Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7A613A4FBA111EEBF107C4C017001B1.roa
File: D7A613A4FBA111EEBF107C4C017001B1.roa (raw, json)
Hash identifier: UHSnO6p1kFwA5m2ZK/l1aPhOV/dsz0Ia+handsjaVTQ=
Subject key identifier: 94:D2:AB:77:55:94:8C:73:FC:BE:CD:7F:FB:43:1E:DA:60:2B:0C:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD49
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7A613A4FBA111EEBF107C4C017001B1.roa
Signing time: Tue 16 Apr 2024 03:31:42 +0000
ROA not before: Tue 16 Apr 2024 03:31:39 +0000
ROA not after: Wed 24 Apr 2024 03:31:39 +0000
asID: 142062
IP address blocks: 154.206.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44361 (0xad49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 03:31:39 2024 GMT
Not After : Apr 24 03:31:39 2024 GMT
Subject: CN=661df11e-6675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9e:03:16:a1:88:12:1c:c2:c7:d8:76:6a:63:
05:4c:4d:f8:47:bc:46:0d:36:bb:9c:79:4e:91:b1:
4a:f5:f3:be:cc:87:5e:ba:ca:30:73:90:66:b7:a2:
c4:6e:83:de:9a:23:41:a4:51:85:13:b7:bd:9a:b1:
42:ea:24:0f:b7:2b:c0:8f:68:b4:58:5d:83:f8:e8:
29:d4:99:04:26:9d:f6:2d:6c:46:b3:5a:1c:ab:9b:
2e:c0:ef:c3:46:b5:4d:ee:d2:3b:cd:9b:27:ed:03:
23:93:81:a2:e2:b5:c3:b5:a6:5d:aa:67:66:c2:47:
91:e3:a1:d0:64:b5:52:94:87:4b:1b:ce:44:23:f2:
9b:73:0e:83:c9:99:e9:36:f4:4a:72:73:49:03:e7:
dd:e7:65:ce:7a:d9:ce:03:63:da:25:1e:cd:9e:a7:
79:7e:dd:05:5d:d0:f4:52:8c:a7:58:b2:13:e7:00:
5c:23:4d:a4:87:c6:5c:55:78:bd:25:1a:a7:b2:a8:
81:cd:4c:bf:09:32:65:44:19:f6:81:75:54:54:f4:
53:50:1e:01:bf:73:d1:2c:e3:b5:71:0c:c7:e0:73:
0f:10:e2:7d:c0:44:91:c3:89:bc:0d:48:f6:72:90:
fa:db:ee:21:86:8c:e0:15:41:4c:e7:62:12:20:19:
93:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D2:AB:77:55:94:8C:73:FC:BE:CD:7F:FB:43:1E:DA:60:2B:0C:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7A613A4FBA111EEBF107C4C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.193.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ca:60:f5:ab:e2:fb:9a:f9:d9:97:23:c7:f8:5f:e9:6b:bb:
90:0f:41:6f:81:ff:20:32:96:60:33:47:d1:21:7d:0e:2d:74:
c3:04:5e:5b:71:07:f1:f9:d2:12:03:55:2a:65:86:59:a6:72:
8c:5d:dc:8d:34:ea:20:86:4d:21:bd:87:f1:4f:da:6b:8e:95:
95:3b:57:6b:c8:8d:b9:b7:e1:e4:f7:02:20:4d:33:82:c8:45:
79:df:4f:11:47:bd:72:6c:ee:40:b9:b4:c2:05:0d:af:43:df:
61:fa:c3:d8:b2:7e:a6:27:50:01:bf:b1:70:c7:29:c5:43:ee:
58:bb:b1:8f:b1:8c:d0:03:14:75:b8:2d:fb:80:71:19:ed:79:
bf:67:94:70:69:19:3e:bf:73:67:41:40:17:d8:23:cd:27:fb:
70:6c:db:f4:c3:dc:c8:88:c9:08:aa:b4:52:19:0b:26:c8:d4:
50:30:15:7c:12:e0:8c:a2:6c:8b:e7:d5:e2:7f:68:99:54:db:
9b:f1:a9:d7:87:40:6f:ad:c6:49:83:76:2c:9d:2e:63:fc:e3:
a6:1d:dd:de:40:ea:f5:ff:fc:2c:aa:25:75:a5:e4:f7:e8:19:
f7:86:7c:43:e7:d4:24:b5:79:c8:a3:1c:b1:29:97:e6:1f:52:
ee:81:38:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:39 2024 by rpki-client on console-fra.rpki-client.org