Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29D95766FAE511EEB1DC5C46017001B1.roa
File: 29D95766FAE511EEB1DC5C46017001B1.roa (raw, json)
Hash identifier: 4TNW2UT89LPKMXUPtVmDNh8sPCYaKR3X5jYxijWbY10=
Subject key identifier: 28:48:D8:EE:D8:AE:9A:84:29:1A:43:7B:A6:7F:8A:BA:87:42:5B:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC6A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29D95766FAE511EEB1DC5C46017001B1.roa
Signing time: Mon 15 Apr 2024 05:01:05 +0000
ROA not before: Mon 15 Apr 2024 05:01:02 +0000
ROA not after: Thu 25 Apr 2024 05:01:02 +0000
asID: 5065
IP address blocks: 154.94.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44138 (0xac6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 05:01:02 2024 GMT
Not After : Apr 25 05:01:02 2024 GMT
Subject: CN=661cb491-1ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:82:1c:8a:88:59:7a:25:5a:d6:09:51:f2:f1:
b2:2c:0b:dc:9e:c6:34:c8:f9:1e:aa:15:a3:43:74:
47:42:4b:55:a3:59:dc:73:c5:fa:16:ed:9c:e0:f3:
51:fc:86:54:00:04:ae:e4:a3:6a:0e:d5:4b:6d:c7:
ac:d0:39:de:4c:c6:13:ae:3c:13:36:18:d9:45:27:
49:ea:fb:c4:f1:55:ad:76:ba:d6:de:55:a4:73:d1:
84:17:2b:3d:16:df:c8:a9:28:2f:13:4b:e7:52:76:
9c:4e:04:7d:aa:f0:f2:91:2d:1b:d9:c9:ff:0f:50:
43:53:37:ed:a2:94:13:3b:fc:c1:4e:d5:62:3c:57:
c0:4d:d3:1e:5d:82:3e:8c:e1:39:25:84:b7:cb:05:
3d:19:a7:94:7e:93:fc:2e:25:c0:f9:5d:92:5e:59:
b0:23:fa:66:35:7f:51:ef:46:ae:30:e1:e6:17:a4:
4f:5a:ae:06:ee:81:76:ce:1c:9a:7d:52:d7:b7:77:
16:db:8c:53:d2:6b:86:1b:2a:7c:af:8a:8e:52:21:
2c:63:ba:a6:60:ba:86:92:45:ab:c5:51:ad:53:87:
e3:8b:e8:73:cb:ac:a7:c7:89:f0:23:88:de:84:eb:
7a:7e:3c:57:8e:55:8c:56:ab:ca:7b:ee:0c:e6:69:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:48:D8:EE:D8:AE:9A:84:29:1A:43:7B:A6:7F:8A:BA:87:42:5B:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29D95766FAE511EEB1DC5C46017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.37.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:7f:15:fd:4c:42:15:27:6d:8c:91:2e:1e:51:9f:01:31:49:
cf:ff:be:8a:35:b1:ce:84:db:d0:9d:b2:c7:2d:9c:ef:f9:35:
55:8c:20:2f:38:d6:08:64:13:5f:98:3d:33:ba:e6:48:30:2b:
b2:a3:32:2a:be:1b:c5:0d:df:5f:ec:40:b7:14:6c:17:5c:3f:
76:04:b6:ea:aa:70:96:dd:47:8d:a2:a6:fe:22:d9:a5:c1:83:
91:5c:6d:ca:1e:e8:f5:90:7e:90:c7:6d:d9:a7:56:62:6e:7e:
8b:ed:90:4b:e5:20:21:82:e9:1e:82:9e:3e:c9:c4:6f:e7:39:
51:3c:ca:05:dc:40:84:75:fd:3b:69:ae:14:71:4d:6e:91:a2:
d4:f5:75:44:5f:84:30:06:6c:a7:b1:73:98:38:64:a6:8a:d6:
8d:b2:3c:06:e9:1e:a7:93:48:de:93:83:bf:84:88:b5:79:57:
5d:c0:25:c3:f4:b0:8c:b2:2c:91:7e:cb:ff:7c:3c:7b:65:c7:
11:5e:9e:2e:0d:ee:ae:b0:cc:98:55:46:97:85:49:c6:3a:db:
cb:51:62:f9:d3:c8:b2:aa:2c:ef:f0:6b:5d:e0:a9:11:a0:fe:
22:e8:15:33:c0:1d:c0:4f:40:13:62:24:2d:74:dd:17:e0:7d:
2a:92:7d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 10:41:10 2024 by rpki-client on console-ams.rpki-client.org