Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A635F8A0DBE11EF9F5D4C63017001B1.roa
File: 0A635F8A0DBE11EF9F5D4C63017001B1.roa (raw, json)
Hash identifier: YN6CmC7OGq/1ayFl7Oe3pGZ40syo19GsC0ZKRq4OGrA=
Subject key identifier: 4B:1A:D7:C8:C1:BF:0E:76:FB:C7:C7:93:88:B9:33:4E:B6:81:F4:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B5DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A635F8A0DBE11EF9F5D4C63017001B1.roa
Signing time: Thu 09 May 2024 04:38:54 +0000
ROA not before: Thu 09 May 2024 04:38:51 +0000
ROA not after: Sun 19 May 2024 04:38:51 +0000
asID: 21859
IP address blocks: 154.94.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46559 (0xb5df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 04:38:51 2024 GMT
Not After : May 19 04:38:51 2024 GMT
Subject: CN=663c535e-f738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d0:2d:d6:7c:93:78:3f:e5:38:bd:48:bd:33:
a2:fa:94:94:d3:0f:64:17:c7:5b:2b:0e:f8:19:73:
72:e4:c3:93:d3:56:11:68:74:69:26:4a:45:95:6f:
f1:31:cd:2a:36:69:2a:14:7b:93:81:d1:88:94:4e:
3a:6d:3a:1d:0c:b6:2b:da:8f:be:fb:cf:b6:09:cc:
b1:90:3b:66:8e:3e:6d:4b:60:f9:51:bc:c9:78:a4:
28:c6:53:ed:9d:15:3f:a3:2f:51:ad:f2:86:d5:d6:
53:f1:f1:fb:e1:2d:1d:c4:19:dc:70:35:6a:32:b6:
7c:32:34:2a:c6:f7:9b:82:11:e9:6a:39:bb:33:6a:
d4:05:57:4e:da:4e:64:8d:0e:3a:9a:e6:d0:88:a2:
61:0b:48:24:c5:31:25:93:fa:84:9a:fe:e5:a4:26:
e2:e9:c3:66:33:7d:1c:fa:bc:b7:e0:9f:62:8b:d1:
db:56:66:2a:31:7f:60:e7:77:e7:99:3c:47:63:05:
8f:30:69:dd:27:6d:2d:22:fd:ec:19:7c:5c:7a:84:
dd:16:21:ef:fd:c3:91:b6:38:8f:ff:39:6b:6c:77:
14:a6:cd:fd:f8:cf:5e:45:20:b9:92:6f:6e:35:b6:
cd:cf:1f:4b:2c:4a:20:66:1b:82:94:e7:4f:07:c4:
16:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1A:D7:C8:C1:BF:0E:76:FB:C7:C7:93:88:B9:33:4E:B6:81:F4:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A635F8A0DBE11EF9F5D4C63017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.49.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:4f:a4:0f:a6:4d:57:0b:d3:6c:82:3b:43:34:92:0b:66:0f:
5a:fd:d8:52:0e:a0:d0:5f:e8:20:e6:b3:ac:ad:fe:be:d0:7a:
f5:85:f3:4a:52:56:22:ba:23:f5:8d:03:b6:7e:4b:68:93:b9:
4f:57:4d:06:d5:9e:0e:b3:1e:ef:ba:0f:fa:65:b3:b2:80:49:
c9:5f:35:45:db:e0:65:a6:5d:71:97:3c:24:82:c0:04:09:22:
90:9d:f4:2c:6c:96:58:d3:cf:93:cf:09:bb:fc:1e:22:35:81:
c9:a8:66:db:6f:09:34:86:0b:89:7f:ff:f0:ba:2a:b1:1a:ab:
27:79:59:50:3f:1d:cb:c3:e9:fe:f2:fe:27:d9:6c:a3:57:9f:
8b:aa:69:63:82:09:d9:ec:a8:a1:ea:e4:f7:75:21:f1:5d:b7:
94:b0:06:08:8e:5f:f1:31:7c:d8:fe:b3:88:e2:bf:c2:4b:9b:
f2:d1:9c:ce:7a:8b:bc:2b:a4:28:15:8d:7f:21:f4:3e:e4:fd:
ec:56:a1:ca:d5:fc:7a:03:a2:1b:03:19:ad:47:fa:b1:0a:09:
a2:20:3c:cd:03:65:27:a1:83:a5:1a:4d:9f:d5:e2:d2:50:00:
e8:b3:53:8e:ee:41:99:53:5e:6b:a7:57:82:20:23:ae:0e:c6:
39:f1:b4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:57:47 2024 by rpki-client on console-fra.rpki-client.org