Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAA2E416088511EF87CE035A017001B1.roa
File: CAA2E416088511EF87CE035A017001B1.roa (raw, json)
Hash identifier: NVzvIZq4dWvbIV/7XEvkVpwvE3q1pZzglDZlTGpuqkg=
Subject key identifier: E0:DF:89:55:AD:15:B6:85:27:C0:97:6F:66:3C:BF:A8:33:C7:A7:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B3C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAA2E416088511EF87CE035A017001B1.roa
Signing time: Thu 02 May 2024 13:13:39 +0000
ROA not before: Thu 02 May 2024 13:13:36 +0000
ROA not after: Sun 12 May 2024 13:13:36 +0000
asID: 39600
IP address blocks: 154.94.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46022 (0xb3c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 13:13:36 2024 GMT
Not After : May 12 13:13:36 2024 GMT
Subject: CN=66339183-22a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:af:1c:be:f3:1d:ef:4a:74:d1:d9:b7:37:
67:14:14:b1:76:90:ab:0a:64:73:a3:a6:2a:56:52:
de:ca:13:5b:5c:53:6c:a1:a4:e0:f0:4d:50:26:2a:
72:f6:93:99:bc:bc:f3:73:7b:83:af:1c:47:61:f3:
a3:ad:d1:9a:9d:0a:02:3f:e8:16:e4:3e:a6:b4:d7:
37:0d:ea:41:0a:cb:06:a3:c0:0c:1a:99:a5:aa:36:
be:7c:36:b2:4f:e8:56:11:d6:81:f0:80:fe:f2:61:
6b:67:c5:39:a4:53:ff:1c:09:f4:46:ef:a4:a7:a2:
db:d4:9c:08:71:e9:a4:2e:b9:37:a4:78:a0:0a:d2:
5f:4a:0f:56:d0:e1:f0:53:6f:ec:bc:1b:a7:db:be:
15:ea:4b:c5:a7:ee:9d:6b:09:5b:14:53:4b:95:05:
47:d7:26:11:03:6b:8f:b2:67:2b:54:7d:ca:e2:1d:
e2:a5:47:bf:8f:f9:ce:01:52:d2:a1:db:ed:a2:3c:
fa:1b:a8:31:78:f5:10:82:ec:7d:01:a9:b0:42:95:
09:ed:79:8e:40:06:4e:e4:26:53:2f:12:39:c3:7c:
c5:09:66:e8:48:5f:19:e5:79:94:30:20:0a:f2:24:
ca:fa:7b:5c:0d:56:ec:bf:28:f9:05:7f:fa:6c:03:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DF:89:55:AD:15:B6:85:27:C0:97:6F:66:3C:BF:A8:33:C7:A7:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAA2E416088511EF87CE035A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.62.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:2b:c8:64:7e:27:02:ab:86:23:3b:5a:01:18:49:7e:96:4a:
52:f6:b6:60:29:2b:53:b7:9d:15:88:03:1c:d4:13:77:02:ca:
10:d7:1b:bc:3c:29:61:0e:95:f2:b9:5d:05:fe:21:8f:8c:8b:
d7:51:7b:31:e0:b1:8e:bb:72:b0:56:5b:39:38:09:26:1d:3f:
c9:cd:f5:b7:1c:fa:48:f2:f4:10:9b:cd:8f:e5:62:2a:ed:61:
17:cd:cb:03:64:17:25:02:45:52:2d:ab:cd:ff:e9:10:08:05:
a6:ba:0f:4f:c3:07:64:26:45:b9:00:81:12:02:dd:9a:3c:50:
f2:db:0f:72:6e:8f:d0:40:67:da:13:40:a8:f1:7a:99:3d:93:
80:77:8b:68:2a:bd:42:72:dd:af:35:11:42:55:a8:61:db:7f:
a4:40:84:3b:06:27:da:d2:a4:2f:1f:cf:01:90:4f:72:8e:83:
a8:8c:97:7d:e5:f7:72:13:6d:6b:81:0d:29:4e:20:66:7a:43:
c0:82:17:17:bc:db:21:eb:79:ba:74:d7:a8:a7:0a:37:11:40:
6d:72:16:9f:7c:3a:50:ff:e2:2e:2d:cf:a8:96:4e:a1:a5:2b:
f6:01:d0:98:8a:98:b7:e6:22:af:18:a3:07:5a:d0:75:b3:6b:
52:87:80:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:46:22 2024 by rpki-client on console-ams.rpki-client.org