Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BA492D6088811EFAEA84F6B017001B1.roa
File: 1BA492D6088811EFAEA84F6B017001B1.roa (raw, json)
Hash identifier: fuIQI3cw/s4I9iN/AYsanhSyqSoUozLt45wOHK2dEFk=
Subject key identifier: CB:BA:81:A1:75:1C:B4:5D:7E:6C:C2:6C:AF:19:04:EE:ED:EA:90:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B3DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BA492D6088811EFAEA84F6B017001B1.roa
Signing time: Thu 02 May 2024 13:30:14 +0000
ROA not before: Thu 02 May 2024 13:30:11 +0000
ROA not after: Sun 12 May 2024 13:30:11 +0000
asID: 5065
IP address blocks: 154.94.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46046 (0xb3de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 13:30:11 2024 GMT
Not After : May 12 13:30:11 2024 GMT
Subject: CN=66339566-5c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:61:90:64:a3:14:c4:f0:62:be:b0:69:2c:87:
f1:71:58:b5:11:e6:c2:69:3e:76:d5:21:86:69:ae:
48:b5:42:f4:03:f6:da:25:4c:5d:e7:20:19:0b:aa:
8a:90:7c:88:ae:92:e0:f5:8e:70:f2:04:ed:46:2d:
2f:2d:9a:76:44:64:c1:28:ba:a5:3b:76:5c:92:60:
11:93:b5:47:a2:0e:16:35:d6:c2:8f:16:2c:4e:a0:
cb:1c:30:c6:29:83:8d:9c:cc:0b:14:7b:5f:ca:6a:
fa:0a:db:11:c4:3d:d3:55:9e:c2:23:94:7d:b8:50:
62:2b:30:17:e8:b3:df:ae:e1:ef:e8:9f:20:6f:d8:
e5:d9:83:28:c9:7e:1e:3a:c1:32:98:14:dd:f4:04:
84:87:7c:da:e0:a8:a0:40:d9:67:64:c7:18:f6:a0:
46:07:e7:03:04:03:23:f3:82:25:80:b1:a0:3f:14:
65:3b:b2:76:95:65:0d:c5:d4:c9:b4:80:0d:cd:1d:
6f:5e:b1:92:e5:96:95:4c:a1:96:fd:7a:fd:31:6f:
c6:10:1a:c6:1c:92:5f:2b:39:b0:d5:f9:f9:1f:97:
1f:22:5f:c3:18:3a:1a:54:e1:55:63:1a:ff:83:a4:
45:a5:92:a1:0b:20:39:74:68:d6:b0:24:25:a8:19:
f5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BA:81:A1:75:1C:B4:5D:7E:6C:C2:6C:AF:19:04:EE:ED:EA:90:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BA492D6088811EFAEA84F6B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.43.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:6b:06:de:63:a1:c7:22:ce:65:0d:9d:c2:a3:69:de:ce:14:
a8:92:85:44:e8:75:38:c3:71:93:e2:9e:38:84:18:b5:40:5e:
4a:1c:7e:5d:15:51:a7:d9:f7:1b:53:18:49:e0:73:c4:ac:27:
3a:a3:20:d1:cd:03:e5:a8:2a:f2:c5:4b:e4:a1:d5:a0:39:f0:
09:5f:a6:b0:7c:f5:36:3e:9c:de:35:61:99:e0:9f:d5:03:b6:
8d:c6:6e:24:3a:98:b1:b8:90:7f:47:28:ba:a0:da:29:6e:81:
4c:2d:d1:3c:35:41:95:bb:2b:ea:55:60:3a:5d:01:a3:86:0f:
dc:d3:48:e8:23:f7:bd:bb:da:03:72:bc:a9:68:04:2d:f0:b9:
47:ac:d0:55:21:1d:f2:25:ba:0b:40:93:64:7c:25:2c:14:34:
28:5a:ab:18:3a:18:a5:64:d6:3a:5d:f3:59:32:b4:2c:34:2b:
f4:5b:09:fa:01:a4:82:98:1d:2e:46:a2:3f:7b:f3:be:f2:fa:
c6:bc:3f:3f:2d:62:f7:ea:33:ac:cf:21:01:b8:c1:8a:95:cd:
c4:d9:7e:c2:81:55:3b:ff:74:bf:be:87:75:eb:f0:14:d0:b1:
83:ef:9d:19:d3:9e:b8:7f:1d:19:84:4c:54:a3:a8:bf:59:56:
12:6c:45:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:12:05 2024 by rpki-client on console-fra.rpki-client.org