Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE99046EFADC11EEB1204C04017001B1.roa
File: FE99046EFADC11EEB1204C04017001B1.roa (raw, json)
Hash identifier: xsN9W5wKEGocBAyvZB01zBAVue5iUllmUMOcWtgZog8=
Subject key identifier: 0E:51:50:FC:D4:60:39:60:84:8F:49:5C:B4:B6:9D:6D:75:3C:2C:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC2F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE99046EFADC11EEB1204C04017001B1.roa
Signing time: Mon 15 Apr 2024 04:02:37 +0000
ROA not before: Mon 15 Apr 2024 04:02:33 +0000
ROA not after: Wed 24 Apr 2024 04:02:33 +0000
asID: 142062
IP address blocks: 154.206.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44079 (0xac2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 04:02:33 2024 GMT
Not After : Apr 24 04:02:33 2024 GMT
Subject: CN=661ca6dd-2116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ee:ca:6d:e2:65:f9:94:71:b3:3a:35:84:e1:
0c:ec:1d:c0:6f:e5:a6:94:c4:97:23:af:44:ae:bb:
f6:00:ee:cc:dd:8d:61:7b:9e:f3:f2:4a:c8:61:c5:
ea:d3:85:58:d0:de:7b:43:ce:a0:b9:4b:69:7c:d0:
cd:d6:57:f5:12:97:9a:86:ec:8a:5e:06:a2:cc:ca:
91:54:b4:bd:fa:a4:1f:ff:fe:c2:80:e6:a2:df:7d:
b8:e9:4e:fc:dc:1f:71:02:36:5a:9f:70:f9:36:c3:
d8:e4:ee:ed:29:b2:a3:c6:a0:af:80:61:df:2b:d2:
e0:04:0c:18:32:18:bd:0e:63:36:5d:54:a5:54:d7:
b5:2e:6b:1e:85:3b:97:f6:c6:b3:5e:46:85:fb:e2:
1f:2a:04:32:fc:53:d4:7e:04:dc:97:fc:ec:a7:92:
bf:70:52:0f:df:50:7f:a7:21:5c:9d:8d:01:03:35:
ae:21:df:53:98:58:ae:f4:2b:38:ce:8c:a7:22:06:
61:3c:45:2b:dc:11:f5:06:81:b7:9c:c0:e0:a2:e9:
80:08:b2:50:80:b0:d2:fe:84:9f:73:78:6b:4a:21:
82:24:2e:ed:d9:c9:eb:55:26:69:60:ed:97:30:c1:
f3:82:5c:19:f1:c9:81:a0:f7:63:30:eb:67:44:2d:
8d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:51:50:FC:D4:60:39:60:84:8F:49:5C:B4:B6:9D:6D:75:3C:2C:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE99046EFADC11EEB1204C04017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.229.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ef:f3:2d:ec:0e:08:99:4d:05:6f:aa:64:69:e8:d0:c6:dc:
12:b8:f4:8d:0a:cd:fe:13:d8:08:38:10:89:a0:07:4d:e8:90:
50:bc:82:35:bf:31:c0:34:f2:02:ba:1f:09:ab:c3:bf:94:15:
81:02:49:6c:05:a3:b2:1b:3a:ba:5d:05:01:5b:86:31:5e:ca:
fe:74:ad:31:8a:27:f6:fa:18:ad:94:d1:26:59:a6:49:63:ac:
82:7d:33:f0:ce:73:c6:e1:e3:8f:bc:7c:2d:d5:c5:e1:02:e9:
3c:91:90:3a:c8:ac:f8:47:70:1d:fd:dc:a7:77:3f:7b:a0:f0:
cc:5d:6b:b5:c0:0c:eb:32:7c:22:72:c3:11:2e:b0:a9:5b:d0:
d3:92:e4:54:14:f9:ac:bc:cb:3d:3e:c5:f4:92:f2:a8:b7:31:
66:43:75:ad:98:8c:19:3f:00:d9:0c:20:08:8e:7d:e8:2c:64:
e8:92:61:93:06:c6:00:14:d9:a2:d6:e6:5f:ae:0c:9d:c6:dc:
24:25:e4:a6:4e:87:af:69:70:91:19:33:47:1e:f6:ac:bb:73:
38:83:e0:11:70:e4:43:dd:56:5a:3f:ed:53:b9:7d:b6:d3:b0:
87:6c:d9:30:89:3a:e4:59:29:c7:b0:bf:47:db:b3:5e:3e:7a:
9b:67:10:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:39 2024 by rpki-client on console-fra.rpki-client.org