Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/043B11020DC811EF94DBFF33017001B1.roa
File: 043B11020DC811EF94DBFF33017001B1.roa (raw, json)
Hash identifier: DGuFRkmnCM1mKysg/mREz8BAZ3AOhFMneH7plV50V8s=
Subject key identifier: 30:73:3A:DA:83:AD:6A:9A:5E:CA:F9:6A:B1:3A:6D:E3:CE:CC:A3:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B60B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/043B11020DC811EF94DBFF33017001B1.roa
Signing time: Thu 09 May 2024 05:50:19 +0000
ROA not before: Thu 09 May 2024 05:50:15 +0000
ROA not after: Sun 19 May 2024 05:50:15 +0000
asID: 5065
IP address blocks: 154.94.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46603 (0xb60b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 05:50:15 2024 GMT
Not After : May 19 05:50:15 2024 GMT
Subject: CN=663c641b-d022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:be:b8:0f:f9:01:53:1c:b8:a3:83:53:e7:b8:
f5:ad:83:83:3f:7b:36:fc:e8:1a:77:6a:1b:3a:70:
47:52:64:bf:b6:38:02:2c:d6:9a:8f:ab:12:31:19:
77:0b:2b:d6:45:d1:4b:25:90:0b:ad:77:ef:3e:1c:
d8:da:a2:f6:e4:15:e5:e8:fe:23:d8:c9:a3:7f:95:
e5:68:a1:2a:33:4c:c4:f5:20:a8:28:4e:30:8f:1e:
f9:c9:08:8c:7d:8e:06:31:4a:70:6d:4c:99:04:16:
40:1d:12:db:2e:3a:72:fb:45:d7:be:86:3b:42:1f:
58:56:db:d8:f8:51:59:6a:91:75:72:69:e2:04:8d:
aa:c1:75:35:ed:62:c0:d7:98:f1:9c:99:c3:da:b6:
a7:50:dd:04:2a:01:4e:af:66:d7:36:82:3e:13:69:
f2:3b:ba:3a:8f:14:2a:b4:b8:a3:ab:8b:7e:61:97:
ea:c6:b2:66:ff:5f:7b:0a:bb:08:9b:33:81:0a:48:
76:c6:e1:c0:9e:05:96:ec:cc:ad:ef:c2:04:ae:91:
e2:33:54:46:dd:f3:d5:9a:1b:4c:49:8b:7b:aa:02:
9a:62:79:4d:6a:14:80:bf:33:d9:1e:fb:70:d9:2a:
01:83:b5:58:91:a2:52:86:18:9b:5e:bf:ce:08:78:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:73:3A:DA:83:AD:6A:9A:5E:CA:F9:6A:B1:3A:6D:E3:CE:CC:A3:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/043B11020DC811EF94DBFF33017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.50.0/24
Signature Algorithm: sha256WithRSAEncryption
44:d3:75:f6:ef:b3:e9:94:7d:ea:83:98:c6:a7:0f:a7:75:43:
5e:8c:cc:18:66:72:4a:7d:47:6e:5b:0f:eb:59:69:91:05:9a:
2d:25:c0:22:07:e9:df:75:0d:10:ee:05:55:57:f6:da:b1:16:
1e:85:91:94:61:69:8d:ca:0a:80:50:3f:76:89:30:31:4c:0f:
42:27:b8:f2:fd:46:70:c8:d5:66:a7:76:89:39:1a:6a:43:57:
7e:45:3f:37:3f:48:96:26:25:63:57:a9:3e:02:23:bb:8f:08:
f8:14:8e:dc:52:5b:42:25:70:ca:73:a7:29:2f:ec:d2:3c:41:
5b:ec:ab:01:99:f1:68:23:fc:99:86:59:6c:69:44:ef:cb:1d:
82:4b:04:79:d7:ab:94:65:98:d4:8a:d9:4b:26:c5:3d:7c:52:
71:e8:8b:28:93:6f:81:d0:e9:39:6b:4f:11:4a:c3:94:f0:27:
72:f0:32:c7:1a:12:a1:d0:e3:8f:f2:b8:9e:7f:7d:3c:62:1f:
a9:4d:bf:d7:0d:ed:3f:72:96:56:17:5c:c0:57:fa:82:01:1b:
b1:44:9d:65:ad:b6:6a:92:ea:14:00:03:ea:1b:72:82:a7:f1:
65:80:d6:69:0b:93:7c:2f:1f:6b:2b:ec:c4:16:9a:ba:22:af:
5e:e9:d8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:57:13 2024 by rpki-client on console-ams.rpki-client.org