Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB81E61AFAD911EE95871A6A017001B1.roa
File: DB81E61AFAD911EE95871A6A017001B1.roa (raw, json)
Hash identifier: l+0fSPiFA8+XRrlpTOVVepGrGYgRllm857LlAOLqL1w=
Subject key identifier: 14:96:31:2E:52:FB:77:38:F9:B7:EC:48:4C:FD:F7:64:18:11:63:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC07
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB81E61AFAD911EE95871A6A017001B1.roa
Signing time: Mon 15 Apr 2024 03:40:09 +0000
ROA not before: Mon 15 Apr 2024 03:40:06 +0000
ROA not after: Wed 24 Apr 2024 03:40:06 +0000
asID: 142062
IP address blocks: 154.206.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44039 (0xac07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 03:40:06 2024 GMT
Not After : Apr 24 03:40:06 2024 GMT
Subject: CN=661ca199-d224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:65:66:88:2d:26:46:e4:fa:02:33:2b:dd:7d:
f1:59:18:91:f6:3d:ea:8e:ad:82:5f:0b:1b:c1:a4:
3e:b6:e7:5e:4a:ff:05:16:e9:2c:dc:5c:3a:29:9b:
10:3e:51:e4:06:ca:c8:4e:52:e1:78:08:b4:a9:a1:
32:23:ae:8c:02:74:38:72:39:fe:12:bf:d0:b2:d7:
31:a2:a1:75:7d:90:34:40:de:03:44:c3:20:92:63:
ec:50:a3:c2:25:ad:df:89:56:69:ed:06:e0:58:9e:
54:66:c6:c8:6b:21:36:23:7c:4c:3a:9c:1d:57:69:
92:c8:c8:19:da:f9:98:57:06:bd:0a:40:c5:21:75:
0b:98:0d:80:64:11:5e:cf:65:5a:07:7d:56:6c:03:
85:34:82:5a:db:d9:21:bb:33:3e:2b:99:27:14:21:
57:27:07:e2:1f:e9:70:d1:52:ac:83:61:a9:57:f2:
93:22:ae:c6:24:f3:8e:21:4c:1c:a9:6c:86:41:e1:
07:2c:7b:d7:ea:b5:45:cc:73:3d:56:34:9b:00:8c:
bb:cd:60:28:c4:3b:44:38:7a:a7:7f:21:4a:43:d4:
da:54:b8:41:fc:1e:f0:a1:83:e9:c1:55:67:46:1a:
98:e1:5e:3b:99:85:92:9e:61:bc:28:f5:82:f1:fd:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:96:31:2E:52:FB:77:38:F9:B7:EC:48:4C:FD:F7:64:18:11:63:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB81E61AFAD911EE95871A6A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.209.0/24
Signature Algorithm: sha256WithRSAEncryption
83:9c:a2:19:c6:bc:7f:85:2a:34:25:3e:de:fe:a6:66:38:57:
c3:4c:ab:5b:95:62:7a:e2:61:6f:55:b7:38:49:80:90:4e:c9:
8f:3c:c9:1e:fb:ee:b0:49:b2:99:52:70:d7:04:4c:c8:2f:8c:
dd:06:e7:9e:0f:d8:9e:b6:90:ef:89:64:b3:34:28:a8:17:c1:
a3:09:de:fb:c2:bd:35:d4:0c:38:03:25:3b:e7:ba:42:a8:5d:
28:b6:71:eb:e3:51:53:03:89:70:da:aa:7b:00:b2:26:ed:b5:
fa:f0:06:08:c8:98:6c:bb:22:84:6f:73:d6:60:2a:fa:63:e3:
74:34:d7:3e:29:e7:43:89:23:a3:62:5c:e7:40:4b:8f:eb:ce:
2c:ca:68:00:74:4b:c5:31:19:fb:de:0d:9b:3e:2f:41:b7:e3:
7f:00:f3:47:d2:11:41:39:3c:e0:b3:3b:c2:2a:3f:8d:b7:e1:
a9:ff:42:e3:31:a1:c5:fb:88:c1:e0:5e:53:b0:9d:20:03:8d:
37:57:42:57:c9:77:2e:2a:95:c9:7f:01:66:88:f2:f8:3c:13:
7f:2f:ad:55:fc:c8:82:e9:c6:b7:ad:8f:4f:b5:9d:0e:1f:6d:
26:0d:cc:07:11:02:7d:1b:8b:86:a8:b3:8f:ce:fa:52:5e:df:
1a:c9:ee:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:39 2024 by rpki-client on console-fra.rpki-client.org