Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/479F19DC0DC511EF8D08CD1D017001B1.roa
File: 479F19DC0DC511EF8D08CD1D017001B1.roa (raw, json)
Hash identifier: OuPpFivMgfGrM+iIi926BCiHEFHMahx4UIxKjQ7t41k=
Subject key identifier: 93:F2:0E:36:C1:F8:BE:90:EC:34:BE:93:DD:FA:27:7F:49:6B:E1:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B5E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/479F19DC0DC511EF8D08CD1D017001B1.roa
Signing time: Thu 09 May 2024 05:30:43 +0000
ROA not before: Thu 09 May 2024 05:30:40 +0000
ROA not after: Sun 19 May 2024 05:30:40 +0000
asID: 212238
IP address blocks: 154.94.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46567 (0xb5e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 05:30:40 2024 GMT
Not After : May 19 05:30:40 2024 GMT
Subject: CN=663c5f83-ced7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e2:0c:52:57:fd:7b:34:92:fc:e5:e3:8d:bc:
55:f4:90:a3:f2:95:4d:bb:04:e8:b7:a0:df:6a:2e:
40:29:6c:17:48:89:f7:30:f7:87:69:76:13:d0:12:
d0:a5:e8:b1:93:4a:24:89:69:11:66:a9:90:c9:41:
93:0e:77:8a:0f:1f:6e:ab:d8:6f:63:86:ea:b6:f6:
34:30:26:1c:6b:74:b8:05:c6:f1:33:3c:c2:07:c1:
38:2e:e8:a3:3f:a3:2b:31:ca:58:8c:8c:be:92:fb:
97:4e:13:80:40:7f:23:0a:bd:fa:9a:81:55:40:ac:
f0:24:a8:86:2b:80:eb:08:47:fd:f9:bd:0b:54:57:
28:d1:d8:fc:14:1b:cb:d8:a2:4c:56:fa:cf:2c:44:
f9:1e:fe:be:f0:cf:a3:b3:41:9b:cd:52:38:10:75:
0c:46:18:19:14:3b:8a:14:c3:53:eb:8f:d1:e5:c8:
18:c2:bf:d6:5e:6f:9d:de:38:ae:47:e3:d6:ba:af:
e4:ae:70:1e:65:89:af:b8:b5:79:8a:00:c2:54:14:
cd:ee:e7:01:47:12:99:07:02:08:23:c5:0f:ec:1e:
91:c5:81:74:d6:7f:fa:d8:10:8a:f3:ec:73:3e:51:
3e:6e:b2:00:b6:c2:13:97:f3:79:d4:24:88:f2:3f:
a6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F2:0E:36:C1:F8:BE:90:EC:34:BE:93:DD:FA:27:7F:49:6B:E1:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/479F19DC0DC511EF8D08CD1D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.45.0/24
Signature Algorithm: sha256WithRSAEncryption
84:14:0f:3d:3d:00:79:79:65:f0:7f:59:38:53:b3:8e:44:76:
51:d5:47:19:07:e1:8e:2c:c7:76:3a:0a:ca:3d:6d:fd:66:a8:
ab:5b:50:3a:2a:6a:db:a8:0d:b4:fb:ee:a3:9d:92:0e:f3:5b:
d2:94:18:9a:fd:8b:7a:ba:0c:df:4b:89:b5:9c:bd:60:75:45:
6f:54:0d:66:42:d0:92:3b:79:4b:77:f0:ac:b4:db:6b:26:88:
23:74:6b:a1:22:ad:8c:8d:48:51:a7:9b:77:76:d7:92:29:11:
ec:7f:57:f2:af:fc:89:10:64:e7:71:a9:2d:9f:38:b1:8f:f7:
67:24:97:09:d9:37:0e:9f:1b:20:0b:f5:6f:da:ff:a2:4c:45:
4b:49:3c:8f:9d:50:9a:bf:0b:91:c6:35:fe:f5:ff:80:29:e6:
13:7a:b7:fd:85:6c:0a:52:23:65:84:82:81:86:63:9e:09:cb:
90:c4:da:8e:b8:7a:3c:00:d8:47:1c:5f:ad:37:07:53:ac:33:
f6:57:f3:34:16:57:b9:f4:5a:be:9e:81:29:1e:f2:8f:2e:be:
45:c2:60:22:83:42:cf:ef:06:3d:a6:ec:d1:b3:a5:90:36:fb:
09:ba:85:7b:71:49:c1:70:64:31:cc:48:df:08:b6:15:d8:26:
e4:46:4d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:57:14 2024 by rpki-client on console-ams.rpki-client.org