Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C4ABDA00DC711EF860B2E2F017001B1.roa
File: 8C4ABDA00DC711EF860B2E2F017001B1.roa (raw, json)
Hash identifier: BGVvXT+jrlTbF/YOm0i0TAOul3iImw+E0BcskOB8tsg=
Subject key identifier: C8:57:06:76:BC:58:50:5F:74:D3:19:14:0D:BF:97:C8:66:D1:86:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B605
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C4ABDA00DC711EF860B2E2F017001B1.roa
Signing time: Thu 09 May 2024 05:46:58 +0000
ROA not before: Thu 09 May 2024 05:46:54 +0000
ROA not after: Sun 19 May 2024 05:46:54 +0000
asID: 39600
IP address blocks: 154.94.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46597 (0xb605)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 05:46:54 2024 GMT
Not After : May 19 05:46:54 2024 GMT
Subject: CN=663c6351-47f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:a0:00:9d:9d:10:15:51:eb:96:36:e9:38:
d6:e8:a3:c8:62:25:cd:5b:99:c3:11:77:38:68:21:
7d:eb:6d:a7:72:f9:de:c0:d1:07:07:26:de:08:f8:
77:59:48:f6:30:2b:66:83:fd:55:45:06:03:8b:cf:
fe:bb:53:86:c1:38:0e:49:dd:87:2e:ed:35:89:25:
bf:26:1f:19:00:0e:ce:27:2d:46:f9:55:4a:43:4f:
e9:8c:17:0b:fb:88:b5:ee:8d:51:cb:c3:b3:be:1b:
8b:0a:47:23:55:5f:85:b3:43:9d:0f:30:db:a0:8d:
f7:b0:aa:fd:62:4c:85:16:23:9b:a4:2f:f1:3d:a2:
de:41:11:1d:56:8b:e2:ca:54:af:c8:83:ad:b7:d0:
5a:e9:1f:44:c3:19:48:6b:92:6d:2b:2f:14:71:8f:
3d:ce:43:1c:da:84:1c:77:42:b5:71:59:c8:9c:fa:
87:e2:ec:bf:37:18:fa:3f:38:a0:7e:ac:42:7d:06:
48:87:d4:96:88:95:c9:f5:37:da:3b:54:fd:b7:dd:
dc:f7:1f:66:47:90:df:cc:cb:48:58:8b:43:ed:17:
1f:07:d9:c5:85:0a:78:ac:74:24:2c:e3:98:57:51:
15:9d:be:76:a2:31:16:73:e5:13:23:a8:54:70:2e:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:57:06:76:BC:58:50:5F:74:D3:19:14:0D:BF:97:C8:66:D1:86:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C4ABDA00DC711EF860B2E2F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.58.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c3:36:9a:32:b5:6c:58:22:24:e1:5c:59:76:df:4f:a2:32:
90:6d:0b:56:00:41:59:6b:f8:3a:44:e6:ae:ea:b6:46:14:eb:
4d:9a:b5:1a:0e:bd:a2:97:6f:9e:47:ac:17:c0:d0:c8:a2:da:
57:75:8f:30:ca:7b:c5:05:b4:b5:e8:39:ac:e9:56:bd:21:6c:
aa:86:29:79:73:c2:98:60:ae:c4:81:ae:04:dd:ea:3d:db:a8:
9b:89:6c:d6:93:17:80:4b:ea:e6:d4:dd:af:f1:0d:e1:5b:43:
31:49:28:d8:91:d4:04:29:59:a9:cf:09:f0:ab:b0:ee:18:4a:
94:84:7c:26:d1:3f:87:12:db:22:91:f7:44:36:0f:df:7c:6a:
0f:41:a2:ff:d8:31:76:e4:12:b0:da:b4:5e:0c:39:d4:13:b4:
cf:8a:d8:bd:40:e2:88:f1:58:bc:9a:66:94:c4:88:06:67:7b:
76:9c:cf:4f:b2:bd:b9:39:03:8a:22:68:a8:e7:a7:8f:8b:7b:
c2:d3:79:71:57:0e:0e:2a:37:24:59:4a:5f:92:f6:26:72:00:
8f:5a:42:80:2b:84:ec:06:e9:aa:0a:3c:16:e7:f3:6b:c9:ca:
9d:de:4c:f4:f7:d5:d7:36:d5:d5:58:2d:33:27:ba:45:0f:75:
3e:24:aa:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:57:49 2024 by rpki-client on console-fra.rpki-client.org