Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23DE51F4E47411EEB2E30078775412E6.roa
File: 23DE51F4E47411EEB2E30078775412E6.roa (raw, json)
Hash identifier: MmlRmIP3rknmIot5o+z2XsOj7UfZOVfBCLUaer3pgs4=
Subject key identifier: D2:C4:96:3E:19:57:83:AB:92:30:14:56:0C:A7:ED:BD:10:8A:89:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A241
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23DE51F4E47411EEB2E30078775412E6.roa
Signing time: Sun 17 Mar 2024 15:36:36 +0000
ROA not before: Sun 17 Mar 2024 15:36:33 +0000
ROA not after: Tue 30 Apr 2024 15:36:33 +0000
asID: 63139
IP address blocks: 154.94.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41537 (0xa241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 15:36:33 2024 GMT
Not After : Apr 30 15:36:33 2024 GMT
Subject: CN=65f70e04-afac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:13:00:2e:8b:ea:9d:2a:47:28:0a:59:cc:
76:e6:63:0e:5c:8e:ca:98:0c:43:ab:72:b3:53:36:
c1:d6:a8:55:38:2f:a8:a6:12:62:9d:1e:e6:1f:a6:
0a:c9:84:fc:a7:a4:51:c1:ac:1f:e6:49:92:61:65:
f4:16:db:cc:e7:ed:ed:19:af:6b:b7:e3:72:f4:88:
98:2d:bf:d5:e3:4e:9e:d8:94:10:4d:2f:cb:3c:70:
af:e1:bb:16:4d:24:2c:59:59:64:84:ca:a2:f7:2f:
c4:ed:e3:72:d8:69:db:93:86:3a:a6:83:38:6f:2a:
e7:8c:4e:5d:cb:61:a4:db:56:62:58:2d:53:a5:53:
b0:c1:9d:0a:32:ec:5c:75:9f:3f:82:7d:ab:fc:6e:
f0:0c:ce:7b:2c:1c:43:3b:e4:07:5d:14:81:2a:09:
d4:c6:1b:a6:ec:4d:f8:ce:8d:9a:a6:f1:13:ec:2c:
21:75:0e:08:45:d0:f3:33:99:db:5c:3a:8d:7c:ed:
f7:2d:ea:e7:93:82:25:04:ea:a7:ee:2d:2d:aa:cb:
7c:9f:87:75:ce:01:9c:67:7e:88:20:20:af:21:cd:
00:9d:77:e4:da:50:06:b0:95:d4:d7:c4:34:c2:ca:
1b:f6:64:3e:fb:c3:fd:f9:c1:f2:85:53:31:89:7c:
c6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C4:96:3E:19:57:83:AB:92:30:14:56:0C:A7:ED:BD:10:8A:89:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23DE51F4E47411EEB2E30078775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.65.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e5:71:87:b8:61:8f:fc:6d:2c:a3:f0:a4:8c:fd:8b:7d:71:
e3:48:55:10:84:32:4a:32:84:53:11:61:70:9d:e2:69:a9:a2:
d6:bf:1b:63:8c:b6:b3:c8:25:47:16:f9:f5:7b:73:04:29:81:
9e:6f:e0:0e:51:15:37:f7:3e:d1:68:ea:da:3e:5e:4a:84:76:
71:cf:eb:cc:9a:9e:9f:5c:d8:07:39:64:d0:62:e5:c9:27:8f:
87:86:c2:05:de:71:9b:34:12:3f:87:bc:05:7d:5f:87:04:75:
cb:12:b7:53:eb:90:c4:b4:a9:2a:c8:20:6e:a7:80:d3:48:4d:
88:3c:a8:7d:51:5c:79:b5:9f:87:47:dd:8d:01:06:4d:62:cd:
ba:82:72:44:43:a2:10:1e:67:fd:d0:04:2e:48:c2:97:ab:37:
69:d1:9f:52:22:f9:29:72:f2:43:cd:93:9d:e8:ac:bf:52:06:
21:78:4a:e0:12:c3:6f:e2:f2:4f:e9:b3:90:0c:01:dc:2c:ce:
27:a6:c1:19:fd:e9:db:59:6d:f1:28:d4:b4:26:2a:18:55:9c:
8c:7d:bd:e1:52:76:8f:23:15:e8:af:08:05:45:08:0f:91:2e:
63:4d:e4:cd:af:b0:aa:de:ca:87:48:38:00:3f:a7:c3:83:f6:
7a:d1:16:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:40:37 2024 by rpki-client on console-fra.rpki-client.org