Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D560FA6CFBA311EEB780D55C017001B1.roa
File: D560FA6CFBA311EEB780D55C017001B1.roa (raw, json)
Hash identifier: GvVoOtupxIXvkfNwRYUAfJFTU5akt2lC9a/lS1HX1vs=
Subject key identifier: AD:AC:09:B9:74:71:53:4F:7B:43:48:2B:82:CC:B9:C4:4A:50:87:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD5F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D560FA6CFBA311EEB780D55C017001B1.roa
Signing time: Tue 16 Apr 2024 03:45:57 +0000
ROA not before: Tue 16 Apr 2024 03:45:54 +0000
ROA not after: Wed 24 Apr 2024 03:45:54 +0000
asID: 142062
IP address blocks: 154.206.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44383 (0xad5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 03:45:54 2024 GMT
Not After : Apr 24 03:45:54 2024 GMT
Subject: CN=661df475-9ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:30:cd:92:15:67:cd:ce:77:32:b7:22:a2:
a8:4f:57:81:a2:98:4d:2a:df:b4:a1:16:ad:d1:0e:
01:68:04:a9:db:07:fe:49:44:f7:86:eb:30:6e:41:
c4:33:08:40:55:0c:78:ee:18:4b:b1:8f:d0:7a:d8:
34:b7:24:02:03:2a:e7:a6:7b:b0:63:54:6b:4e:2d:
a6:47:f7:82:5c:71:05:90:0a:f0:52:e5:b8:b4:98:
ca:04:c3:7e:d6:87:eb:15:22:80:5a:d2:37:22:93:
da:32:f5:b4:f9:cd:c1:a9:65:ea:2c:79:1b:ec:23:
08:93:32:e9:40:e8:4b:c3:96:66:17:12:63:3b:29:
47:b9:5d:0b:19:cc:1d:bd:80:8b:e4:50:c4:28:c1:
e4:3c:16:f7:a4:48:68:d2:8c:72:83:ce:54:2a:26:
37:d4:4f:b9:bb:a2:61:04:5b:90:a8:6f:48:22:1b:
92:ef:e2:0a:4c:65:17:fa:45:61:eb:0e:43:53:75:
05:d2:bf:83:c5:a8:ed:60:3a:63:29:84:bc:07:8b:
de:f9:91:17:25:e5:ca:e7:79:a0:51:21:46:b5:ae:
22:5b:97:96:e6:1a:a0:87:d1:ae:1b:1a:95:2d:9f:
0c:b2:eb:9b:37:ec:0f:e6:ff:8d:c8:fe:cc:3f:f0:
13:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AC:09:B9:74:71:53:4F:7B:43:48:2B:82:CC:B9:C4:4A:50:87:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D560FA6CFBA311EEB780D55C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.204.0/24
Signature Algorithm: sha256WithRSAEncryption
39:b7:49:f0:b5:3e:98:9f:39:93:5a:4f:40:df:c7:10:18:4f:
94:47:90:d2:21:0f:4a:d7:f7:1c:c7:47:c1:31:f8:6b:1e:81:
5a:a2:f7:42:74:2b:af:ad:2e:2e:2d:2b:66:7f:88:86:53:31:
f0:c0:06:fa:49:6c:f3:85:a8:5f:0a:4e:4d:30:ec:be:11:b5:
e5:cd:78:2c:33:2c:5e:4b:56:d2:a6:ee:75:d8:22:78:d1:16:
d5:aa:9b:71:dd:6d:eb:f1:22:63:c6:7e:75:4f:5e:c4:0d:64:
8b:8e:fc:dd:41:c2:49:44:af:f5:c6:3b:12:90:99:e8:65:6d:
d3:ac:3e:b0:3b:7a:71:ea:c8:e6:96:50:96:06:de:2e:7d:aa:
8e:c2:70:08:7d:ef:dc:6f:a9:12:df:b4:ec:07:4b:5d:ae:95:
de:6a:44:12:47:71:30:5f:19:07:ce:db:ec:aa:45:12:e1:b1:
2f:fe:17:ee:25:27:69:54:71:bc:00:30:d5:ef:5d:b2:f8:d4:
70:60:1b:1f:04:a2:ac:ac:a3:cd:fe:13:47:30:30:2d:64:16:
47:ff:51:50:97:93:46:63:81:c3:f4:66:14:da:be:51:03:40:
f1:ed:0e:c0:33:57:1d:18:24:ca:96:0e:9f:77:91:80:85:1e:
5b:7f:1c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:39 2024 by rpki-client on console-fra.rpki-client.org