Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CD8ACB40DC811EF8AC78C34017001B1.roa
File: 2CD8ACB40DC811EF8AC78C34017001B1.roa (raw, json)
Hash identifier: 1XwyMkS/3gelb6cBLVIANAeOMiAsBtaZHLNFq1k1AnM=
Subject key identifier: 5C:24:D4:17:32:EF:AA:0C:87:16:1A:AA:9C:6A:4B:3D:F3:F9:A9:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B60D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CD8ACB40DC811EF8AC78C34017001B1.roa
Signing time: Thu 09 May 2024 05:51:27 +0000
ROA not before: Thu 09 May 2024 05:51:24 +0000
ROA not after: Sun 19 May 2024 05:51:24 +0000
asID: 39600
IP address blocks: 154.94.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46605 (0xb60d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 05:51:24 2024 GMT
Not After : May 19 05:51:24 2024 GMT
Subject: CN=663c645f-3795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:56:f4:26:2c:5c:6c:d6:bc:9b:97:ed:5f:12:
98:68:89:f4:a6:1f:27:86:ac:97:10:74:50:ed:d0:
1e:91:91:65:af:ed:af:5a:08:cb:d1:68:7e:3f:49:
f1:74:ad:2a:d1:e7:b9:59:60:0e:05:52:d7:2b:31:
c8:d8:1d:96:7c:ca:2a:4e:4b:ec:e4:1d:4b:5d:50:
a8:1a:e6:62:42:65:9e:1b:bf:4e:34:c5:e1:14:1e:
58:33:9c:2c:85:7b:72:a8:6e:64:7c:ba:81:67:d7:
c4:3d:60:25:e5:19:2d:a0:ec:ab:5b:d8:61:63:33:
b1:9c:55:75:ae:e6:8b:e6:03:be:2f:5f:66:76:93:
97:c1:eb:af:08:0d:02:56:23:d1:03:66:f9:a5:d9:
87:c0:e6:de:bb:d9:78:48:cf:e9:67:37:0f:88:4f:
24:71:dc:e7:0a:45:b1:87:64:a1:94:cb:66:1c:d2:
85:4b:ab:68:40:c9:be:4e:1e:d1:b7:69:45:e4:e4:
6b:4d:ee:10:1c:0e:55:62:92:c0:b3:84:52:d9:53:
24:a5:0f:28:60:ec:9a:5b:b5:f7:a5:be:e8:82:86:
70:ec:45:6e:c8:b8:ca:81:d9:db:e2:cc:63:c9:3d:
b0:5d:44:e6:63:a9:ef:df:45:ab:74:29:93:a1:db:
1d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:24:D4:17:32:EF:AA:0C:87:16:1A:AA:9C:6A:4B:3D:F3:F9:A9:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CD8ACB40DC811EF8AC78C34017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.33.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:54:6e:64:59:48:3a:75:57:0c:21:d7:4b:61:ee:a2:fb:12:
16:f5:49:1c:c3:87:a3:bb:b3:d2:97:72:e4:17:45:5e:b9:66:
1c:7f:96:09:ff:1d:58:1e:81:b1:72:34:72:01:9c:7e:55:54:
d7:ab:2a:84:62:53:dd:1f:03:b4:0f:e1:19:7c:ea:3f:46:23:
c2:c5:ab:f1:dd:e1:ea:68:8d:70:63:e2:63:09:32:8d:db:16:
61:de:9b:20:27:5d:b5:e1:93:14:03:d5:ed:4b:31:8e:d4:45:
4f:85:3c:3b:6e:67:6c:e8:7b:55:87:ff:ec:9b:56:36:1f:4a:
4a:97:3b:63:39:b2:60:16:d8:9e:67:c3:14:dc:3e:81:18:93:
ce:e3:41:6e:0b:ec:89:2e:b6:fb:6d:43:e8:d6:f2:9e:a3:f9:
a2:23:7d:f4:72:2a:f7:8a:d4:15:dd:a6:df:5b:46:da:d6:af:
89:88:ad:c4:f0:19:00:16:9e:4e:9c:43:2e:88:2b:b3:a8:b4:
9e:d3:22:c2:1b:a7:b9:f3:0b:39:3e:7a:a7:b4:8c:61:81:1a:
3f:00:23:a0:8e:29:ee:06:47:4b:ff:a6:78:ad:30:06:83:a5:
9b:0d:34:4a:99:9b:e8:80:36:20:ec:63:7f:36:42:da:79:ac:
92:66:27:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:57:48 2024 by rpki-client on console-fra.rpki-client.org