Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E93A2B6088611EF8264D55F017001B1.roa
File: 8E93A2B6088611EF8264D55F017001B1.roa (raw, json)
Hash identifier: rS71neY6Xb3iyzaWbsHP23Yzaudbuy4GbgIuf2lQnCM=
Subject key identifier: EB:0F:9D:E5:A6:3D:E2:EE:2D:6C:05:5B:A1:90:04:FF:A5:57:2D:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B3CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E93A2B6088611EF8264D55F017001B1.roa
Signing time: Thu 02 May 2024 13:19:08 +0000
ROA not before: Thu 02 May 2024 13:19:05 +0000
ROA not after: Sun 12 May 2024 13:19:05 +0000
asID: 5065
IP address blocks: 154.94.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46030 (0xb3ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 13:19:05 2024 GMT
Not After : May 12 13:19:05 2024 GMT
Subject: CN=663392cc-bce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:0f:04:c5:3d:d0:5b:5b:ad:92:74:17:fa:
4d:78:0a:29:81:1f:ba:d3:9f:ed:53:e7:fe:c8:cb:
21:f2:0e:8e:b9:66:84:7e:7c:c8:4b:e5:7b:8e:32:
5d:df:a3:d8:e1:a2:e9:f7:66:59:ba:e7:ae:21:13:
5b:8d:dd:5a:19:12:f9:ec:62:ee:b6:ae:fd:d2:1a:
c5:aa:e9:b3:ad:1b:2b:a1:ed:6d:0d:1b:19:79:9e:
02:5f:ca:d4:c5:3a:d2:6b:7d:1c:5b:1a:76:11:26:
d5:39:0f:3e:d0:a1:47:af:79:b1:34:cc:df:3d:0c:
c7:06:8a:90:83:29:06:d2:76:72:10:cd:56:10:28:
c1:06:25:5f:34:a8:dc:b2:36:7a:37:b0:82:e7:07:
66:3e:2c:d1:43:69:ad:a0:5c:6d:2e:ca:b7:45:23:
c3:af:0a:07:b0:94:41:b4:39:6e:1d:de:a0:01:79:
2a:b8:04:e6:2f:7f:a0:16:ed:fa:d5:a4:da:6c:1b:
ad:b7:0f:81:46:18:b1:9f:7d:06:c4:60:af:6c:2b:
d1:20:d5:d6:8c:ce:a7:3b:43:d9:bb:02:4a:d7:42:
d6:12:4e:0f:ca:c2:92:b6:e3:f6:2f:bb:0f:35:09:
3d:1e:d3:44:6c:a9:94:51:36:8f:e0:4f:f1:b2:15:
fd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0F:9D:E5:A6:3D:E2:EE:2D:6C:05:5B:A1:90:04:FF:A5:57:2D:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E93A2B6088611EF8264D55F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.52.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:50:71:1f:6a:64:a3:ec:49:e4:ba:4e:02:d8:34:98:b8:7d:
9d:31:cc:a1:29:e1:21:f3:b3:16:dd:87:8d:66:93:e1:62:5a:
b6:40:a1:eb:70:0e:17:cd:6e:a3:fe:99:e8:1f:e6:47:20:9f:
b3:ee:a1:3c:7a:95:81:bc:4e:e5:7a:1f:bd:7d:0a:e7:db:5f:
ab:e8:c6:dd:5e:2a:c2:fa:91:9a:34:fd:09:4e:f6:a0:31:28:
48:22:4e:af:82:ac:23:fb:c4:23:9a:74:c2:c2:8b:d7:13:9a:
98:d5:43:c5:15:e3:69:e0:b5:75:96:1c:b4:42:b5:ac:90:25:
9d:fd:60:12:e3:3a:ab:76:f4:57:eb:69:f8:bb:ac:a8:fe:9b:
e8:14:fa:c1:7e:18:4f:fb:c4:5f:be:97:40:25:ab:4b:d7:bb:
9f:68:c8:7b:ee:32:ba:4f:cd:f5:73:ea:d7:54:8a:3f:21:d2:
d7:5e:0a:64:cd:e7:f3:a6:bb:a8:5f:74:f0:f6:0d:43:69:3d:
7c:4e:51:7b:8c:fc:3b:b4:8a:f6:57:40:af:b1:b0:c0:1d:14:
3c:f4:c7:9a:59:0d:70:2a:c9:ec:05:a4:b3:87:b3:27:22:ad:
f1:30:93:fa:4f:08:96:46:01:02:22:14:57:79:5b:43:13:6e:
86:65:58:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:46:22 2024 by rpki-client on console-ams.rpki-client.org