Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83E6C2A0088911EFA23B21F8007001B1.roa
File: 83E6C2A0088911EFA23B21F8007001B1.roa (raw, json)
Hash identifier: tB17TZkzYm5SR89GV9jaCFhP2xY4dwK5aWYqUqDDc/U=
Subject key identifier: 19:9C:09:DA:A3:21:F5:D8:46:61:DA:87:27:53:41:EE:16:80:C7:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B3EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83E6C2A0088911EFA23B21F8007001B1.roa
Signing time: Thu 02 May 2024 13:40:19 +0000
ROA not before: Thu 02 May 2024 13:40:15 +0000
ROA not after: Sun 12 May 2024 13:40:15 +0000
asID: 5065
IP address blocks: 154.94.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46060 (0xb3ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 13:40:15 2024 GMT
Not After : May 12 13:40:15 2024 GMT
Subject: CN=663397c3-ab7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c7:e7:b6:9d:1e:01:19:b8:f1:8e:dd:d1:f7:
7a:f3:b7:31:e3:63:40:9e:8e:54:a3:47:17:2e:03:
06:81:20:1c:26:15:fb:13:02:2e:6e:a8:e5:ca:14:
a9:8e:ab:5b:5e:20:1c:b6:e7:2b:16:9f:a5:62:c2:
ef:d1:8d:55:68:96:80:ae:cd:b8:c5:6b:e0:81:d6:
8e:f9:90:68:a2:46:ed:2c:09:ed:f1:9a:f4:43:3c:
0c:1f:6d:f3:ab:66:c4:83:51:1c:f7:52:14:f2:33:
da:e3:37:ec:ce:55:1a:39:b5:e5:de:fc:3d:54:ec:
ff:9f:83:6e:29:9a:19:cd:a5:50:57:8f:34:51:4e:
e5:22:95:6a:bb:51:5d:e9:b8:18:eb:9e:74:4d:cb:
aa:2a:fa:e3:b6:61:b9:db:e7:42:2f:f6:a3:25:8b:
66:86:99:eb:ae:65:62:89:7b:ed:fd:bc:df:bf:69:
3c:22:88:d3:9d:00:cd:c2:02:38:8e:45:9b:b2:3d:
f0:c4:53:1f:0c:69:42:19:bd:fe:95:54:1d:5f:07:
43:64:a1:3a:8a:a4:91:0f:df:5e:6a:dd:14:17:7b:
d8:eb:ee:43:eb:65:95:4e:3b:c2:e0:43:a9:6a:37:
74:4e:0f:86:b6:4a:ca:f1:dc:a9:33:9b:85:23:4b:
a6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9C:09:DA:A3:21:F5:D8:46:61:DA:87:27:53:41:EE:16:80:C7:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83E6C2A0088911EFA23B21F8007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.36.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ad:69:79:89:5a:ed:d8:4b:86:6b:4f:de:a3:70:d6:c5:95:
e8:e4:bf:83:18:7b:83:3b:7b:df:f1:91:38:b9:93:bc:ed:a8:
d0:8e:07:9d:e7:26:7e:5a:6b:3a:ce:25:16:66:c0:cb:a7:57:
d3:35:85:ac:ba:ce:db:5d:09:ae:ba:1a:82:24:ba:37:49:56:
86:9b:9d:c4:81:d5:8b:ec:c0:77:dc:50:8f:63:d3:97:47:b9:
5a:af:83:d2:27:6b:fb:37:28:e8:f1:df:f4:b5:84:78:2e:4c:
e6:d4:07:27:12:0a:c2:61:3c:82:7c:92:eb:62:e4:53:25:5b:
ac:21:7f:3b:d9:3f:8d:a0:c8:f7:e7:b5:93:e0:c7:2b:0c:ab:
be:f9:bb:8f:62:34:5d:07:7d:70:f3:c5:5b:e3:25:dd:7b:e7:
89:9e:87:9b:54:28:cb:06:77:36:1c:6a:03:33:b9:c0:52:ee:
0c:7a:cf:52:08:2a:7f:4b:df:6e:26:12:38:46:6b:8c:ac:18:
38:d4:56:d7:c1:01:d7:86:2b:6b:48:74:1f:52:08:c5:4e:f8:
b5:71:f6:45:8c:cb:67:a0:1f:be:85:ec:27:18:57:67:17:24:
f4:a8:d5:f6:a4:19:85:d7:9b:65:60:bb:11:13:74:92:d6:c1:
e3:94:14:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:46:22 2024 by rpki-client on console-ams.rpki-client.org