Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B31CF740DC711EFB679A72D017001B1.roa
File: 0B31CF740DC711EFB679A72D017001B1.roa (raw, json)
Hash identifier: r/rLvdDxZo+1w/LaHIEZAkYK3TEoSe84pj1XmBTYS4c=
Subject key identifier: 7E:B7:95:84:E5:58:9F:18:B2:9E:86:56:FE:F3:9E:58:46:46:09:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B5FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B31CF740DC711EFB679A72D017001B1.roa
Signing time: Thu 09 May 2024 05:43:21 +0000
ROA not before: Thu 09 May 2024 05:43:17 +0000
ROA not after: Sun 19 May 2024 05:43:17 +0000
asID: 5065
IP address blocks: 154.94.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46591 (0xb5ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 05:43:17 2024 GMT
Not After : May 19 05:43:17 2024 GMT
Subject: CN=663c6279-9d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ee:f9:b4:83:cb:21:bf:12:bb:61:17:92:1d:
5e:66:33:43:e1:4d:15:07:3d:07:03:c0:02:16:7e:
bc:eb:93:34:63:75:02:39:03:85:0e:ce:dd:c8:3c:
13:13:5e:dd:d7:3a:10:36:b4:e5:37:04:bc:92:1d:
0d:27:f4:3c:68:ea:ee:13:8e:fa:7f:08:45:c9:da:
22:de:0e:65:ad:06:fa:b3:8b:13:3e:58:ac:6f:3e:
e0:0f:0c:4b:ff:33:c0:fa:0f:0f:a5:53:e5:29:c5:
8a:ef:3d:68:31:24:d7:07:7a:51:0f:e5:d4:ca:b4:
74:c6:54:19:a7:86:96:57:54:46:db:5a:8c:93:eb:
24:17:ac:40:4a:16:2f:8b:48:26:f8:7a:1d:dd:4a:
07:e3:98:f4:c4:e0:86:69:cc:24:88:72:18:6a:87:
49:ce:d1:88:f5:2d:c4:a4:69:09:e5:bf:95:a1:d9:
b4:18:a3:d9:bb:79:73:8a:34:d3:d3:ba:71:91:88:
bc:fd:d6:fe:4a:5f:63:5f:9c:c1:7c:19:20:08:e7:
17:c1:12:7d:69:9a:ee:f9:07:55:9d:a1:e9:26:7f:
93:f1:91:2d:e5:fb:a1:ea:c8:21:6d:39:34:92:d4:
26:be:e0:f5:35:08:26:14:10:32:a5:75:79:a6:c9:
d8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B7:95:84:E5:58:9F:18:B2:9E:86:56:FE:F3:9E:58:46:46:09:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B31CF740DC711EFB679A72D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.32.0/24
Signature Algorithm: sha256WithRSAEncryption
70:23:29:d6:69:38:da:b8:60:39:af:26:90:18:09:f2:43:4d:
8a:12:b8:4d:b2:69:15:b4:11:d5:19:61:43:85:00:54:45:b6:
0c:f7:3f:e8:b1:db:3c:01:36:90:1f:4b:f5:f7:04:1e:f6:25:
f6:ba:02:4c:07:13:62:41:da:9c:cb:32:9a:9f:fd:a8:03:e5:
f1:32:fb:f1:da:92:6d:7a:02:63:6e:8a:8a:8c:eb:5e:62:10:
32:21:f9:85:76:e6:40:be:a5:32:dd:9c:58:d8:a9:13:39:48:
44:9f:df:b7:2d:38:24:b3:7e:f1:41:5a:b0:f5:c2:3f:1f:a0:
24:94:e0:10:b1:44:f1:a3:91:91:e3:b7:79:c3:6f:59:66:75:
66:9b:24:61:57:23:30:11:ab:ca:eb:3e:94:64:d5:20:c5:46:
07:1c:bc:96:57:ca:e9:49:ef:92:8e:f9:98:db:5a:a5:6b:c6:
96:d9:4f:5f:a3:51:40:9f:93:9b:fa:29:64:fd:43:da:4e:24:
c2:56:b0:d9:90:98:17:f6:d6:8f:9e:54:8a:1d:b7:8a:3c:ba:
d0:4a:17:6c:9d:c8:e0:30:50:b1:be:f9:94:75:b4:93:cf:b7:
72:31:62:04:f6:80:3e:9d:6d:d1:b2:54:89:89:d5:46:bf:a1:
21:ee:74:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:57:47 2024 by rpki-client on console-fra.rpki-client.org