Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/318D1D4A07AF11EF9E807106017001B1.roa
File: 318D1D4A07AF11EF9E807106017001B1.roa (raw, json)
Hash identifier: 3nRDxjb0AP4beUV12zlzyZUgp1O3zLelg0rkpfTHn2w=
Subject key identifier: B2:76:92:C0:42:2F:35:B9:8E:5B:82:C6:0B:74:B8:94:03:36:CC:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B395
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/318D1D4A07AF11EF9E807106017001B1.roa
Signing time: Wed 01 May 2024 11:37:30 +0000
ROA not before: Wed 01 May 2024 11:37:27 +0000
ROA not after: Fri 17 May 2024 11:37:27 +0000
asID: 151800
IP address blocks: 154.197.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45973 (0xb395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:37:27 2024 GMT
Not After : May 17 11:37:27 2024 GMT
Subject: CN=6632297a-b2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:e5:3d:0b:d6:28:63:32:56:68:63:91:a0:
72:40:4d:ab:f9:fe:01:4b:b9:7f:d3:ed:75:08:a1:
85:fa:8c:af:54:c8:00:6f:ad:90:e1:6b:ae:fd:52:
52:ff:2e:8a:a8:2f:46:f1:a0:e6:d4:4f:31:85:62:
50:5b:11:6a:5d:e8:6e:55:3e:89:7a:e2:b1:cd:32:
6b:04:45:84:22:b3:26:6a:60:5f:d4:55:bc:9b:82:
d0:2d:07:91:d7:1a:78:ad:95:f4:04:8f:b8:0c:c7:
9e:2c:86:46:77:a3:e4:db:13:9d:00:95:b5:87:5d:
6c:3e:ce:5f:86:12:5c:34:13:75:a7:13:64:fc:01:
f8:ea:8a:dd:d7:18:ac:68:12:42:f7:30:50:86:65:
51:26:a5:f8:5d:b4:06:bf:13:9e:89:5a:7c:00:f2:
8c:5d:e2:15:e4:9b:27:04:28:29:d2:fa:71:39:1b:
74:15:00:8c:81:f9:0f:77:c8:16:6e:69:17:94:4f:
04:a0:5c:b1:da:b6:ed:4b:38:e2:96:c9:18:e1:c6:
d4:3a:50:0f:7a:20:bf:c7:18:2d:7b:bb:35:56:0e:
93:e3:47:ad:96:db:29:3d:69:2b:1c:5c:f2:1d:8c:
f8:85:1e:72:3d:94:03:d7:2e:3f:64:96:d6:39:18:
36:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:76:92:C0:42:2F:35:B9:8E:5B:82:C6:0B:74:B8:94:03:36:CC:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/318D1D4A07AF11EF9E807106017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.94.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:a5:3e:05:aa:4d:51:cf:57:c6:60:ac:c0:9d:07:a4:d0:60:
36:64:bb:d0:24:19:af:20:ef:0f:a2:67:fc:67:55:81:50:b6:
e7:19:5b:b9:8b:9e:d0:86:34:f1:56:04:94:51:31:bc:9b:6b:
82:7f:61:55:61:61:ac:09:77:cf:6d:e4:29:e3:aa:6c:31:93:
c4:50:76:ff:db:7a:b2:c6:82:98:08:bb:86:6b:91:61:e8:78:
41:2f:84:40:00:26:bf:ff:11:24:d2:fd:3e:20:2f:7c:25:4f:
8c:92:62:17:f2:7f:f1:69:df:95:af:20:ac:6b:ca:22:d5:89:
6d:0c:91:9e:e3:70:6c:55:cf:ee:ea:a4:dc:7d:34:2b:02:8d:
86:a5:3d:2d:f1:52:4d:e9:4c:52:82:62:ae:4c:13:00:45:4e:
95:50:91:6e:3f:91:ed:94:09:5a:ab:16:b4:d1:d0:ad:a7:4f:
96:f9:0c:aa:6b:35:05:4b:a7:75:b8:8f:36:1c:58:5b:97:00:
5e:ed:73:01:92:ea:0b:c6:ac:54:3f:00:9d:e2:b5:27:f9:51:
c4:32:3d:fd:cd:3e:07:c3:73:94:47:16:12:4a:4e:26:45:39:
e5:89:93:6e:16:7c:f9:58:27:87:90:77:c0:b3:6d:85:14:dc:
1e:76:98:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:58:23 2024 by rpki-client on console-ams.rpki-client.org