hash identifier: L77gT+GDOgRJJ8Goq+okSIhFixQ0jMNhOe5g2DOceuE=
Subject key identifier: 2F:39:F1:2C:C4:B7:79:F1:97:37:73:F4:F1:95:C4:FF:D5:A6:4C:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD89
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EB58B00FBA711EE85D7DFFF007001B1.roa
Signing time: Tue 16 Apr 2024 04:13:04 +0000
ROA not before: Tue 16 Apr 2024 04:13:00 +0000
ROA not after: Wed 24 Apr 2024 04:13:00 +0000
asID: 142062
IP address blocks: 154.206.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44425 (0xad89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 04:13:00 2024 GMT
Not After : Apr 24 04:13:00 2024 GMT
Subject: CN=661dfacf-6e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:b4:01:57:20:1c:03:1b:b4:6a:c9:6e:44:
b0:f1:4c:ee:5a:18:27:a1:eb:9f:d9:91:aa:c1:a9:
5b:95:c5:c8:d5:d0:40:6d:6b:50:45:ed:51:9e:be:
05:e5:9f:2a:5c:5e:56:45:71:28:f6:8b:07:92:d5:
23:0c:95:44:a5:de:d9:ab:7f:88:00:d6:87:44:7f:
91:44:e5:bc:32:8a:52:6c:33:34:40:bd:1a:3f:b3:
4f:03:44:ee:28:22:48:d1:93:1c:c6:7f:09:90:0c:
88:f5:13:20:5d:1b:02:94:ba:ff:a4:0f:61:f9:2d:
d4:53:82:6a:a3:77:ec:14:43:64:d3:f1:ed:34:c4:
ee:41:df:62:26:46:a0:c6:0a:47:57:9d:00:7c:e9:
04:8a:97:19:6f:6a:01:c7:16:aa:70:16:7f:89:5e:
87:ab:0b:65:92:ca:58:1a:dc:49:9d:ea:30:e0:a1:
de:32:a2:22:7c:68:00:f2:40:4d:b6:eb:0b:e3:90:
d5:16:88:22:47:c8:2f:18:33:8e:47:02:e5:92:74:
a7:f6:e1:63:a0:26:d2:2d:80:e9:e9:c6:47:67:b8:
c8:85:1d:3e:f1:5b:6f:6e:76:fb:ef:63:fb:44:63:
29:ec:80:c9:62:38:a6:db:ca:d5:af:7f:ab:63:46:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:39:F1:2C:C4:B7:79:F1:97:37:73:F4:F1:95:C4:FF:D5:A6:4C:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EB58B00FBA711EE85D7DFFF007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.225.0/24
Signature Algorithm: sha256WithRSAEncryption
90:11:c3:04:f0:1a:e2:fc:a8:91:17:5c:31:ec:19:2d:1d:66:
d5:8b:7a:db:4e:79:5b:88:7f:b2:3e:d5:56:6b:b4:4a:f3:5d:
23:51:98:39:bc:bc:89:44:7d:7d:7c:b1:a7:e4:3f:09:0b:c1:
76:8e:b4:5a:32:c5:46:88:d1:53:d8:e5:d6:56:c8:75:97:c1:
ad:9f:f0:c3:52:5c:9d:7a:e0:4d:22:59:60:00:a8:56:22:d5:
ba:1a:ea:cb:45:0b:aa:26:38:98:62:76:8f:4a:6e:1e:95:eb:
a1:13:98:73:2e:cd:57:22:64:ba:68:84:b7:8f:f9:5b:f2:d3:
d5:72:8a:25:61:24:83:2d:08:50:21:d2:b0:66:55:58:40:d2:
5a:b6:86:90:a6:b8:32:8a:53:92:93:44:72:b7:43:7e:39:58:
f7:83:dc:64:80:04:33:fb:14:ec:fb:60:08:dc:3f:83:3d:8b:
ac:7c:bf:fa:c4:57:5d:ca:85:05:5a:fc:f5:0a:d1:c8:6d:5f:
cf:7d:b1:a3:6b:c9:35:a4:f6:55:b7:d9:66:e4:2f:1c:a4:b4:
12:b4:f2:99:e6:87:4a:86:37:c4:eb:9f:bf:e1:b1:62:8e:24:
f0:bc:d4:1b:8a:5c:5e:28:60:b5:d7:86:66:75:78:df:01:e0:
9f:04:36:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:44 2024 by rpki-client on console-ams.rpki-client.org