Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10FAC6E60DB211EFB7196002017001B1.roa
File: 10FAC6E60DB211EFB7196002017001B1.roa (raw, json)
Hash identifier: THmLgrfyDwd+PZaMaBWzNyX4Ah9suqAxHBPPHZ76hiI=
Subject key identifier: 1B:1A:5A:FC:E0:87:67:48:45:DD:F8:5B:C5:16:F8:37:8F:A8:71:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B5A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10FAC6E60DB211EFB7196002017001B1.roa
Signing time: Thu 09 May 2024 03:13:11 +0000
ROA not before: Thu 09 May 2024 03:13:08 +0000
ROA not after: Sat 18 May 2024 03:13:08 +0000
asID: 44559
IP address blocks: 154.203.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46501 (0xb5a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 03:13:08 2024 GMT
Not After : May 18 03:13:08 2024 GMT
Subject: CN=663c3f47-f5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2a:d6:00:70:b6:15:70:da:1d:94:0e:36:ca:
07:89:cc:35:e0:56:b9:0e:7b:f5:67:a4:43:60:24:
5e:f0:82:a1:3e:48:25:8d:fb:79:9a:2c:01:cb:17:
7f:93:7d:b9:32:56:f0:42:fb:db:75:3d:94:28:6a:
aa:eb:d5:af:c5:58:83:36:8f:c2:e2:d8:53:8e:3b:
20:7c:6b:fa:98:82:7e:bb:f5:76:fc:2d:5b:bc:e6:
42:70:fa:62:31:60:0e:8b:1d:c3:0b:12:24:39:a9:
3b:64:31:55:d5:aa:6e:b8:01:02:08:39:66:86:08:
26:b7:34:f8:fc:d4:d4:81:1b:69:f4:2b:10:78:28:
ab:36:65:16:cd:e4:df:f8:ce:79:7d:f7:26:69:de:
6c:16:a8:6c:3c:3f:ba:25:f5:66:be:5a:ca:ab:ef:
2e:ce:2b:b9:df:48:e6:64:aa:0c:33:2a:b0:96:42:
da:ce:48:53:11:79:1e:16:31:7b:f8:dc:e2:ce:68:
05:16:60:04:0c:c8:6f:f8:66:11:70:03:d7:ae:c4:
24:b3:b6:31:34:84:2b:fd:4c:80:a1:10:0f:fd:b5:
e1:f8:a2:51:51:5e:f3:cd:06:3a:43:60:1d:30:a8:
31:29:f8:fc:b1:9b:73:7c:78:0c:c6:ea:70:3f:30:
57:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1A:5A:FC:E0:87:67:48:45:DD:F8:5B:C5:16:F8:37:8F:A8:71:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10FAC6E60DB211EFB7196002017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.224.0/20
Signature Algorithm: sha256WithRSAEncryption
47:c3:25:86:87:c3:31:50:db:c2:f4:87:01:fc:f1:03:1f:ae:
d1:05:a9:3e:f0:9b:dc:f3:2b:28:92:a9:92:7b:08:ef:97:15:
dc:3f:79:6b:bb:e1:67:f0:cb:ac:3f:ee:3d:05:1d:ae:58:c4:
a2:72:36:a1:39:18:f7:e0:2f:44:2a:9d:45:bf:00:8d:8c:43:
d1:52:f8:04:35:1f:29:cb:b8:9b:63:64:a6:36:56:7d:3c:1d:
62:ee:3c:1d:35:a8:a4:f7:d0:a5:cb:79:af:5f:a9:01:90:66:
19:a2:ee:e6:01:c2:43:ea:2e:52:e6:47:6c:98:56:17:47:21:
4b:5a:26:ce:26:00:f7:43:1b:88:2a:dd:bf:54:6f:f4:e3:42:
3f:3b:34:af:0e:f6:15:f4:d4:8d:a8:06:e1:6a:9b:02:84:19:
d1:56:c2:ab:03:88:14:f1:ee:d3:ec:ee:0a:7e:69:db:34:83:
0d:38:51:7f:c7:0d:af:0c:d9:08:6f:3e:9b:a3:05:2d:b8:af:
8f:8e:90:62:33:3e:c1:c0:89:77:b9:8b:b3:fd:e7:d9:aa:f0:
cc:ef:a8:9e:00:5a:dd:88:b9:93:02:09:6d:fb:f3:5a:fa:18:
25:7c:a5:c4:42:85:19:bb:d9:de:4d:09:ad:7c:55:f0:61:9e:
5a:24:73:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:08:28 2024 by rpki-client on console-ams.rpki-client.org