Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B75B37B00DC511EFAAF1AA22017001B1.roa
File: B75B37B00DC511EFAAF1AA22017001B1.roa (raw, json)
Hash identifier: 2e6Oeicg5tADYG+hSBG8iyx2VnWein7ZcmNDj2EI8pg=
Subject key identifier: 37:A9:3A:33:6F:8C:F5:98:6A:1A:D3:4E:32:F7:FE:F8:7A:79:0A:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B5ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B75B37B00DC511EFAAF1AA22017001B1.roa
Signing time: Thu 09 May 2024 05:33:51 +0000
ROA not before: Thu 09 May 2024 05:33:47 +0000
ROA not after: Sun 19 May 2024 05:33:47 +0000
asID: 21859
IP address blocks: 154.94.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46573 (0xb5ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 05:33:47 2024 GMT
Not After : May 19 05:33:47 2024 GMT
Subject: CN=663c603f-5a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:ef:81:2d:77:69:97:64:5c:9a:8a:ba:74:
21:04:8d:3c:bc:73:40:52:d7:63:92:81:c0:d0:f8:
5d:73:9b:fd:11:f0:84:7a:09:7e:8d:79:ca:75:e6:
8c:42:3b:d9:0e:fb:83:52:bc:a4:ed:21:4c:f7:db:
ca:0b:76:52:b2:75:36:c0:1d:ed:40:fa:be:0e:92:
af:5d:c5:76:b2:11:11:4a:9d:54:26:bf:0f:36:33:
6c:f5:14:7d:1d:c6:e0:67:30:eb:0f:66:82:02:6d:
7f:0e:db:9b:82:81:e7:35:5a:d5:be:44:e6:c6:9c:
04:4a:92:67:5b:b8:76:53:67:9d:be:05:73:26:72:
70:d1:87:21:81:f1:3f:d9:1e:01:16:6a:b3:76:78:
e8:23:f1:27:24:e0:76:72:24:2e:83:a8:0f:27:27:
82:bc:d8:a6:99:30:6e:bb:ab:06:40:8d:11:2c:d4:
4e:cb:35:3c:4a:40:9a:f4:8a:1b:72:97:a0:46:2a:
34:d6:6e:d9:15:55:0f:aa:2b:67:04:e5:cb:73:52:
41:89:11:89:fe:5a:02:ca:70:b3:f6:76:50:12:76:
15:e0:cf:b2:b4:1e:aa:79:06:f1:9f:94:0a:ed:7b:
92:ac:63:ec:ce:c9:7c:f5:df:d8:bc:5d:bb:1d:1e:
be:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A9:3A:33:6F:8C:F5:98:6A:1A:D3:4E:32:F7:FE:F8:7A:79:0A:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B75B37B00DC511EFAAF1AA22017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.42.0/24
Signature Algorithm: sha256WithRSAEncryption
41:05:fe:b0:ac:e5:35:c9:c5:ff:42:8e:dd:d1:0e:ef:81:a3:
d9:5a:20:ea:40:0e:7a:f9:0d:2d:e5:1f:e3:88:f7:28:72:62:
de:d8:4c:61:1c:bd:26:7c:f1:28:af:e4:57:60:ff:0d:34:94:
c3:2e:81:e9:f7:1f:cf:29:1a:c4:13:15:ea:a7:7c:86:bc:60:
4a:25:c1:bf:e6:07:90:1c:27:e4:be:31:af:84:37:ed:65:1e:
22:ef:f8:75:e2:27:5d:85:42:c3:48:84:e5:dd:7a:78:9c:ea:
99:d1:bf:d4:21:59:2c:ca:7b:ab:89:1a:59:16:b8:8e:e8:27:
6c:49:65:c8:1c:0b:90:aa:72:d8:53:79:28:eb:e0:ab:75:38:
0c:3d:16:ee:06:ae:96:d2:12:4a:53:97:3c:bd:22:33:17:bf:
20:ba:58:48:3d:7f:c2:f2:57:a4:f5:0c:2c:31:83:6a:96:e6:
e2:73:8c:9d:65:15:d5:f2:39:a4:5b:90:a4:fb:ea:58:fc:a9:
10:aa:93:43:32:c5:56:e9:c2:73:cf:06:3b:1b:3b:f0:3a:90:
d7:6a:f6:c0:a5:f9:bc:7f:19:23:79:e7:e7:5d:49:29:ac:ef:
a3:09:0f:5b:c3:cd:68:e7:9d:ea:94:36:23:e2:e3:e2:07:3d:
20:19:c3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:57:14 2024 by rpki-client on console-ams.rpki-client.org