Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC16F66AFAE111EEB940C62E017001B1.roa
File: FC16F66AFAE111EEB940C62E017001B1.roa (raw, json)
Hash identifier: GkpOWqHDTwO15rDbB2WsceI4ujj4/bG6Xb2a40koIa0=
Subject key identifier: D1:AB:0E:65:34:29:B9:AC:35:6D:99:EE:4D:95:F9:88:FB:F0:70:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC16F66AFAE111EEB940C62E017001B1.roa
Signing time: Mon 15 Apr 2024 04:38:20 +0000
ROA not before: Mon 15 Apr 2024 04:38:17 +0000
ROA not after: Wed 24 Apr 2024 04:38:17 +0000
asID: 142062
IP address blocks: 154.206.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44110 (0xac4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 04:38:17 2024 GMT
Not After : Apr 24 04:38:17 2024 GMT
Subject: CN=661caf3c-0414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:9a:c5:0a:ae:09:35:80:f3:3a:58:15:09:
42:cf:23:65:7b:e4:74:da:13:68:49:12:41:ee:a5:
d2:96:2c:4e:28:df:37:20:be:95:0f:a6:00:d2:b6:
4e:a5:06:fc:8c:aa:ed:63:3f:fe:3c:e0:fd:bf:7e:
d9:57:f8:ae:e9:a2:a3:25:b2:99:2b:12:b1:83:43:
c5:24:6a:db:59:e4:e5:9c:d0:72:e2:64:5f:0c:7e:
76:62:00:22:b8:98:7a:30:a1:af:a3:e6:87:ca:90:
91:8d:e8:42:37:94:5e:cc:db:4d:8b:bc:00:76:4a:
4c:9f:52:1a:51:a4:0b:1a:eb:30:7f:7d:5b:93:f5:
ee:1c:d4:eb:6a:a1:fc:61:9f:67:8f:a0:84:73:75:
9e:cf:41:16:e6:91:a1:a8:7e:c9:e7:f5:58:37:4a:
be:03:b8:65:ca:dc:87:5a:4e:22:8d:a0:8d:81:95:
b2:90:03:d8:af:e6:65:95:62:00:19:db:7b:03:3c:
be:3a:7b:b8:a6:15:a3:0b:cf:ab:99:0d:1d:9b:62:
8c:43:7f:5c:ec:61:7a:30:91:b4:d2:22:a4:3d:69:
7b:47:c0:b8:4d:3b:6d:86:2e:d7:1f:81:62:0c:d6:
84:f4:e0:a0:90:25:a3:e9:a4:ab:78:1d:9b:83:23:
c8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AB:0E:65:34:29:B9:AC:35:6D:99:EE:4D:95:F9:88:FB:F0:70:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC16F66AFAE111EEB940C62E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.223.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:c8:9d:e5:54:9a:79:79:0d:7a:59:c9:99:b9:53:c8:0d:93:
66:24:43:07:08:4e:4e:9e:b6:cb:dc:e7:31:ac:b1:56:8f:c1:
bc:c8:3d:99:e1:65:af:8d:63:3a:6e:5c:c7:4f:2f:52:11:c0:
56:82:05:92:9e:92:fb:1f:f4:d8:cb:d9:6f:62:e9:57:7b:78:
6e:d3:a0:16:6e:5c:f7:52:2c:4c:a4:06:60:e2:56:84:0e:cc:
f0:95:ad:95:55:1a:73:4a:1b:fd:65:d2:d5:6d:fd:74:6a:1b:
9a:df:28:cd:cc:c4:03:27:3a:6f:3d:97:9e:4a:3a:86:db:86:
ec:40:4c:ba:17:72:56:e2:6c:f0:67:9e:f5:25:ff:86:57:b7:
fe:f4:a0:0d:0a:1a:0e:c0:4e:bd:83:aa:26:13:db:60:f0:ed:
58:8a:59:89:11:e1:01:71:ec:b2:a0:f9:0c:6a:78:95:11:30:
2d:12:ba:f1:3a:70:ff:2d:97:e4:39:45:25:a7:0f:fd:48:fe:
8a:52:80:f1:bf:41:e3:44:a2:36:b6:49:83:c3:53:4d:09:17:
2c:3a:04:21:97:0d:33:13:59:80:90:83:bc:63:13:fb:03:e3:
fa:f7:9d:da:70:00:15:8c:51:74:4e:1f:7f:92:60:73:b6:43:
6f:33:68:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:39 2024 by rpki-client on console-fra.rpki-client.org