Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C5A40440DC511EF881F731E017001B1.roa
File: 6C5A40440DC511EF881F731E017001B1.roa (raw, json)
Hash identifier: 6XdFtaY6/q99zzqKTxEumdvWaLPSLDaZvUxqmMg9Llk=
Subject key identifier: F3:23:68:DD:7B:C9:67:AF:1A:B2:1E:84:DB:BB:93:49:2F:67:91:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B5E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C5A40440DC511EF881F731E017001B1.roa
Signing time: Thu 09 May 2024 05:31:45 +0000
ROA not before: Thu 09 May 2024 05:31:42 +0000
ROA not after: Sun 19 May 2024 05:31:42 +0000
asID: 5065
IP address blocks: 154.94.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46569 (0xb5e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 05:31:42 2024 GMT
Not After : May 19 05:31:42 2024 GMT
Subject: CN=663c5fc1-38ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:46:84:d9:98:87:4f:03:b6:e6:7a:23:19:e2:
47:75:fc:c7:63:bf:ef:4a:4e:a3:35:80:71:c8:99:
35:1a:91:fb:e9:23:e6:02:94:ac:68:da:ba:d0:1b:
63:ad:65:a3:b2:2f:30:c7:ce:ed:e8:a4:eb:0b:11:
5d:95:40:d5:73:17:0c:12:e7:b4:f5:77:b3:77:e6:
60:56:1b:c0:23:17:33:69:84:64:17:00:67:f9:e5:
f9:d6:91:ea:63:f0:10:37:7b:6a:ff:d4:fa:ac:67:
b7:0f:2b:b7:48:9b:21:e5:b3:fb:9a:61:a5:56:88:
74:b5:5d:6c:24:61:df:e4:a7:58:b3:15:4a:44:ee:
28:49:91:a7:39:37:0e:b9:b1:75:7e:22:b9:15:3d:
b0:73:07:64:fe:4c:e5:cd:d7:59:87:19:6b:25:9c:
48:77:fd:d8:41:6e:50:b8:79:4d:7a:13:4e:d4:81:
1a:41:59:4a:e7:be:36:a2:ba:f7:fe:8c:d0:d8:27:
6d:26:2a:01:4c:37:8e:12:2e:e0:dc:94:8c:51:99:
70:2b:c2:42:3a:21:23:87:00:94:a9:ac:2a:79:e5:
3a:5d:6f:9e:ac:48:0a:aa:b1:ec:b3:c5:fa:06:82:
eb:60:49:ad:9d:87:f4:8b:09:aa:59:d1:8a:e8:83:
d8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:23:68:DD:7B:C9:67:AF:1A:B2:1E:84:DB:BB:93:49:2F:67:91:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C5A40440DC511EF881F731E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.44.0/24
Signature Algorithm: sha256WithRSAEncryption
25:99:7c:99:02:c4:94:36:ec:09:ca:79:61:f8:7f:11:35:5e:
27:ec:1c:6f:e1:64:dd:e8:59:0b:f9:e2:03:5d:f5:2c:f2:85:
fa:cd:bb:68:f9:73:0e:37:69:60:ed:f8:90:db:93:24:d6:19:
86:86:d2:04:f3:2c:8a:ba:65:16:28:58:00:26:6a:04:7a:ee:
81:d1:eb:5d:2b:78:42:49:35:49:19:5e:a1:15:36:be:d8:5c:
45:6b:74:51:d0:bd:db:80:43:22:b1:a8:9a:f8:b2:11:03:c4:
da:67:8f:98:61:05:d1:46:47:0d:24:0f:c2:c7:6c:76:00:46:
f5:e4:fa:3c:95:fc:89:40:6f:10:0e:a2:cb:5d:6f:6c:b8:cc:
9e:0e:b1:6f:1c:44:85:81:b8:40:61:69:c0:e5:24:6c:58:a0:
18:0d:93:3c:41:bc:19:7a:ff:6e:ec:e6:53:31:e6:01:ec:a5:
ac:e0:29:cd:05:c2:15:9c:54:57:fa:c2:f4:cd:27:d4:39:c9:
4e:86:ac:8a:12:7a:d3:0f:c1:04:f6:71:1b:f4:92:fb:2f:e2:
8a:79:98:a4:c4:a0:7f:38:89:fc:fe:77:3e:3e:b4:bb:93:16:
86:d9:f0:6a:b1:40:90:68:8b:75:40:70:7d:5a:d9:f6:00:0a:
8f:f0:75:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:57:14 2024 by rpki-client on console-ams.rpki-client.org