Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/693D75E0088711EF8B41C265017001B1.roa
File: 693D75E0088711EF8B41C265017001B1.roa (raw, json)
Hash identifier: Z/8XAW3ebbC0V2HhrBM+GiPKVE6yCq/AaHQzhlrrmAo=
Subject key identifier: CE:E6:DF:2A:49:01:90:E2:29:DD:F9:D8:E1:F2:E1:13:53:6A:15:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B3D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/693D75E0088711EF8B41C265017001B1.roa
Signing time: Thu 02 May 2024 13:25:15 +0000
ROA not before: Thu 02 May 2024 13:25:12 +0000
ROA not after: Sun 12 May 2024 13:25:12 +0000
asID: 5065
IP address blocks: 154.94.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46038 (0xb3d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 13:25:12 2024 GMT
Not After : May 12 13:25:12 2024 GMT
Subject: CN=6633943b-217d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a7:14:9b:06:26:c1:28:04:8f:ad:5b:0f:00:
1d:5e:9d:1a:6e:ac:c4:0a:86:1f:f4:76:13:2f:8a:
69:5d:29:ee:3e:1a:83:e4:0c:7d:fe:a7:75:88:90:
30:14:48:f1:78:3f:28:01:23:18:7b:3b:40:bb:9a:
21:f9:46:5b:ed:de:98:7a:74:75:2b:71:12:69:a5:
bb:12:f5:38:25:6d:01:1b:af:91:66:c2:2e:ee:f4:
27:4d:ad:be:49:dc:c9:8b:b1:68:9b:9d:a2:b1:36:
62:8d:41:a8:be:d4:1d:cd:1d:cd:74:3d:47:a3:fd:
ae:84:24:ae:a0:9a:89:5c:36:f1:22:d8:70:48:83:
75:5c:43:48:dd:fa:c1:cc:05:19:7f:8c:7d:dc:48:
bb:8b:33:02:5b:42:c0:59:5d:77:07:78:33:9c:53:
bb:e0:88:4a:6d:21:50:6c:36:81:07:51:66:01:6b:
21:d6:70:5e:7f:4f:63:2d:51:6d:75:0c:0f:6b:b9:
09:75:b6:64:b3:48:e3:ab:1d:af:2f:cf:fd:33:5b:
7c:01:ca:5a:85:eb:95:68:92:74:02:fc:b4:4e:96:
63:9d:b1:f5:3e:53:30:d6:ad:90:94:8d:86:11:4e:
21:e7:45:2f:f8:40:04:f9:da:7d:a8:a2:f1:31:ec:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E6:DF:2A:49:01:90:E2:29:DD:F9:D8:E1:F2:E1:13:53:6A:15:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/693D75E0088711EF8B41C265017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.47.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:1f:7b:40:ae:54:64:14:30:a7:4f:5a:04:93:6b:eb:cb:04:
13:91:67:6c:87:e5:db:39:9f:ff:d2:ff:89:f7:18:7c:a2:c8:
de:a8:2c:41:35:52:8c:55:65:fd:ff:1f:ca:68:4b:b0:d7:1f:
e2:74:b1:28:24:de:c1:a2:16:72:31:97:b1:d0:a1:27:fb:6f:
63:d2:f7:3d:e1:0f:db:5e:25:c3:68:ec:06:a8:0b:3a:b1:04:
54:39:f2:ed:93:d4:a9:e3:47:a8:a6:4c:9c:90:53:39:81:6e:
33:37:fe:40:b0:fd:3b:79:98:40:63:93:1e:82:a0:39:a8:83:
cb:a3:97:d3:56:cb:33:26:96:ae:97:87:97:dc:97:03:30:6f:
fa:d3:ca:c3:a4:31:cc:15:82:a6:16:81:cd:f9:4f:f8:8c:c6:
67:0f:8c:61:6f:4c:6c:ea:ea:98:a9:ff:54:d5:a2:19:2c:88:
de:93:dd:1e:33:57:74:df:12:7c:2c:1a:6e:6e:1b:a0:8d:63:
60:a9:5a:4f:ef:4f:6c:6b:cb:50:4d:34:dc:ca:e7:6c:b5:33:
a0:82:86:bb:ea:e3:ee:9a:4d:d8:3e:16:4d:45:16:c5:3d:fe:
06:4f:59:c0:c4:24:5d:36:17:c0:e2:bb:ff:6b:43:97:da:4f:
bd:75:fd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:46:22 2024 by rpki-client on console-ams.rpki-client.org