Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15720812037911EF866FC631017001B1.roa
File: 15720812037911EF866FC631017001B1.roa (raw, json)
Hash identifier: hx08GkYi/MhADOvujsEGZfp/8x+ReQ97QCXI6wUkT1Y=
Subject key identifier: 56:05:78:E6:AC:73:58:87:B1:20:00:18:67:F7:63:27:32:B7:39:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B106
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15720812037911EF866FC631017001B1.roa
Signing time: Fri 26 Apr 2024 03:00:06 +0000
ROA not before: Fri 26 Apr 2024 03:00:02 +0000
ROA not after: Sun 12 May 2024 03:00:02 +0000
asID: 397630
IP address blocks: 154.202.96.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45318 (0xb106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 03:00:02 2024 GMT
Not After : May 12 03:00:02 2024 GMT
Subject: CN=662b18b6-3407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:c5:38:fe:ce:f9:f6:f6:02:c2:84:b0:ba:
08:cf:ba:0a:03:10:fb:83:1b:a5:ba:d1:73:f5:c5:
5a:bc:16:ee:f7:10:85:bc:f8:7a:62:9d:94:39:59:
3a:d0:84:ff:e6:04:ae:44:cd:97:2b:93:17:17:18:
86:35:35:ef:e2:b9:bf:33:1e:f5:5e:1e:02:b5:9c:
98:c7:33:d7:b2:fa:80:a3:d2:66:6a:e6:8e:13:c2:
c3:ef:20:d8:88:22:09:6a:d8:32:f4:59:b2:62:c3:
81:2a:4f:3f:75:2d:87:da:0d:f1:17:40:97:e4:7a:
71:3e:0f:fd:e8:5a:58:2c:27:2d:62:c0:95:63:11:
18:a9:64:bc:7d:32:0a:1c:20:ad:3f:02:92:5b:1f:
d7:74:b6:27:e7:13:03:56:31:ea:25:0d:7a:58:4a:
c1:8b:0b:ea:34:8b:ad:8a:89:f6:ff:32:0c:25:41:
be:07:f7:7c:8c:25:17:16:a8:55:1e:61:2c:2c:9f:
c5:57:6e:6b:5d:08:21:1f:57:1b:b1:31:f8:48:45:
55:99:88:9e:9c:f2:05:c0:37:d9:a3:71:75:cf:33:
5d:25:1d:cd:95:98:e9:ab:82:e3:5e:14:e9:af:8e:
49:48:80:e7:9e:ae:bf:3c:83:78:06:bf:60:35:33:
b5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:05:78:E6:AC:73:58:87:B1:20:00:18:67:F7:63:27:32:B7:39:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15720812037911EF866FC631017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.96.0/22
Signature Algorithm: sha256WithRSAEncryption
70:6f:cb:11:5b:a5:56:a9:4c:3b:e2:06:f2:22:26:21:dd:5b:
a2:43:ed:0c:5b:67:4a:b3:f9:c6:56:1d:98:5c:43:be:5c:49:
53:21:b5:4b:46:38:60:08:04:25:88:f5:4b:02:25:06:c2:a7:
fc:25:61:7b:c6:75:7f:a3:ef:57:70:f3:aa:58:8d:6d:58:93:
63:a4:4b:24:25:a4:be:24:03:00:0f:cc:d1:5d:65:37:df:48:
81:c2:8a:e7:94:9f:f3:3d:cd:07:d7:c6:2b:cb:67:63:27:bb:
f1:5e:33:3f:f8:55:0f:a1:c9:9c:14:75:d8:94:8d:52:9d:5e:
df:26:30:b8:70:61:e2:1e:73:57:cc:ab:9b:8a:46:e9:98:ad:
dc:75:c8:ea:9f:ad:23:00:09:1b:52:39:78:a9:00:cf:10:7d:
6f:6a:8d:81:c9:80:8e:e2:c7:b5:b0:6a:a5:f2:5e:ee:91:71:
ab:dd:1e:4f:33:65:f1:cc:fe:ac:81:19:2c:9b:39:e1:29:2b:
f0:cf:d3:91:bd:e0:32:68:6e:02:41:57:de:c4:ed:bd:4e:81:
92:87:77:63:05:d6:72:c1:ee:27:0f:12:b7:e2:87:85:d0:bf:
18:c2:1b:51:9b:16:aa:16:b9:ae:f3:94:d2:bd:0d:ee:48:52:
f7:18:bc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:12:05 2024 by rpki-client on console-fra.rpki-client.org