Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDCE3888FBA711EEAD525C00017001B1.roa
File: CDCE3888FBA711EEAD525C00017001B1.roa (raw, json)
Hash identifier: 9KM4kyHOx9KpKAInKHgfmdpV497xt6Qpek5JSvwKDbg=
Subject key identifier: AB:BE:01:0B:6C:55:8D:9F:B7:3A:4A:DD:ED:D0:67:5C:51:24:E2:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD8B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDCE3888FBA711EEAD525C00017001B1.roa
Signing time: Tue 16 Apr 2024 04:14:23 +0000
ROA not before: Tue 16 Apr 2024 04:14:19 +0000
ROA not after: Wed 24 Apr 2024 04:14:19 +0000
asID: 142062
IP address blocks: 154.206.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44427 (0xad8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 04:14:19 2024 GMT
Not After : Apr 24 04:14:19 2024 GMT
Subject: CN=661dfb1e-6639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:69:1f:91:3e:4c:0e:4a:b2:07:d7:ba:a3:
28:5a:c1:64:73:d9:40:57:87:b6:0f:fc:81:a3:68:
5f:fa:81:b9:e4:f3:bc:85:71:b0:f1:8f:f9:95:48:
e4:41:30:dd:a2:38:05:6e:43:74:b5:d2:76:f8:77:
14:ab:06:22:96:f0:f5:82:60:c6:c1:9b:29:14:5d:
83:43:bc:83:bd:c6:14:6c:c4:11:b3:bb:29:2b:20:
51:d7:f0:c5:f5:f6:eb:38:68:c4:b4:f1:f2:fc:b7:
cb:00:83:55:00:31:1f:dd:94:f9:4b:43:c8:27:28:
46:38:01:78:1c:72:01:bc:73:a9:82:19:65:58:fa:
35:9f:9f:ae:14:23:d1:3b:30:80:2c:dc:39:5a:2a:
32:d2:39:7b:f4:8d:fe:7e:42:1b:e5:8a:a8:e1:17:
4d:e0:0f:2b:cd:39:28:fe:92:0f:02:5a:8f:28:5e:
12:24:c5:88:66:8f:de:57:d4:0f:a9:b2:62:b5:29:
ed:ad:6d:0d:c6:21:92:5a:5d:87:d4:2b:99:30:67:
36:88:3f:0c:10:76:c6:2b:94:b0:ed:32:5d:1d:46:
b4:88:d8:c8:e1:99:62:a2:0e:37:a8:9a:ba:ea:28:
37:93:3a:68:a7:c0:0c:51:3d:bd:4b:ab:18:f2:95:
51:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BE:01:0B:6C:55:8D:9F:B7:3A:4A:DD:ED:D0:67:5C:51:24:E2:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDCE3888FBA711EEAD525C00017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.226.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:68:47:88:90:e1:64:f9:16:05:6d:fd:c1:67:23:2c:4b:57:
e6:77:14:5a:cf:df:c0:34:89:c0:a0:ab:9e:5a:f9:7d:fd:89:
fa:94:cb:92:0d:fa:89:24:ee:73:24:e7:a1:26:4a:2e:c7:59:
1d:3d:03:85:1c:8d:ce:7e:68:52:7b:6c:dd:d6:1f:45:35:22:
ac:7d:e5:46:5b:31:ce:71:5b:34:e5:26:35:fb:75:2e:bb:2c:
92:87:cb:33:ff:94:c8:04:98:1c:82:b7:b5:7b:07:8a:2f:c7:
47:8d:6a:95:d9:1d:25:5a:74:0f:27:4f:ed:d9:ae:2c:33:68:
bb:4d:9a:b0:99:b5:01:42:1e:1b:b3:23:8e:f7:02:9d:b8:07:
59:74:fe:4c:45:12:0c:dd:10:fe:f6:9c:67:3d:5c:ba:03:b1:
24:a1:bd:f2:6e:5d:f0:74:c2:44:e1:6a:66:b2:c7:d6:a1:46:
2d:92:ea:bf:ff:13:fe:30:13:74:3c:75:d8:bc:25:7a:32:18:
0d:c8:ee:1e:2a:0c:de:05:af:b3:48:3a:7c:c7:c7:b4:46:39:
49:0f:9e:ee:1e:90:70:5f:6b:f9:6f:69:cb:3b:6d:e1:a2:03:
bf:11:68:9b:5a:a0:87:90:2d:7f:eb:da:79:56:27:2c:18:17:
03:df:c4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:39 2024 by rpki-client on console-fra.rpki-client.org