Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2957B0FA0DC611EF86DD1524017001B1.roa
File: 2957B0FA0DC611EF86DD1524017001B1.roa (raw, json)
Hash identifier: w/OgPu1Unbajejp31YrvzFZf8gsc115Bbtrb0MbsEow=
Subject key identifier: AB:A6:B1:06:01:58:AF:C6:E8:C1:43:8C:C7:58:49:5B:4E:6A:A3:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B5F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2957B0FA0DC611EF86DD1524017001B1.roa
Signing time: Thu 09 May 2024 05:37:02 +0000
ROA not before: Thu 09 May 2024 05:36:59 +0000
ROA not after: Sun 19 May 2024 05:36:59 +0000
asID: 212238
IP address blocks: 154.94.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46579 (0xb5f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 05:36:59 2024 GMT
Not After : May 19 05:36:59 2024 GMT
Subject: CN=663c60fe-99f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:fb:71:85:0b:22:eb:ed:02:a2:75:0d:77:
f5:f6:10:50:ee:ec:6e:ad:f2:55:e5:ca:69:04:c1:
9c:70:ee:fc:36:1e:a5:e7:8f:b8:cd:c8:1d:c6:09:
78:83:ae:cc:4d:50:6b:85:7c:0c:56:8e:5e:cc:5a:
9b:76:f7:67:5b:22:0a:fd:b4:79:02:2b:12:91:5a:
59:44:d8:e0:85:f3:bb:b8:2e:2b:b5:53:92:e4:04:
9f:ce:98:0d:51:6b:a2:f4:86:6d:67:71:56:b1:bd:
5e:aa:8f:8e:e1:b6:2f:6d:57:52:e8:d7:7e:46:f8:
a7:d9:99:b6:4d:9c:61:54:48:e3:0f:a0:a1:47:bf:
ac:02:f5:89:26:0c:f5:21:ac:9d:60:f6:71:d3:84:
e9:7c:ce:34:b7:c1:1c:22:1f:eb:ff:6e:02:92:d7:
cd:93:a4:92:df:12:11:c1:2d:e8:4c:ee:be:67:0d:
79:eb:3a:58:14:38:e5:71:6b:1f:fb:d9:3d:29:7d:
0c:25:24:68:f8:12:49:5c:f4:1a:eb:0b:cb:2b:68:
4f:13:59:d9:e5:e6:5b:df:2a:74:6a:f0:78:07:af:
b8:aa:ae:b1:12:05:e4:91:2a:f1:ad:5b:d3:d2:2a:
70:5a:6b:75:a8:9f:94:6c:5d:ac:45:be:70:5f:54:
0c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A6:B1:06:01:58:AF:C6:E8:C1:43:8C:C7:58:49:5B:4E:6A:A3:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2957B0FA0DC611EF86DD1524017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:dd:cd:d7:a4:ac:f6:e7:c6:e3:ff:70:4a:6e:08:db:75:f7:
74:99:ed:5a:41:0c:14:4a:1c:1e:15:a5:f9:36:51:ed:27:01:
9a:90:ab:17:9a:0c:7f:59:ea:12:17:2d:32:89:ff:58:47:a2:
cc:ae:0b:00:f3:41:97:2d:ec:b7:45:e9:56:6a:50:18:e7:b2:
7a:8e:6f:62:3e:4d:59:12:c5:3c:bc:d2:83:cc:d2:d5:a2:a4:
da:a7:d7:76:40:3a:5f:69:43:f4:a8:b9:0b:2e:a3:58:6e:f3:
31:d2:42:13:24:d5:1f:d5:5f:ea:25:87:87:dd:70:3f:5c:7b:
76:75:73:06:97:9e:99:f1:86:45:29:ec:dd:d7:9d:d8:56:36:
fd:36:62:32:e5:11:c3:f7:e8:26:56:19:ce:20:f0:75:37:16:
39:a7:10:19:c2:0c:e8:7f:0e:e8:0d:ef:4f:2b:fc:dd:21:2b:
0b:ab:ac:db:79:b9:2c:40:39:55:14:b5:55:cf:3e:1b:77:49:
66:90:01:23:eb:30:37:d7:ab:2a:44:34:8a:96:46:a5:b5:be:
d1:8d:29:aa:3a:af:22:cd:06:8f:84:c2:fd:4a:8f:e2:03:83:
99:5f:9e:75:14:bc:90:10:fc:0e:8b:de:83:8d:98:42:27:99:
45:fd:bd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:57:48 2024 by rpki-client on console-fra.rpki-client.org