Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDB1230EFBA911EEB1CFBE10017001B1.roa
File: CDB1230EFBA911EEB1CFBE10017001B1.roa (raw, json)
Hash identifier: Dh/lX6x7kzJygjqVkgjcypgkGXzUFmZ4CJ5v9wSRw0w=
Subject key identifier: 62:31:90:E5:20:59:74:29:67:93:E5:0D:D9:9E:45:6F:47:ED:38:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ADA1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDB1230EFBA911EEB1CFBE10017001B1.roa
Signing time: Tue 16 Apr 2024 04:28:41 +0000
ROA not before: Tue 16 Apr 2024 04:28:38 +0000
ROA not after: Thu 25 Apr 2024 04:28:38 +0000
asID: 151800
IP address blocks: 154.197.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44449 (0xada1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 04:28:38 2024 GMT
Not After : Apr 25 04:28:38 2024 GMT
Subject: CN=661dfe79-0fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c4:be:02:34:95:f3:45:ef:6c:3d:da:65:f8:
ab:b7:ec:3a:fe:82:f4:68:4c:93:a1:94:1c:bb:02:
72:e3:31:db:e9:79:53:2c:e6:40:40:fe:9d:df:39:
21:9a:d6:02:fa:d9:8a:d6:72:4c:0b:ff:e1:64:bb:
64:63:d8:ab:7b:b4:c6:eb:d5:70:56:78:63:12:ca:
28:bc:27:8e:42:f9:0d:b1:cd:33:97:b6:ac:37:fb:
78:bc:a1:ca:66:ed:a7:ee:ba:ee:7e:19:64:c8:ad:
fb:9b:1e:56:6a:ae:a1:5d:e3:6f:57:cc:15:4c:4d:
ff:fb:0c:40:03:08:d5:36:41:c7:53:72:8e:d2:ee:
2a:52:6a:0e:04:ec:66:cc:7e:74:68:47:bf:69:14:
5a:e3:19:87:47:c5:6e:02:cf:ad:a7:c3:47:f7:95:
b3:d7:e3:12:40:5f:b3:e6:c9:39:28:c4:c3:10:ac:
27:e9:7b:f7:f3:b0:2b:15:12:a7:97:47:cb:18:5e:
ff:43:55:ef:f7:6c:c5:cf:40:ad:75:d6:3f:1e:3c:
15:99:af:af:7c:2d:5b:23:41:b6:8c:60:8f:7c:b4:
02:49:f9:10:27:bc:62:31:10:51:00:17:cd:42:1a:
77:7c:ff:1f:70:8d:41:62:a6:f1:75:30:fe:e0:05:
16:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:31:90:E5:20:59:74:29:67:93:E5:0D:D9:9E:45:6F:47:ED:38:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDB1230EFBA911EEB1CFBE10017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.81.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:90:0e:35:54:37:71:48:60:cc:bf:e5:88:37:ff:9a:e5:43:
8a:51:d2:86:ff:74:52:b6:c7:b6:94:3a:ca:94:90:c9:62:66:
e1:86:ef:1e:f8:16:bc:b8:5c:ef:f0:ab:f3:05:85:0b:3d:3d:
62:53:46:14:12:00:36:dd:c8:93:9b:87:8c:a6:74:46:c5:bf:
10:55:83:8e:f2:1b:4a:42:ac:ab:73:97:76:02:19:27:e6:69:
db:c1:c0:b0:60:44:fc:8b:03:2b:e5:8f:c2:f1:da:c9:ed:4f:
ac:3e:53:24:98:47:1a:16:d9:b4:27:bf:01:72:b3:84:bd:61:
82:4c:f5:82:2b:f7:21:db:9c:73:33:f9:15:38:ed:02:de:8e:
9a:a2:74:6b:ab:29:07:e7:7a:7b:12:ff:78:6d:1c:fd:59:9a:
ce:92:56:9d:c3:7a:c8:9c:99:03:84:08:0f:86:9e:03:3b:5d:
79:85:c4:1a:b8:db:0e:76:10:b4:57:a8:5b:a6:66:e1:c8:80:
05:9a:7c:d6:fd:06:94:64:c6:59:b8:3a:c4:1a:ae:5e:f4:81:
eb:b7:6f:a8:2d:7b:e2:92:51:7e:56:ff:7f:a2:b2:0b:7c:96:
b8:9b:6b:42:ea:78:b7:b2:31:d2:a7:3c:60:cb:2b:c9:e9:80:
8b:8f:b7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:50:18 2024 by rpki-client on console-fra.rpki-client.org