Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18ED2476088911EFA4A047F3007001B1.roa
File: 18ED2476088911EFA4A047F3007001B1.roa (raw, json)
Hash identifier: cS6O81FEEe1/WMPCSKXSYHEH1cQ4pItZQDC0GbUodWQ=
Subject key identifier: DD:55:09:2D:B0:CC:07:9E:3A:FE:3A:00:3A:B3:60:B0:58:2D:7D:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B3E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18ED2476088911EFA4A047F3007001B1.roa
Signing time: Thu 02 May 2024 13:37:19 +0000
ROA not before: Thu 02 May 2024 13:37:16 +0000
ROA not after: Sun 12 May 2024 13:37:16 +0000
asID: 5065
IP address blocks: 154.94.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46056 (0xb3e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 13:37:16 2024 GMT
Not After : May 12 13:37:16 2024 GMT
Subject: CN=6633970f-27bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:10:aa:be:50:e4:a3:a6:37:33:0f:a2:54:78:
2c:75:61:6d:0c:0a:af:30:81:d8:b5:91:39:26:b0:
85:23:e7:9e:4e:46:10:b2:62:97:1e:c2:1e:ec:fc:
a0:51:3d:93:f2:5d:7e:98:b3:3d:8d:69:aa:e3:3b:
03:8a:81:41:ce:2d:58:c5:28:e4:44:b4:8d:b9:8b:
2c:e7:e5:2a:cf:7c:c9:2d:83:18:28:78:b5:5c:d0:
a6:33:ab:20:5f:49:00:f2:83:74:cd:c2:55:c0:49:
4a:c2:12:05:43:39:1e:2e:78:cf:b6:22:ce:a4:a8:
7f:4b:2d:f6:33:b3:93:02:e3:b0:07:b3:a4:e9:cc:
d4:08:af:02:e1:64:45:96:f2:04:32:db:f4:38:75:
e5:2d:df:3d:de:90:4e:31:8d:21:57:1d:d8:e8:cf:
20:91:ff:b0:bc:3d:bc:1c:d3:0b:41:5a:a5:33:ff:
66:cd:3c:e4:9f:de:36:68:2f:02:68:a1:5d:1c:07:
dd:d5:a2:8e:8d:c7:bf:81:10:10:16:c7:92:b8:3e:
2a:c6:35:60:c1:09:27:6d:7d:11:d3:c8:34:89:b8:
77:69:a6:2c:32:23:f8:12:70:fb:da:81:2a:b3:e4:
b7:24:0f:32:23:1b:f4:1f:f6:91:25:60:5d:b0:9c:
fe:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:55:09:2D:B0:CC:07:9E:3A:FE:3A:00:3A:B3:60:B0:58:2D:7D:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18ED2476088911EFA4A047F3007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.38.0/24
Signature Algorithm: sha256WithRSAEncryption
56:b6:ff:c0:dc:21:01:b2:7f:1d:ab:17:f0:23:da:a6:9c:94:
fa:35:db:fe:f7:8f:26:fe:57:ce:44:ee:cd:9e:09:22:6a:bf:
d3:67:da:cc:95:95:8e:f3:df:42:c0:26:60:f9:70:37:4b:fc:
70:24:c3:4c:7d:80:58:4c:69:cd:cb:65:bb:7e:d1:72:1d:6c:
07:89:7d:73:36:f5:12:20:9d:91:5d:6d:4b:1a:a0:c2:f8:bf:
59:38:0a:bd:10:6b:a2:95:15:de:61:aa:c6:ee:ca:43:1c:b3:
82:fc:43:a8:d4:32:d9:5e:0b:54:8d:8f:68:8b:2d:fe:80:eb:
62:fc:25:70:42:e9:ad:8a:99:b3:77:80:de:9c:03:75:c5:cb:
f8:78:c8:1f:aa:c3:4a:8b:7f:fd:d2:3d:4a:10:88:86:bf:c6:
fb:2a:46:d9:4b:6c:9b:80:22:d7:74:66:c0:98:1d:4a:9e:98:
7a:4a:06:e2:d0:c7:80:cc:df:4b:50:69:3e:c3:82:54:24:9d:
db:3c:b3:b8:ff:fc:c0:04:39:77:7c:07:96:8c:68:31:d0:46:
ce:d1:03:95:35:3e:5f:13:27:5f:95:d1:0c:ef:98:59:a5:de:
78:89:a9:33:c6:31:8f:da:ee:f3:95:b6:f0:3a:68:6f:24:68:
90:71:19:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:46:22 2024 by rpki-client on console-ams.rpki-client.org