Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB79F9DE0EAC11EF98A267FD007001B1.roa
File: BB79F9DE0EAC11EF98A267FD007001B1.roa (raw, json)
Hash identifier: qp9OnCF/1EU38C9WYrSIEmZUC2odB8AoNgKUfY8f2dw=
Subject key identifier: 2B:05:E8:93:16:32:E5:53:4A:25:D4:2B:3D:F2:3C:63:BC:3D:C6:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B68E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB79F9DE0EAC11EF98A267FD007001B1.roa
Signing time: Fri 10 May 2024 09:07:31 +0000
ROA not before: Fri 10 May 2024 09:07:28 +0000
ROA not after: Mon 20 May 2024 09:07:28 +0000
asID: 142062
IP address blocks: 154.206.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46734 (0xb68e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 09:07:28 2024 GMT
Not After : May 20 09:07:28 2024 GMT
Subject: CN=663de3d3-cace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:eb:5a:f4:0e:b9:bc:b5:3a:d0:7b:95:ac:
eb:5e:66:1c:66:50:23:15:b5:2b:94:37:ac:a2:a2:
6f:f7:6f:6a:3a:d4:2c:e6:f2:2c:76:8c:c0:91:39:
f1:de:1d:9c:2e:95:ba:18:2a:0c:f7:76:f0:5e:b3:
f6:fd:c4:e6:b5:c4:cb:a5:0c:b0:24:d8:0a:92:9d:
98:dd:34:bf:c9:a8:ef:a4:b6:bc:e9:c0:78:37:72:
66:b8:84:a6:4c:9c:7e:01:ec:0d:d6:2b:1e:e1:24:
10:f6:cb:d7:5f:b6:c1:4f:06:38:69:a2:82:af:72:
a5:7b:d9:ec:98:1a:b5:6b:97:1c:79:50:8b:6d:fc:
65:5d:22:1d:1f:dc:03:27:39:cf:e8:4e:80:8e:6a:
af:7e:0e:8a:7e:7b:16:51:3d:97:fa:e7:16:9b:10:
1b:81:ad:a0:a3:63:ff:76:9d:70:4c:d3:d8:a0:7d:
e9:6d:b2:9a:8e:f7:ad:d9:28:5c:14:9c:a1:55:64:
28:90:41:29:6b:ca:c3:4e:77:92:e3:0e:4b:5a:25:
8b:07:11:f1:27:98:0b:c7:81:13:59:73:2e:80:d3:
ac:23:1f:19:27:8c:2a:fb:dc:bf:1d:ed:3b:9f:c5:
50:90:b1:1c:33:78:c5:73:e9:7b:5d:e3:18:bc:78:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:05:E8:93:16:32:E5:53:4A:25:D4:2B:3D:F2:3C:63:BC:3D:C6:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB79F9DE0EAC11EF98A267FD007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.228.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:59:c8:01:16:5d:cb:90:04:c2:42:8e:c3:06:b2:7d:08:8b:
fb:02:8f:a9:7c:31:5f:bc:ab:06:9b:68:69:92:bd:88:01:28:
fa:0e:4f:10:31:dd:ef:a7:82:9e:18:82:71:e8:46:03:ed:50:
ee:f6:7b:5b:00:4d:ac:03:28:7e:dd:15:3b:7f:24:71:a7:ca:
ae:74:2b:a6:51:d9:73:7c:55:09:49:e6:6a:17:87:9d:a3:ec:
10:0c:35:49:34:47:8e:fa:a8:d8:07:80:8c:ca:4b:67:49:cb:
dd:1b:bc:9b:1f:de:18:90:e0:e7:0b:e8:72:2f:61:cf:7f:03:
3a:0c:17:80:ec:65:05:a8:a2:5b:9f:2b:d2:d3:41:26:a2:bd:
8a:5b:aa:90:9c:3c:51:82:36:c1:0f:be:b3:4f:a6:b3:0a:e1:
b4:4c:52:8d:00:bd:f2:25:7a:61:c2:94:9a:14:9c:9b:d5:b9:
d6:f0:d2:c8:30:db:7b:4f:b9:5a:34:d8:fb:d3:81:21:66:c1:
69:6a:4d:36:3c:c3:78:15:11:e4:62:a9:87:56:38:8a:15:6e:
1b:94:40:0d:7b:70:98:13:f9:8d:b6:b0:e7:a1:08:7b:2f:36:
88:25:de:58:38:85:50:84:5a:63:b8:f2:b9:de:47:4b:d6:bb:
45:9f:af:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:48:57 2024 by rpki-client on console-fra.rpki-client.org