Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3ADD6E6088711EF8B47586A017001B1.roa
File: C3ADD6E6088711EF8B47586A017001B1.roa (raw, json)
Hash identifier: 0FxgMdL/nWc7txu1pDhFDU1iDRse+P9pPefdpKyaheM=
Subject key identifier: 83:23:22:9A:51:52:D6:88:6C:B2:DB:31:EE:B6:E0:34:2B:A5:74:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B3DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3ADD6E6088711EF8B47586A017001B1.roa
Signing time: Thu 02 May 2024 13:27:47 +0000
ROA not before: Thu 02 May 2024 13:27:43 +0000
ROA not after: Sun 12 May 2024 13:27:43 +0000
asID: 212238
IP address blocks: 154.94.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46042 (0xb3da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 13:27:43 2024 GMT
Not After : May 12 13:27:43 2024 GMT
Subject: CN=663394d3-ac51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:9e:58:c0:9f:38:75:fb:5a:0b:07:df:55:
95:2f:74:08:72:75:b2:59:4c:12:a6:5c:c1:2e:86:
8d:bf:83:dd:a5:ef:a4:ff:aa:c5:51:48:d8:7b:8b:
74:d7:11:b8:5f:b9:28:e0:44:40:21:94:3f:80:25:
0b:13:db:5f:03:f4:11:89:d7:90:ac:2c:74:28:f9:
ed:bb:96:0a:0a:eb:06:db:0b:e3:40:9d:9f:02:10:
30:3d:ee:e3:74:90:08:7d:11:39:d6:e8:b2:80:38:
8a:b6:ae:f5:54:29:d9:a4:5f:12:90:3d:7d:b9:b6:
c4:2f:3b:38:b1:86:bc:f5:fa:15:9e:00:62:e4:2a:
6d:21:43:5a:26:54:54:73:cc:b1:22:77:c8:43:51:
ce:74:21:51:5e:96:0c:fe:c4:35:7c:45:00:7d:c4:
cd:1a:10:11:ce:1d:f0:99:a0:f7:c1:55:50:28:4e:
6c:a0:ac:16:83:ea:ee:3d:b4:0f:99:a6:c2:7d:47:
ff:bc:aa:ab:7b:dc:00:91:5b:03:07:0a:ed:e7:c5:
f6:3d:16:00:3e:cc:85:90:8f:3f:8e:73:bc:40:0a:
22:5b:17:b5:84:3c:53:c7:cc:d8:ac:65:7e:7a:53:
3c:76:ea:5e:59:9d:59:7d:20:af:de:3a:37:81:39:
d7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:23:22:9A:51:52:D6:88:6C:B2:DB:31:EE:B6:E0:34:2B:A5:74:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3ADD6E6088711EF8B47586A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.45.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e3:5a:44:f0:a1:8a:ef:7f:b1:80:33:dc:09:4d:75:70:e1:
92:7d:18:6e:8b:d3:80:5e:1e:0d:44:8a:87:10:b9:2a:61:94:
61:b9:97:5a:86:d5:a4:93:43:fd:d1:64:9f:9e:2f:0f:dc:59:
a3:ef:90:25:10:c7:fd:25:3c:5a:98:88:b0:4d:ef:9e:d7:75:
2c:f3:d6:70:1a:52:3e:f2:26:5a:74:7b:f8:d0:9e:90:58:fc:
97:ba:1e:04:c9:f6:65:01:15:74:cd:92:4f:12:c0:c5:50:bd:
27:c0:88:90:41:3a:90:4f:ea:e6:58:7b:0d:5c:5a:ce:78:7d:
e0:5d:f9:25:fc:0d:37:e0:84:56:a0:a6:ce:44:e9:20:cf:38:
e5:37:1b:88:2c:27:2b:af:1f:23:c3:04:d0:a8:ae:3c:ac:7f:
78:50:83:39:58:1e:27:e3:f4:ba:e2:fe:a3:42:06:bf:72:61:
55:a5:83:77:79:f7:0d:a3:80:58:8f:6b:73:7a:74:56:cc:b1:
74:74:4c:d3:52:c1:d9:5c:35:38:70:8f:1a:cf:e3:9e:8a:32:
9f:c4:38:0f:ad:2a:d9:30:ad:24:0d:d9:d9:a3:9a:7d:d9:78:
38:1a:24:61:32:9a:bb:b7:b0:34:bb:e4:9a:77:19:15:0c:24:
db:2c:57:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:46:22 2024 by rpki-client on console-ams.rpki-client.org