Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/569F4B9E088611EF9310B95B017001B1.roa
File: 569F4B9E088611EF9310B95B017001B1.roa (raw, json)
Hash identifier: a4ZfY6ud+z1hSrUzTePtnMMrWM1xfa2YcaLlxTrsOP0=
Subject key identifier: AD:55:25:4F:16:1D:B0:26:5B:3A:FF:AA:B6:73:E1:E3:57:26:8B:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B3CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/569F4B9E088611EF9310B95B017001B1.roa
Signing time: Thu 02 May 2024 13:17:34 +0000
ROA not before: Thu 02 May 2024 13:17:31 +0000
ROA not after: Sun 12 May 2024 13:17:31 +0000
asID: 5065
IP address blocks: 154.94.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46028 (0xb3cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 13:17:31 2024 GMT
Not After : May 12 13:17:31 2024 GMT
Subject: CN=6633926e-0260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:18:02:3c:f2:6f:2c:4c:18:0c:6a:a9:bf:9e:
81:bc:83:76:92:2e:b5:93:c9:83:fa:8b:2b:3e:72:
a2:18:8d:6a:52:ba:8e:b4:98:b3:b3:d1:fc:7c:49:
b4:b1:5d:be:d6:4d:3a:9c:9a:fd:76:f1:df:75:64:
bb:59:b5:26:2e:8e:db:28:5a:e9:6c:7c:c5:a3:08:
e0:8d:96:2b:e6:a0:eb:af:14:1d:16:25:4f:57:39:
a2:fc:28:52:20:d2:4e:19:ba:99:80:fc:14:1f:f1:
b0:cd:66:9b:17:3b:e0:4c:a9:0d:3e:6f:23:c6:9f:
45:21:ff:bb:68:f3:3b:02:95:d7:ba:a1:24:9a:69:
e5:2a:a8:38:0b:c4:8c:7d:63:c3:6d:0a:3f:ea:1c:
f0:b7:d3:fc:5d:ae:e2:3b:23:55:ae:e5:b0:dd:49:
80:4c:0b:b0:43:67:9d:de:33:73:b4:be:d9:9c:6e:
93:1e:48:f9:ee:18:10:a2:28:89:a5:28:ae:7d:ef:
36:70:a0:04:ae:82:cb:71:ee:3b:a4:ae:ee:d8:82:
c7:d4:df:8d:12:73:39:03:44:9a:77:45:6b:47:eb:
7a:0d:e4:21:a9:fd:19:87:46:c5:fc:a8:41:0a:8b:
f7:c3:53:77:e4:82:04:30:3e:a3:f3:72:15:46:37:
42:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:55:25:4F:16:1D:B0:26:5B:3A:FF:AA:B6:73:E1:E3:57:26:8B:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/569F4B9E088611EF9310B95B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.56.0/24
Signature Algorithm: sha256WithRSAEncryption
42:5a:5f:85:49:28:72:c0:67:62:be:dc:4f:d2:bd:4d:ec:42:
83:b4:5e:14:bd:c4:67:3e:24:59:c0:22:68:c3:80:e5:f3:b8:
44:77:63:6a:72:7f:ff:39:f6:34:b8:5b:fe:b2:76:03:a8:62:
3a:7a:a5:cc:2f:02:c3:41:70:ce:95:52:59:83:83:56:86:1b:
30:6f:db:fe:ee:68:7d:d8:f8:c0:b3:9b:d9:02:45:20:51:0e:
f5:8d:c0:1d:1d:31:8f:cb:be:06:63:1b:58:5c:ba:57:9f:b0:
b1:bb:39:79:55:5b:51:17:d5:fd:43:b3:20:b7:4e:de:ad:b7:
fb:2a:8b:e4:f0:ee:87:c4:70:04:1a:db:b3:77:01:67:f1:54:
0c:a1:d0:ad:1e:9d:09:5e:73:1f:75:89:e2:ac:43:ac:23:eb:
5b:bd:72:96:9d:a5:da:39:f4:15:92:b1:f2:c7:d3:d7:8d:71:
40:f1:42:a5:2c:13:af:1b:e3:81:bc:68:33:d5:47:a7:90:a4:
16:b4:58:6d:0c:3f:0f:0a:8b:3c:20:44:3b:7e:7a:b6:2b:d8:
bd:cb:ba:80:61:86:38:6d:37:b5:22:99:67:4f:d8:71:ac:fe:
73:3e:2c:eb:b4:a6:50:24:30:05:b2:54:b6:e1:a3:f1:af:91:
0a:1c:f1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:46:22 2024 by rpki-client on console-ams.rpki-client.org