Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/330B2E100F3311EF9D4CC63E017001B1.roa
File: 330B2E100F3311EF9D4CC63E017001B1.roa (raw, json)
Hash identifier: IRHBu5odOcPR8/dnt9wxlCB8FAJf3TyiluzYQjQ9j8o=
Subject key identifier: 4E:98:E6:40:F5:B7:4B:CB:CE:73:B6:1A:5F:22:BE:F6:94:37:58:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B6EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/330B2E100F3311EF9D4CC63E017001B1.roa
Signing time: Sat 11 May 2024 01:10:05 +0000
ROA not before: Sat 11 May 2024 01:10:01 +0000
ROA not after: Thu 23 May 2024 01:10:01 +0000
asID: 44559
IP address blocks: 154.81.62.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46831 (0xb6ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 01:10:01 2024 GMT
Not After : May 23 01:10:01 2024 GMT
Subject: CN=663ec56c-efb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:af:9a:15:00:41:ba:be:48:0f:25:01:80:45:
3c:00:a0:64:d0:51:5e:38:07:6e:3c:52:12:63:37:
ab:7c:70:ad:a5:3d:80:5c:12:4f:af:f7:ab:c3:34:
d5:1f:cc:9a:aa:2c:59:a4:95:39:6c:92:e0:89:30:
cd:ea:07:b1:d6:bb:83:9b:ed:77:fe:e8:ce:c0:63:
6c:a1:f6:f2:f4:e3:7f:43:24:93:57:c4:7e:e2:33:
e2:c9:41:ce:b2:19:6c:f2:32:c4:83:58:64:97:64:
00:2d:d1:92:19:be:51:e1:b5:95:8c:8d:3b:ff:9c:
5e:f5:cd:c3:e3:72:5c:eb:e3:ae:2a:6b:f7:40:51:
52:32:14:fb:17:67:43:7b:64:e9:02:61:4a:0b:2d:
49:c6:7a:e8:f8:a8:6c:f3:36:92:59:ef:35:17:4a:
f6:ea:46:a4:39:0a:47:5f:f1:85:09:7c:6a:bc:41:
81:dd:54:02:9a:2c:52:a0:91:56:98:e7:86:2c:8e:
91:2e:25:63:43:94:1c:cc:79:95:ee:b8:1c:61:3f:
26:0f:06:e8:83:00:c2:f6:ee:61:24:83:4e:f9:67:
ba:23:8f:55:fb:68:3a:3c:2b:ce:0a:eb:06:d7:ad:
23:fe:49:5b:78:1b:88:41:b8:09:35:47:9e:d1:1d:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:98:E6:40:F5:B7:4B:CB:CE:73:B6:1A:5F:22:BE:F6:94:37:58:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/330B2E100F3311EF9D4CC63E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.62.0/23
Signature Algorithm: sha256WithRSAEncryption
70:8f:4f:d8:d9:30:b4:b2:5b:5a:7d:a2:67:1d:be:c8:7e:c8:
7e:a2:14:aa:8b:94:0f:a6:e8:19:46:64:06:88:40:54:f3:b3:
93:fd:2a:36:b5:ea:b0:35:8f:27:fd:1b:0b:a2:db:56:4f:0b:
ad:ad:df:e6:bb:bc:b7:4d:05:a3:fe:51:d8:0a:70:18:7c:b1:
5e:9f:a2:8b:20:43:2d:6f:0c:57:f8:1c:10:37:fb:30:5e:4f:
12:85:97:3c:b9:ce:53:f0:d0:b9:a7:27:8f:57:94:81:d0:6c:
dd:dd:c8:6e:d4:5a:32:b6:d6:78:e8:ff:79:2b:5d:15:26:94:
1d:ef:d8:98:d2:8a:8d:07:9a:53:3a:32:6e:d5:9b:7e:83:e3:
3d:50:14:a5:ce:30:da:d2:60:cc:d4:46:f6:73:82:ad:ad:21:
79:04:5e:c9:3e:68:b2:e4:51:f2:68:86:28:1f:86:85:44:7e:
fa:66:2a:a3:f3:92:10:f0:77:6a:8d:9c:e3:d1:9d:6c:2d:04:
b6:1b:e6:81:a1:2d:a9:cd:cd:52:8f:e3:98:be:30:d1:aa:42:
9d:71:4f:7d:da:b0:6b:9f:ed:10:0a:49:fc:03:3a:11:e2:de:
3c:9d:c6:0e:69:c7:88:82:22:dd:62:32:74:86:f4:0e:2a:fe:
9b:e6:27:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:54 2024 by rpki-client on console-fra.rpki-client.org