Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6A6CC7E11B411EFB5957737017001B1.roa
File: B6A6CC7E11B411EFB5957737017001B1.roa (raw, json)
Hash identifier: 428fICDN7TKyMAWXH0JgGCRQOxh7aH7K9JPAXRa57Ns=
Subject key identifier: 68:5D:8F:8E:8A:CB:A6:01:56:9F:C3:4A:EA:E3:5A:70:08:62:CB:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B74E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6A6CC7E11B411EFB5957737017001B1.roa
Signing time: Tue 14 May 2024 05:42:13 +0000
ROA not before: Tue 14 May 2024 05:42:09 +0000
ROA not after: Thu 23 May 2024 05:42:09 +0000
asID: 141883
IP address blocks: 154.216.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46926 (0xb74e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 14 05:42:09 2024 GMT
Not After : May 23 05:42:09 2024 GMT
Subject: CN=6642f9b5-929c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f2:9f:71:0b:57:cb:08:ec:4c:6b:0b:15:9c:
9f:75:52:fb:4d:89:c0:63:8e:33:3b:05:1b:30:97:
91:7e:fc:e1:50:57:9e:9a:f9:02:37:76:58:ba:29:
83:04:57:5d:df:b1:d3:49:f2:82:bb:b6:ae:09:d4:
98:ec:ce:8a:7b:d9:a6:cb:88:f7:8c:bf:c2:c5:ff:
3c:28:79:91:17:99:58:78:c7:51:ca:6a:fa:c0:d6:
b1:e5:58:62:28:9c:99:ab:97:3f:33:0f:25:37:65:
67:14:f6:5f:8a:ea:9c:3e:88:ba:f3:28:11:d0:ab:
8d:82:5a:c0:53:04:4a:6a:88:07:9c:cd:61:0b:14:
75:77:cc:e0:80:2f:50:6b:45:28:1b:00:a6:93:f5:
0d:94:f3:60:eb:1c:c3:63:84:b1:98:c2:8e:4e:a4:
b6:e6:37:84:ca:9b:2d:2e:d7:ea:ec:d8:05:a3:79:
7e:21:f8:b9:41:87:0a:9f:2a:6a:7d:2d:62:b3:48:
a3:e9:33:7f:6c:9b:34:6e:e5:fc:b9:51:4c:f0:61:
a6:78:cc:b8:dd:b1:ff:0c:4b:b4:0e:45:73:47:13:
01:42:03:1d:34:bd:df:7f:4d:cf:65:30:d7:4d:61:
df:f6:2c:0b:55:e1:1b:00:c7:ad:03:19:4c:45:f1:
2a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5D:8F:8E:8A:CB:A6:01:56:9F:C3:4A:EA:E3:5A:70:08:62:CB:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6A6CC7E11B411EFB5957737017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.128.0/18
Signature Algorithm: sha256WithRSAEncryption
81:6b:03:85:10:b8:79:51:9d:13:c7:7d:70:54:80:db:b7:f1:
9e:f3:42:8c:02:90:09:04:1c:46:bf:ec:7f:01:f3:3d:25:48:
dc:88:4f:c9:f9:6b:6b:7d:1f:73:c9:1c:ff:34:5d:dd:fa:5a:
68:c4:4f:0c:3f:14:a2:9b:eb:99:fb:65:44:bf:4f:07:c4:e8:
7a:f9:f3:1c:bc:47:3d:c6:95:a7:54:8f:69:16:85:f5:b8:71:
29:47:d4:7f:f0:08:a7:f0:b2:c2:51:de:65:b7:82:93:52:99:
b0:b1:b5:fd:3e:42:cb:72:37:10:9f:00:95:fd:7f:93:ab:c2:
39:56:ef:ad:9c:d2:e9:5d:5a:ef:c2:6f:d3:d0:c1:47:67:07:
cd:3e:db:21:eb:15:79:be:5b:bf:a8:c7:bc:bd:e8:23:3e:75:
d6:12:1b:95:1a:37:34:b0:af:89:e2:6c:2e:43:8c:74:c4:bb:
76:23:55:bf:be:95:ed:66:44:60:19:13:41:63:9e:fc:0a:6c:
dc:72:e3:4e:20:d0:0c:62:23:31:c3:f8:b9:62:57:87:03:18:
eb:d3:76:c4:49:c5:80:2c:c7:96:6a:d2:05:13:09:00:ff:b5:
ff:c9:08:bd:ea:93:1b:47:8c:95:a9:97:b4:7b:7f:02:4b:b4:
6a:d6:9d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:48:55 2024 by rpki-client on console-fra.rpki-client.org