Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8334A1560B4511EFB038672E017001B1.roa
File: 8334A1560B4511EFB038672E017001B1.roa (raw, json)
Hash identifier: vsHPyL6QnpC64vJiavBPOvMj+lkoqTN0qCt/g5mMoXM=
Subject key identifier: D0:59:25:E7:D2:3D:11:C3:C2:3C:3D:E9:BC:05:AD:29:CC:E1:16:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B43A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8334A1560B4511EFB038672E017001B1.roa
Signing time: Mon 06 May 2024 01:11:05 +0000
ROA not before: Mon 06 May 2024 01:11:02 +0000
ROA not after: Tue 14 May 2024 01:11:02 +0000
asID: 44559
IP address blocks: 154.198.160.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46138 (0xb43a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 01:11:02 2024 GMT
Not After : May 14 01:11:02 2024 GMT
Subject: CN=66382e29-039a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ed:28:69:53:aa:19:fa:39:1d:c6:f8:de:8f:
5f:74:a9:35:e2:ac:8d:7d:47:a5:01:5f:cf:ad:e1:
ab:47:64:8c:96:13:38:b1:0d:21:d5:c7:f4:09:fb:
84:fc:93:7a:1a:58:49:42:5b:04:fc:5e:68:7a:aa:
05:c7:28:c4:06:c6:17:23:8d:39:f4:89:5d:06:c9:
00:f6:eb:54:ba:df:04:4d:b9:1f:67:4a:53:85:0f:
7e:5a:b6:07:77:ca:98:68:63:f7:36:0b:5c:6a:93:
d7:2c:bb:d5:fd:72:ce:0d:49:9a:72:43:ae:8f:bb:
a3:f5:cc:0f:81:e3:d9:bd:02:1e:e6:bc:fc:f6:2b:
02:47:59:ff:fd:77:f7:5c:18:f1:21:3b:6d:8c:f1:
df:f2:fe:5d:4a:91:56:cc:d9:79:b5:a2:71:64:1f:
27:c1:25:96:7e:e5:fb:aa:ca:58:ce:29:de:9b:d5:
0f:e4:46:9b:12:8b:8b:f1:90:c0:b1:ce:af:39:c8:
ab:d3:f1:c7:42:0b:16:00:7c:b5:10:1e:7b:f4:51:
f1:10:ce:86:12:d1:15:33:70:67:b6:46:65:7e:d5:
0c:28:08:c2:c1:9d:09:a7:08:26:d2:01:66:ac:4d:
8a:3c:05:03:08:25:f4:11:63:20:74:50:73:86:9b:
6c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:59:25:E7:D2:3D:11:C3:C2:3C:3D:E9:BC:05:AD:29:CC:E1:16:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8334A1560B4511EFB038672E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.160.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:98:bd:db:f4:4b:1a:09:6e:7b:e7:7a:6f:6f:79:16:c0:c9:
d8:09:df:08:44:fc:56:d7:d3:ec:4a:6b:a0:88:7e:9d:55:15:
ae:f7:1c:20:77:ad:43:52:69:48:45:b2:ab:6a:04:0f:e4:20:
90:86:90:6c:1a:bc:39:09:55:eb:c7:eb:aa:23:09:5d:44:f5:
77:f0:93:de:0a:15:87:b5:37:61:88:8f:fc:ae:11:84:7d:df:
b4:cd:16:14:ab:24:19:49:06:86:4a:45:fe:31:b5:1d:3e:0a:
d0:66:06:aa:cb:b3:15:1a:5c:4e:d6:35:23:5f:7a:09:76:44:
6b:76:72:27:e5:aa:41:29:64:de:55:26:65:f9:3d:3c:4b:40:
28:70:17:4e:b7:0a:45:b5:f2:ae:f7:9e:9e:63:1b:a1:c5:31:
1d:6a:31:55:a6:c4:08:88:29:96:32:25:80:24:7a:19:03:8b:
a2:ab:f0:44:44:ff:2f:16:52:37:02:47:fe:4d:e5:6f:32:78:
a1:13:f9:a1:e1:c1:5f:dc:34:5f:bb:f7:83:04:8c:b7:90:b9:
38:2c:c1:c4:4b:30:8c:03:70:85:01:ca:fb:2a:27:93:2d:fe:
69:c7:77:51:f1:5e:5d:3b:d7:5f:3d:1b:62:65:65:3a:e5:87:
49:70:32:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 03:09:41 2024 by rpki-client on console-fra.rpki-client.org