Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27346330FADF11EE95ABB118017001B1.roa
File: 27346330FADF11EE95ABB118017001B1.roa (raw, json)
Hash identifier: 6UmOIEzJRg4fb9D6t+O6QO00DV0s8O1JP8gNHPvpds4=
Subject key identifier: B5:D9:FF:2A:9A:45:88:D0:F9:B3:A3:DE:CB:4F:A9:52:3F:41:67:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC49
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27346330FADF11EE95ABB118017001B1.roa
Signing time: Mon 15 Apr 2024 04:18:04 +0000
ROA not before: Mon 15 Apr 2024 04:18:01 +0000
ROA not after: Thu 25 Apr 2024 04:18:01 +0000
asID: 5065
IP address blocks: 154.94.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44105 (0xac49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 04:18:01 2024 GMT
Not After : Apr 25 04:18:01 2024 GMT
Subject: CN=661caa7c-6458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:25:24:fa:2c:6a:9e:30:c2:1c:66:5f:e8:57:
75:6f:6e:06:51:20:2e:48:96:93:00:f0:c0:2f:a2:
24:e8:df:9a:9f:ea:90:8b:43:50:46:11:2d:6d:48:
5b:0a:0c:5e:ef:28:72:db:f6:2e:04:3f:2b:f6:f5:
a8:e7:9b:bb:33:cd:cb:e1:e6:57:2f:7b:c3:8b:8b:
6c:28:88:bb:7d:1b:8a:74:0f:2c:36:36:cf:00:38:
2d:3e:63:5a:ce:bf:3d:69:33:b1:8c:85:d5:68:0e:
cb:40:a0:f7:f1:3f:68:b9:d7:22:bd:a8:cd:9b:f2:
26:2a:d1:fa:f0:b2:1c:b0:3a:74:48:ba:67:c9:71:
a7:9f:3e:53:7d:d7:c7:5a:04:30:56:cf:32:a3:70:
eb:a9:1a:4d:9e:bd:f9:1a:b6:95:11:cd:a7:10:a6:
d3:e3:19:29:b5:eb:22:95:19:49:43:ac:11:1e:4a:
80:d4:f2:d9:cd:7a:9f:94:f4:b9:6d:40:bf:6f:09:
48:2f:dc:1c:a9:d5:d5:13:e2:3d:3b:d6:e2:7b:e2:
68:2b:f5:93:bb:70:a1:34:6c:de:c6:d9:3a:41:d3:
94:f0:4b:55:93:b9:db:1e:21:22:f0:8d:9d:38:60:
85:69:15:f2:07:22:a9:70:a2:82:6f:92:8a:0e:f8:
57:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D9:FF:2A:9A:45:88:D0:F9:B3:A3:DE:CB:4F:A9:52:3F:41:67:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27346330FADF11EE95ABB118017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.47.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:eb:3c:68:c1:67:cf:52:3b:50:4d:69:b3:df:5d:51:20:60:
fb:fe:f7:a7:9f:95:1e:56:88:53:21:43:76:c0:e2:5d:30:c3:
b2:7a:09:38:c4:00:a1:90:1c:5c:0b:8e:31:11:12:66:c3:f1:
25:79:35:a9:94:ec:77:84:b8:a1:fb:9b:f0:3f:ba:f0:78:34:
f1:05:8d:f6:c4:cb:f3:10:77:8f:f7:2b:0b:a3:46:37:09:b3:
55:b0:49:14:40:7a:da:cc:bc:4d:3e:b5:5d:cc:a3:c7:93:fd:
3c:8a:8f:45:81:13:db:8e:92:b6:df:45:9c:69:84:d9:4b:3f:
8d:cd:73:11:8d:15:1b:f8:ca:c7:c8:6c:de:37:3c:34:ed:0f:
28:99:a2:88:01:ff:3a:d5:32:86:69:5e:d5:a2:5a:8e:57:36:
f6:33:da:0c:44:7c:cc:53:5e:e3:75:ae:fd:a4:1f:a3:15:77:
d7:99:21:ec:f8:39:d5:d5:23:3a:31:fe:25:1e:71:ab:60:a4:
81:12:99:86:7f:29:f8:2d:c6:ec:14:59:ef:9a:7c:c1:f4:e3:
0a:85:05:35:08:38:d2:af:0c:f9:48:1e:cb:89:1e:f6:37:9a:
2f:78:bc:93:63:81:5d:d5:6d:fa:27:ef:f4:23:45:17:2c:9b:
2f:ee:e7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:50:18 2024 by rpki-client on console-fra.rpki-client.org