Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9DA6334FBA611EEAE291BF6007001B1.roa
File: B9DA6334FBA611EEAE291BF6007001B1.roa (raw, json)
Hash identifier: /FZwWaVkyUaRX2oVwkerZhJ0FKlpXFR+4d5a08kiJO0=
Subject key identifier: 0F:4C:51:9B:B3:52:70:81:23:24:56:DD:30:FE:45:29:E7:84:09:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD7F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9DA6334FBA611EEAE291BF6007001B1.roa
Signing time: Tue 16 Apr 2024 04:06:40 +0000
ROA not before: Tue 16 Apr 2024 04:06:36 +0000
ROA not after: Wed 24 Apr 2024 04:06:36 +0000
asID: 142062
IP address blocks: 154.206.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44415 (0xad7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 04:06:36 2024 GMT
Not After : Apr 24 04:06:36 2024 GMT
Subject: CN=661df950-ed71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:62:0d:0b:1e:f7:be:ad:cf:ac:20:a8:f6:b6:
e2:fb:f3:4a:0d:e5:ca:64:87:98:0d:c5:d3:ec:c4:
30:58:2d:19:de:f9:90:e8:1e:17:55:24:cf:16:2e:
fd:a0:15:9a:81:25:f7:b4:61:f6:30:37:f5:16:82:
94:58:3d:df:bc:df:6d:92:fb:38:fc:d5:d3:f6:2a:
d0:a7:bd:f6:49:21:19:b2:d9:4b:05:d4:2e:f1:6d:
f4:23:6a:17:34:cc:60:9d:e7:db:0a:44:21:ae:ab:
19:7b:c7:85:59:f0:23:1c:46:89:7a:fb:1f:b8:9a:
a0:38:c9:dc:9a:1f:67:b2:b4:e1:58:41:66:70:9e:
f9:7b:d1:9a:e5:50:35:4a:04:1b:4e:ac:3a:c0:b6:
61:3e:08:27:92:dc:e9:a1:cc:18:22:f7:d6:5a:42:
df:f8:c6:fe:b5:67:b2:2c:5f:d8:82:9a:ce:6c:ef:
02:99:73:bb:bb:f4:47:32:a2:ad:9b:d2:25:53:10:
11:44:28:80:ed:14:94:1e:e7:fe:32:98:00:a6:10:
7c:b5:49:12:f5:5c:c8:64:bd:2e:40:7b:25:e3:35:
66:0f:99:82:05:68:68:61:0d:c1:dd:68:67:53:de:
e6:55:82:d7:2a:c2:4b:5a:7a:0f:24:49:48:84:d1:
09:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4C:51:9B:B3:52:70:81:23:24:56:DD:30:FE:45:29:E7:84:09:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9DA6334FBA611EEAE291BF6007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.220.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:c0:44:a0:d0:b2:3d:8e:af:c3:44:8e:59:14:e1:46:0d:e9:
bc:af:de:5b:c9:c8:a0:aa:3d:54:e4:51:7b:55:6d:e7:ce:4f:
dd:34:06:4a:fa:b1:ea:8c:d5:e4:c9:5b:47:11:e7:a8:fb:fb:
44:6e:34:cd:ed:ca:54:20:56:5f:ee:8f:bd:57:29:9f:3b:54:
b7:3c:a3:c8:15:b4:86:23:b0:49:68:5e:77:8c:fc:60:21:a3:
27:03:e4:d4:e7:29:53:77:5b:96:b6:75:79:de:79:2b:c0:04:
b8:af:3e:34:23:ab:f8:8e:7b:b6:c1:b0:29:18:63:bd:30:fb:
07:ab:52:db:5a:cd:aa:1b:33:33:8a:0b:81:bb:98:fc:a8:9d:
cb:59:33:5e:de:0a:81:71:e6:3f:c8:2e:f2:72:b8:56:20:61:
63:01:b8:1e:68:71:47:8d:21:d9:40:01:57:c9:84:9e:a4:97:
a9:c1:99:76:49:91:4d:5d:d7:32:70:1b:c5:c9:bc:5e:47:a2:
19:81:50:61:7c:ad:67:cc:dd:da:87:50:60:3c:9b:bc:38:73:
eb:45:7a:ca:84:98:65:8e:fb:c4:e6:7b:b0:39:d7:61:ef:92:
fd:5d:28:23:a1:02:c9:0b:ce:76:7d:39:68:43:0c:19:4e:ab:
44:05:cc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:44 2024 by rpki-client on console-ams.rpki-client.org