Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66F95B22037911EFB0C1E232017001B1.roa
File: 66F95B22037911EFB0C1E232017001B1.roa (raw, json)
Hash identifier: /3/Ul9OMPTI4KrXgmFk1xq/z8MPtZ51btGPfXmbqXSc=
Subject key identifier: 59:2B:3A:FE:23:EC:28:D6:58:5C:08:17:9A:41:4E:F0:EC:62:BA:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B10A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66F95B22037911EFB0C1E232017001B1.roa
Signing time: Fri 26 Apr 2024 03:02:23 +0000
ROA not before: Fri 26 Apr 2024 03:02:19 +0000
ROA not after: Sun 12 May 2024 03:02:19 +0000
asID: 397630
IP address blocks: 154.202.106.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45322 (0xb10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 03:02:19 2024 GMT
Not After : May 12 03:02:19 2024 GMT
Subject: CN=662b193e-892f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:78:00:76:32:f4:5e:5f:bf:d6:75:b3:13:
51:a8:fb:bc:6f:42:50:65:4c:3d:ee:f8:b5:4d:d5:
30:ba:06:a0:a3:3e:cc:86:1d:cb:9c:5f:d5:2b:08:
dd:c9:af:c3:d4:0c:6b:81:f5:17:ee:cb:13:06:2f:
bc:01:21:ba:72:39:96:c1:0a:b4:e9:1a:6f:95:05:
4b:06:35:4e:1e:a7:55:bc:4b:00:58:a5:be:39:5e:
91:ee:ed:09:8a:32:f5:c5:58:41:3b:d6:bf:f5:2e:
51:32:f5:99:6a:ea:b8:07:b4:4e:a9:0e:f2:33:2f:
50:28:ee:7e:45:9c:d0:a0:ff:2f:5a:b1:d1:1c:bc:
a7:d9:bc:47:d6:9c:aa:25:18:97:b8:66:50:ce:9c:
bc:87:5e:1e:29:e3:09:cb:86:61:bf:37:fa:51:f9:
46:14:84:b7:5a:15:0a:33:a1:32:cc:f0:50:8a:bf:
d8:df:bb:22:f1:8e:f5:15:0a:18:b1:e2:e3:06:df:
cf:26:af:e9:18:d5:81:e4:02:4f:4a:1c:f5:67:81:
1d:46:b3:e5:a8:d9:1d:8f:bd:da:bc:c7:08:63:dd:
ed:be:58:ca:af:13:f7:7b:f6:aa:28:87:3c:03:7a:
dc:9f:51:59:3f:0a:16:23:f2:5f:42:37:b0:a8:55:
61:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2B:3A:FE:23:EC:28:D6:58:5C:08:17:9A:41:4E:F0:EC:62:BA:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66F95B22037911EFB0C1E232017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.106.0/23
Signature Algorithm: sha256WithRSAEncryption
75:d1:bb:6d:ed:c1:26:4d:76:a1:c1:06:c5:9f:9b:f4:b0:33:
f8:c9:42:b4:1f:78:9d:98:9c:3a:ce:fd:aa:60:89:72:b1:d4:
73:36:8d:64:3d:a6:d7:82:67:ab:4a:f4:dd:16:c5:f6:9e:bf:
13:2e:9b:06:06:cb:27:9a:83:bc:d0:01:60:7f:4d:c1:bc:0b:
4d:45:3d:34:ce:3a:cc:94:47:af:85:0f:a1:d0:20:92:cd:12:
d3:92:a4:2f:f6:d8:2d:30:f6:a5:ed:bb:c4:e1:d4:81:35:e1:
7a:17:94:1f:4a:a6:99:e7:0a:81:0a:a3:21:98:ed:16:c5:c9:
43:15:b4:15:42:b7:42:96:88:fe:06:3f:f0:bb:84:b1:16:7f:
a7:c2:df:f1:57:55:4d:aa:8f:7e:2e:f8:b7:b7:d3:8c:cf:9b:
d4:df:10:8a:9e:56:b8:0a:52:85:f8:8f:c4:7e:21:ed:49:ae:
64:38:86:18:63:78:34:70:37:b8:32:40:7e:2f:86:c7:6a:44:
b8:43:bc:5e:2c:87:66:7f:79:fe:81:0b:73:7f:67:ab:50:d8:
99:60:27:a3:fa:5d:cc:82:58:21:ca:57:5b:1d:c9:51:5a:07:
a2:2b:74:9a:f0:b1:6a:0d:bb:28:35:13:63:f3:2d:5d:91:c8:
ab:62:0f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:46:22 2024 by rpki-client on console-ams.rpki-client.org