Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B43F2B5C0DC711EFAA652733017001B1.roa
File: B43F2B5C0DC711EFAA652733017001B1.roa (raw, json)
Hash identifier: z4BuvD+IFqOqUcYAzIeD9CumMItwyBeGCTNj2uqgiRk=
Subject key identifier: C6:F6:18:7E:D4:59:1E:C9:35:1C:5B:FE:26:52:5A:2D:5E:91:6F:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B607
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B43F2B5C0DC711EFAA652733017001B1.roa
Signing time: Thu 09 May 2024 05:48:05 +0000
ROA not before: Thu 09 May 2024 05:48:01 +0000
ROA not after: Sun 19 May 2024 05:48:01 +0000
asID: 39600
IP address blocks: 154.94.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46599 (0xb607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 05:48:01 2024 GMT
Not After : May 19 05:48:01 2024 GMT
Subject: CN=663c6394-dbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:49:a3:3e:6f:9a:1e:92:02:be:b9:96:34:
c6:00:2c:9d:9a:43:b2:db:29:ae:51:1d:57:a2:fb:
4b:4a:15:b5:2a:2e:c4:55:ee:79:4c:c7:9d:9b:64:
19:b1:98:ff:ba:b9:c3:f6:7b:10:e2:43:49:c1:81:
23:15:58:e8:f1:43:89:0d:5b:5a:b4:3d:ac:f0:ee:
b6:66:e6:28:2a:63:e8:de:13:19:b7:0d:87:c1:5d:
cb:5e:a9:79:fc:fd:f4:12:d3:fb:33:c2:af:19:2b:
24:3e:b2:fe:0e:6a:d5:2a:34:12:46:09:22:11:21:
d1:73:99:e7:9f:e5:d4:99:0a:79:ff:8d:52:f8:90:
f7:a5:42:86:00:dd:65:83:99:a9:aa:99:b5:a9:a9:
e5:fa:4d:93:07:14:4f:03:6c:50:57:2e:b9:35:61:
2e:a2:4f:d9:26:13:1c:7d:8c:18:56:73:a6:46:fa:
01:3a:3a:da:7f:ed:98:7d:9d:6d:72:ef:cd:de:a5:
a7:cf:d8:0a:1b:d8:b5:2d:5c:b5:35:6b:2c:49:bf:
de:23:08:e6:50:03:73:b4:a1:fe:13:0e:1f:6d:e1:
07:78:c8:3d:f3:10:ee:86:d5:ab:7c:15:d7:88:cf:
7b:0a:27:a8:3f:19:bf:f9:83:2a:e0:93:46:5a:c8:
7c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F6:18:7E:D4:59:1E:C9:35:1C:5B:FE:26:52:5A:2D:5E:91:6F:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B43F2B5C0DC711EFAA652733017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.54.0/24
Signature Algorithm: sha256WithRSAEncryption
13:33:f9:b8:21:f0:fd:2c:41:52:67:20:a0:7f:80:07:d0:04:
e8:b6:55:5c:74:0e:70:57:f3:1f:78:f3:9f:31:74:d2:a7:73:
f1:07:7a:74:05:46:5a:fc:b7:65:f4:2e:5c:2d:75:b7:06:7d:
74:b4:6b:d3:65:7f:f2:4e:05:53:ce:f9:83:cd:14:59:3e:2a:
22:e7:09:1a:21:e2:07:85:de:b4:67:64:07:2f:10:54:95:a2:
2c:62:14:4d:49:a1:06:68:84:4b:9d:3c:78:8c:53:6b:f1:2d:
d2:e3:a0:f3:b3:c8:05:03:a0:09:0c:63:74:2a:0f:ae:01:aa:
aa:fc:f4:5b:4b:44:1f:e6:fa:27:14:22:68:f4:f9:71:80:45:
7b:25:5f:de:db:53:73:5a:a7:de:71:48:0a:ca:63:72:a8:1a:
4e:f1:16:75:00:4d:07:56:f3:14:e1:cd:52:f4:4e:01:85:5d:
5f:03:dd:70:f0:53:46:4e:89:7f:36:12:d3:37:39:9d:9a:ef:
74:e8:15:e6:f8:52:92:5a:02:29:8f:d0:04:75:46:50:15:f5:
b4:20:da:bd:0c:28:3a:13:65:54:65:69:17:42:ec:4f:a0:45:
c6:bd:03:d2:59:f9:50:5a:1e:85:a8:a7:3f:2b:0a:b6:58:eb:
aa:b2:27:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:57:49 2024 by rpki-client on console-fra.rpki-client.org