Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D7BB1760DBD11EF9A8DCD59017001B1.roa
File: 2D7BB1760DBD11EF9A8DCD59017001B1.roa (raw, json)
Hash identifier: F9TEeVtAjXONYjHifOcKlbMTAcFvNFm/FbLWYrtQquI=
Subject key identifier: F8:2E:4B:4C:51:05:23:C6:F3:95:5F:47:A7:55:57:FC:3D:58:6C:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B5D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D7BB1760DBD11EF9A8DCD59017001B1.roa
Signing time: Thu 09 May 2024 04:32:43 +0000
ROA not before: Thu 09 May 2024 04:32:40 +0000
ROA not after: Sun 19 May 2024 04:32:40 +0000
asID: 39600
IP address blocks: 154.94.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46547 (0xb5d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 04:32:40 2024 GMT
Not After : May 19 04:32:40 2024 GMT
Subject: CN=663c51eb-5699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d5:56:b5:d4:9c:f6:82:df:e7:da:8f:03:e3:
63:62:bc:8d:af:2c:81:43:54:41:fb:2a:34:95:fb:
56:75:ac:cc:b4:bc:b4:83:26:9b:4f:11:82:b9:2c:
5c:e6:ae:4a:fd:4a:ca:7a:cc:2f:81:e4:42:d7:cb:
27:0d:db:79:84:92:d4:a3:f0:ff:5d:1f:10:56:47:
ad:ab:8c:17:21:20:59:62:41:c5:0e:fe:56:ed:6e:
e8:c7:4b:49:c5:e0:9c:49:e2:77:ca:d0:ad:03:ed:
c4:1d:4a:59:e6:cb:be:8e:e5:8f:f0:10:e6:48:9f:
ec:1f:14:e5:d8:9e:72:ed:d9:98:32:f1:0a:06:c8:
6c:ff:3e:60:64:1b:57:a7:03:29:a5:dc:b5:3d:63:
93:d4:7e:89:bf:58:4f:9a:92:02:d0:ee:da:df:dc:
35:90:69:9b:10:20:8b:09:c1:58:bf:5c:54:bb:ee:
0f:3e:e1:09:47:0e:fb:80:79:59:07:3b:69:e2:25:
7f:0d:b0:d6:97:f8:5c:04:f9:47:2c:f6:6e:35:91:
ad:d5:23:d7:ae:c9:00:77:d1:6a:f2:01:5c:8f:77:
96:c0:fb:4d:7c:ec:05:39:6c:34:86:15:d5:9e:e8:
59:5c:d7:19:7f:a2:d7:5c:f9:62:50:6f:52:b4:4c:
6e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2E:4B:4C:51:05:23:C6:F3:95:5F:47:A7:55:57:FC:3D:58:6C:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D7BB1760DBD11EF9A8DCD59017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.62.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:82:70:ed:fb:b9:6f:e5:d5:76:0a:a2:d1:16:b5:52:f5:85:
1d:37:30:b5:9d:be:7d:86:b5:e4:d3:0c:c6:fe:ea:3e:53:28:
21:f2:e7:f1:5b:72:87:33:0f:32:74:96:d6:d8:86:96:fd:e6:
86:9b:9e:8a:29:e4:a7:b1:1e:ef:fc:e8:51:65:54:11:e0:1a:
41:92:12:01:2a:24:2f:10:0e:3d:cb:83:b1:0f:75:89:ac:6e:
2b:82:50:20:53:21:08:2b:3d:1c:a4:6d:91:71:a9:1d:88:49:
9f:6c:fe:ec:b1:fc:a0:71:b6:08:d8:4d:65:f0:96:44:ba:69:
48:19:19:c5:0e:ae:29:60:9e:89:37:93:a1:84:be:95:e0:cb:
d7:88:63:b9:73:46:e6:ed:f6:a1:91:02:33:8b:0c:ba:51:03:
ad:1e:18:c6:03:33:56:a9:31:2c:16:ec:6f:10:a4:0d:14:6c:
a2:8a:f4:fe:7f:94:31:b2:a9:94:e4:d5:2c:35:8f:1e:ca:0b:
76:83:09:df:9a:8d:70:5f:d6:3f:d5:ec:4a:b8:72:48:12:11:
1e:4e:30:8e:f2:68:f4:0b:8a:63:9c:92:c5:6d:0d:8a:46:c9:
6f:3b:bf:17:4b:f2:63:9e:c0:00:90:0e:f8:70:8a:b1:36:af:
00:49:7d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:57:13 2024 by rpki-client on console-ams.rpki-client.org