Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A32E234CFBA511EEA0C7896D017001B1.roa
File: A32E234CFBA511EEA0C7896D017001B1.roa (raw, json)
Hash identifier: /duZBVQQOCPxjWXxknNG6wpfFJCK74W9oVarBRl6Bmw=
Subject key identifier: 5F:FF:27:1E:EA:E4:0B:50:EC:90:01:F0:B9:DE:5E:44:CC:B0:79:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD73
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A32E234CFBA511EEA0C7896D017001B1.roa
Signing time: Tue 16 Apr 2024 03:58:52 +0000
ROA not before: Tue 16 Apr 2024 03:58:49 +0000
ROA not after: Wed 24 Apr 2024 03:58:49 +0000
asID: 142062
IP address blocks: 154.206.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44403 (0xad73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 03:58:49 2024 GMT
Not After : Apr 24 03:58:49 2024 GMT
Subject: CN=661df77c-c426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:51:21:b2:09:23:26:f9:9c:73:27:39:7c:
c1:8d:7b:84:99:e3:62:27:c3:f5:34:87:12:7c:36:
31:e3:34:87:47:c0:f3:94:27:b7:93:2a:c9:cb:79:
44:d2:d7:1a:8e:1a:bd:79:b1:11:f3:e5:e4:a6:c0:
5a:eb:1f:30:52:38:1a:84:29:ea:53:70:af:43:07:
d4:a9:c3:81:0c:d7:c9:fe:76:97:03:2a:92:45:42:
6c:c0:21:90:51:63:e0:65:da:38:aa:a7:3f:bd:49:
5d:7f:6e:50:41:83:63:eb:a8:7c:8f:d4:51:50:5a:
d8:29:c2:ba:eb:54:83:2e:53:a9:d1:74:e5:c7:d4:
44:b8:a5:e2:12:0d:41:cc:20:82:16:d1:bf:78:be:
70:a1:b5:01:59:86:de:e5:d1:cc:a1:80:e5:3c:89:
1c:d4:86:74:5d:be:b1:85:62:17:30:b1:96:4c:f5:
7f:b2:91:c7:c7:43:bb:0d:5e:c6:dc:cf:45:7c:60:
43:e3:52:73:12:1c:6e:85:a5:54:8d:44:55:14:ad:
09:21:0a:d7:8a:35:1a:4b:a1:9c:f0:45:cd:2f:75:
cc:ff:d8:3d:3f:23:d9:90:ee:e8:24:19:dc:96:99:
ec:ae:57:55:a8:ff:1b:fa:c1:f4:1b:c5:3c:4d:54:
f0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FF:27:1E:EA:E4:0B:50:EC:90:01:F0:B9:DE:5E:44:CC:B0:79:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A32E234CFBA511EEA0C7896D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.214.0/24
Signature Algorithm: sha256WithRSAEncryption
75:5b:80:45:55:cf:07:bd:2f:02:a3:e3:7e:e1:fe:25:a6:38:
12:ba:47:8f:bc:5c:69:6a:6a:e5:89:03:77:74:df:7e:bb:9a:
a1:1b:72:e5:ef:94:e6:61:3c:d5:95:01:05:2c:23:58:19:7a:
6c:fc:cd:3a:00:18:d4:28:bc:26:5e:78:f7:24:e8:66:f7:67:
ef:6a:e6:42:42:02:85:ac:01:68:1f:ff:6e:76:e7:f6:1f:94:
1f:e2:c3:dd:1a:0d:3a:c1:3a:5b:60:02:7c:b6:4c:07:0b:52:
44:0e:5b:e0:2e:74:93:4c:47:7c:80:e4:f5:8c:63:c6:14:82:
a3:54:ff:74:2f:2e:9a:53:a6:7f:1c:d9:f5:94:a7:55:ee:da:
b7:94:a4:63:63:16:91:e2:bf:67:16:57:0d:00:33:73:5d:d0:
ec:16:d4:d8:89:ff:be:1c:4d:45:61:8a:1d:08:08:b8:0c:90:
95:39:14:88:66:71:76:82:1d:4c:59:9c:fd:13:b1:4e:3d:61:
d3:df:2a:dc:66:29:0e:37:85:d7:e6:ff:17:6f:c6:42:76:5b:
bd:9f:21:de:11:ba:8d:87:bc:5f:d3:fb:33:a1:93:a6:9d:c6:
15:85:04:c3:ce:b8:2f:1d:5b:ee:03:6b:59:8b:2c:d7:63:f1:
2f:e5:6e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:44 2024 by rpki-client on console-ams.rpki-client.org