Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8C51DA0FAD911EEA8080667017001B1.roa
File: A8C51DA0FAD911EEA8080667017001B1.roa (raw, json)
Hash identifier: nKIIaZ8oEfvRXhd27pHdVHbx4iG4Jx2TClN5v7P1Q/g=
Subject key identifier: F3:63:2F:FD:CA:8E:A2:9A:A0:EF:71:20:C9:8D:1B:B3:98:5C:97:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC05
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8C51DA0FAD911EEA8080667017001B1.roa
Signing time: Mon 15 Apr 2024 03:38:44 +0000
ROA not before: Mon 15 Apr 2024 03:38:41 +0000
ROA not after: Wed 24 Apr 2024 03:38:41 +0000
asID: 142062
IP address blocks: 154.206.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44037 (0xac05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 03:38:41 2024 GMT
Not After : Apr 24 03:38:41 2024 GMT
Subject: CN=661ca144-e356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:65:9d:d6:cd:d5:4a:d7:16:04:27:f6:81:
08:c4:ba:b4:48:a9:da:16:04:92:0a:c0:dd:da:4a:
76:79:ad:f9:3a:b9:21:df:44:f3:e5:f0:8f:78:82:
0d:b1:9a:f9:ad:94:48:35:b1:ea:f7:e5:35:32:75:
52:cf:11:4f:31:1e:6c:53:34:44:09:7d:50:51:e9:
38:4b:33:68:92:ad:30:3d:c8:4a:47:ec:13:7b:12:
4b:f4:6b:46:20:0c:65:cf:09:aa:46:8a:b5:07:42:
7e:47:b6:e1:f3:2f:5b:9f:ac:dc:c6:3e:c6:d5:54:
ff:d6:4f:1a:94:c7:dd:f2:7e:06:5e:54:a1:63:5e:
d2:48:23:ae:1d:9a:b2:91:3f:25:29:6a:c8:30:d4:
9c:32:44:23:42:3a:4b:fd:ca:ee:9a:ff:19:f9:5a:
b9:2d:86:0b:13:5d:ab:c9:68:5d:e9:5b:40:f2:71:
0d:c8:06:78:3a:d6:75:6a:93:e1:20:14:3e:92:35:
e2:16:bc:22:e9:16:5d:92:2c:b6:bf:46:64:8b:8d:
a2:33:58:4a:10:99:14:f8:81:8a:07:ca:68:33:5f:
dd:05:c8:68:0d:40:77:40:05:07:9a:ee:a2:6f:2a:
51:63:95:d6:be:21:88:cc:22:52:3f:91:5c:7c:e4:
ff:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:63:2F:FD:CA:8E:A2:9A:A0:EF:71:20:C9:8D:1B:B3:98:5C:97:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8C51DA0FAD911EEA8080667017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.208.0/24
Signature Algorithm: sha256WithRSAEncryption
35:bc:8f:e0:d1:70:53:38:6e:43:17:93:fe:03:45:ea:db:c3:
93:49:f7:97:3d:c8:9f:e4:b8:17:88:6f:e3:80:e7:90:72:09:
db:f3:b1:9d:3d:e1:74:cb:de:7b:db:07:df:2f:81:27:01:9d:
75:1d:87:ae:94:62:ea:17:b8:ee:ff:4c:6c:3f:fc:bb:3a:43:
b7:9b:b3:ba:59:b4:2b:8b:b2:2d:70:82:59:06:9c:9c:57:5a:
27:c7:3d:d1:49:9f:25:71:e5:e4:a4:b4:ce:e6:1c:93:ca:dd:
ba:6f:d7:ec:19:bf:74:38:c9:cc:a3:b1:dd:2c:d1:ec:9a:62:
96:a3:14:05:c5:85:ed:3d:91:29:f7:e5:d0:c4:89:83:7a:68:
fc:05:d9:a9:85:b6:d8:dc:e7:4a:dc:e8:a0:71:1f:b0:d5:d0:
09:8a:1a:ad:70:90:88:1c:8d:3f:35:32:e4:92:96:db:f7:1f:
a2:a2:2a:c7:ab:6d:7d:eb:67:b4:e2:67:21:d3:6f:b3:ea:ac:
34:1e:da:f7:ef:78:bd:7e:15:19:4e:1f:50:d0:83:18:6a:a6:
41:7b:7a:4f:3e:bd:45:c6:dd:29:3f:93:1e:68:fe:1c:36:9b:
c3:9b:da:58:a5:fc:30:78:04:21:0c:59:74:9f:d1:ca:e5:2f:
32:cc:92:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:44 2024 by rpki-client on console-ams.rpki-client.org