Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F7BA6B4FAE611EE89293250017001B1.roa
File: 2F7BA6B4FAE611EE89293250017001B1.roa (raw, json)
Hash identifier: 54sAbp22pTACmYWvFC2V7Oa702xzM9kDX/a3J5V1l4U=
Subject key identifier: BF:9B:DD:E1:F8:C0:67:85:3D:D9:85:3B:FE:89:80:C0:00:BC:49:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC76
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F7BA6B4FAE611EE89293250017001B1.roa
Signing time: Mon 15 Apr 2024 05:08:24 +0000
ROA not before: Mon 15 Apr 2024 05:08:21 +0000
ROA not after: Thu 25 Apr 2024 05:08:21 +0000
asID: 39600
IP address blocks: 154.94.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44150 (0xac76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 05:08:21 2024 GMT
Not After : Apr 25 05:08:21 2024 GMT
Subject: CN=661cb648-0dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1a:12:ac:c1:84:93:e5:80:66:7b:53:ff:d7:
e1:dc:70:e0:83:a2:53:65:45:c6:ab:49:4b:a1:dc:
fc:9c:8f:19:41:ac:bb:76:bb:9d:68:c6:72:9c:20:
88:af:d6:c3:f3:1a:bd:ce:cb:0b:ee:59:aa:d1:e1:
3f:e2:0a:bc:47:c7:3d:8e:7c:5b:b6:33:a5:cf:8b:
7f:25:44:06:0a:67:35:e0:e1:88:00:65:3b:a2:81:
79:f6:70:11:90:e2:f0:5b:99:b1:9b:1e:d9:ff:6c:
3a:c5:a1:e1:77:4d:f9:16:5c:4d:d3:7b:34:32:70:
9e:73:28:ca:03:53:4d:1a:61:e9:29:80:a7:e7:be:
94:c3:6e:60:b6:01:26:a2:d7:3e:b1:6f:d6:e5:cd:
41:01:b1:38:9d:20:e1:7a:14:9f:5d:04:10:07:53:
6e:e4:98:f6:b9:11:04:6b:20:78:51:9b:f1:19:2b:
52:a0:cc:46:8e:f9:74:24:3a:17:e7:5b:6d:06:4d:
40:6e:75:4e:a6:17:8d:ac:2f:c9:57:b4:08:29:e5:
5b:b3:8b:d9:d9:92:8c:e8:cc:d2:7d:a0:d2:4e:24:
20:10:57:8b:ca:e0:3e:22:6e:f2:c2:46:40:27:6e:
94:17:35:ed:41:2f:ae:13:8b:99:37:4d:c9:9c:f6:
74:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9B:DD:E1:F8:C0:67:85:3D:D9:85:3B:FE:89:80:C0:00:BC:49:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F7BA6B4FAE611EE89293250017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.59.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:2f:53:91:69:3a:5f:9b:8f:46:2e:50:05:18:c8:7f:67:4a:
24:0e:c8:0d:11:3f:ef:20:d8:51:bb:55:3a:79:da:5f:40:2b:
28:a1:64:95:e1:c0:d8:bb:fc:b5:a1:98:d5:ce:a2:41:56:16:
fb:a9:15:75:78:c0:36:d0:9e:b3:0c:51:0b:f6:5c:fd:b0:a8:
a8:3a:c3:0f:56:a7:4b:4c:bf:38:d1:f7:7f:ef:42:7b:b1:6a:
6f:7f:47:6d:58:7a:94:06:6b:bc:8e:bb:c2:5d:a0:22:cd:1f:
69:b3:49:f0:54:9b:41:ba:c8:5e:b7:0a:e8:f0:db:a3:55:38:
a6:19:88:0c:51:d9:67:65:a0:66:77:f8:96:00:e1:ff:1e:22:
16:af:74:e0:41:2c:0a:32:36:67:b0:cf:14:7f:96:ff:f8:01:
33:c2:6c:a6:36:ab:a2:ec:d9:a3:eb:6c:f8:05:82:41:cb:58:
a5:2d:91:fa:12:f6:2b:a7:7c:f7:d9:46:0b:75:a4:31:16:ce:
b7:9c:15:77:5a:f5:2a:e8:cd:cd:b5:55:31:7a:c8:bb:c8:39:
4d:7c:c2:dd:97:fe:f9:28:d5:70:31:ac:53:0f:85:35:8f:15:
68:5f:65:27:c6:ef:5f:04:e6:af:46:41:ba:fb:71:24:31:ff:
1c:eb:1c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:50:18 2024 by rpki-client on console-fra.rpki-client.org