Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB4DDEAEFBA111EEB53D094C017001B1.roa
File: AB4DDEAEFBA111EEB53D094C017001B1.roa (raw, json)
Hash identifier: hXaZSV+ucsK2b9cMW0x+sp4gm7lhABu/nXY6TB9gtuU=
Subject key identifier: C9:25:45:9D:7E:B2:1C:B5:0C:2B:A7:BF:E4:2F:E9:F4:96:72:86:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD47
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB4DDEAEFBA111EEB53D094C017001B1.roa
Signing time: Tue 16 Apr 2024 03:30:28 +0000
ROA not before: Tue 16 Apr 2024 03:30:24 +0000
ROA not after: Wed 24 Apr 2024 03:30:24 +0000
asID: 142062
IP address blocks: 154.206.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44359 (0xad47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 03:30:24 2024 GMT
Not After : Apr 24 03:30:24 2024 GMT
Subject: CN=661df0d4-90c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0c:c7:4b:12:f4:31:12:47:5e:1e:13:9f:5b:
04:aa:23:ba:de:d3:5f:4f:69:f0:76:27:39:e5:1c:
02:ec:80:da:16:fe:a1:fe:36:54:e9:7b:be:13:88:
e3:fa:62:c5:20:68:a3:d2:ee:80:5a:17:cf:7c:aa:
f1:d5:e9:cf:1a:56:fd:44:5d:14:ff:b8:33:ba:c4:
32:bb:a3:64:4e:b2:7e:d4:04:ad:d2:44:82:d1:8d:
22:8c:40:21:74:5c:93:f6:56:c5:d2:3c:ea:96:c6:
94:85:85:ff:54:f2:7c:59:17:b7:5b:a9:d3:ea:a5:
54:26:96:77:a0:44:d1:cd:13:c9:65:24:d9:62:14:
17:20:9f:5d:12:49:0a:43:34:40:ee:dd:a8:62:29:
c8:f8:97:b0:a8:2f:5c:5b:8a:38:0b:f3:e0:e0:a8:
04:51:bb:b5:b5:04:73:3d:5d:b7:46:ef:08:97:ab:
65:08:c9:b3:fc:25:c0:95:b6:59:0c:59:79:44:3d:
ef:bc:1f:d1:e0:0f:62:21:b7:da:b5:b0:e6:2d:a8:
6d:02:b8:3f:ad:ba:c3:1c:44:c3:55:8b:1b:b9:48:
9e:24:00:00:13:ee:c2:af:08:fd:cc:4f:67:1e:2a:
20:20:db:6d:39:cd:51:48:3b:b9:62:1a:07:f9:dd:
b8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:25:45:9D:7E:B2:1C:B5:0C:2B:A7:BF:E4:2F:E9:F4:96:72:86:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB4DDEAEFBA111EEB53D094C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.192.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:03:05:d5:63:97:9b:55:b0:fc:e6:6c:c1:29:b7:2d:f6:41:
79:b8:58:27:b3:e1:33:45:39:74:47:30:6a:61:70:87:6a:83:
d2:9a:4f:a3:46:15:5e:08:35:16:3c:04:1d:01:6d:24:41:ac:
47:29:dc:26:f7:2d:c2:ee:c2:f8:9d:52:3f:35:7f:47:59:36:
da:0e:f8:4f:30:4d:a7:86:60:f9:9a:61:62:86:f2:58:1c:45:
cf:39:dc:42:f2:a4:ad:18:eb:da:26:be:dc:ea:36:6d:1a:b1:
81:8a:e1:79:fc:8e:f1:33:c4:67:88:ff:3f:85:f2:77:03:bd:
21:85:ec:89:12:52:a7:28:4c:34:d2:1f:18:d8:70:aa:53:d8:
ee:56:83:1d:bf:cf:a0:c9:f6:f0:b7:b7:5e:6f:f7:84:c7:13:
73:6c:18:a2:cf:81:c1:85:2e:76:8b:57:78:af:29:5e:99:e4:
22:01:89:80:a8:48:5d:e1:71:c2:fc:59:d0:04:8b:bf:18:ba:
a4:50:ed:2d:af:5b:89:e3:05:45:9b:c2:4f:b5:bc:50:74:35:
12:bb:d7:87:9c:03:cb:20:a5:0e:eb:ca:e6:ec:2a:fe:57:83:
4e:51:ab:8c:d0:34:19:89:1a:1d:51:5d:1c:f2:f5:bf:83:07:
3f:fb:8c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:44 2024 by rpki-client on console-ams.rpki-client.org