Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/360FA7A8E46D11EE9050934B775412E6.roa
File: 360FA7A8E46D11EE9050934B775412E6.roa (raw, json)
Hash identifier: OddDAOqOL6jiNlfwzuCbjz7zu2Mp2zIc08rrYaiZ6nE=
Subject key identifier: 95:48:8A:1B:CC:E2:C7:0C:31:C8:7E:DF:F6:A0:93:34:F9:04:17:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A1F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/360FA7A8E46D11EE9050934B775412E6.roa
Signing time: Sun 17 Mar 2024 14:47:00 +0000
ROA not before: Sun 17 Mar 2024 14:46:57 +0000
ROA not after: Tue 30 Apr 2024 14:46:57 +0000
asID: 63139
IP address blocks: 154.93.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41465 (0xa1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 14:46:57 2024 GMT
Not After : Apr 30 14:46:57 2024 GMT
Subject: CN=65f70264-ab60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:4a:83:da:f7:9c:37:6e:d7:8d:76:95:a9:
73:cc:3a:b0:c0:b4:87:9c:ef:36:0d:ad:2a:76:be:
47:90:aa:49:84:3f:1d:b2:ea:8b:f3:81:74:a2:01:
a1:9f:6d:8d:5d:91:b3:eb:e4:43:1e:90:0a:6f:da:
57:15:7c:44:2d:f7:8d:f7:7f:ef:41:71:2d:fb:0d:
6d:68:7f:1f:8a:9a:2c:e3:e5:ae:5d:3b:bb:d7:c0:
44:f7:46:fd:6e:62:e7:b3:e9:51:f8:86:f6:c6:7e:
ca:3c:a0:f0:12:81:29:13:56:15:15:ea:77:be:70:
75:a5:c9:49:30:03:fe:32:b2:e2:44:3d:86:ac:51:
35:e1:65:e6:72:26:c7:a2:47:f9:bf:54:12:a4:1a:
bc:28:4e:dd:24:96:ce:0e:34:6c:e8:fc:ac:4c:da:
42:28:b5:03:80:f3:73:d1:5d:8f:03:c3:26:26:b1:
51:bd:e9:57:a9:2c:97:db:17:80:db:9f:70:bf:36:
7d:90:9c:72:a4:63:5e:d3:09:c3:cc:09:81:ef:82:
3c:b4:b9:e8:9e:0d:1c:41:31:2e:8c:15:3d:5f:d8:
3c:26:d0:b4:a1:59:8d:14:bf:c5:f4:40:b0:4e:6c:
48:74:e8:28:0c:bb:a3:b9:a7:9c:b6:b7:33:da:d7:
92:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:48:8A:1B:CC:E2:C7:0C:31:C8:7E:DF:F6:A0:93:34:F9:04:17:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/360FA7A8E46D11EE9050934B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.69.0/24
Signature Algorithm: sha256WithRSAEncryption
39:50:0d:5c:2a:6c:d1:63:c5:12:d0:aa:e9:50:a2:e2:70:62:
38:22:95:95:e1:42:db:ba:18:9b:d8:4f:6f:4a:cc:36:90:86:
2a:65:4b:c0:c1:53:4d:ae:50:ee:a6:bd:3d:db:4c:cd:1b:1b:
ac:46:6c:29:7b:25:0e:dc:e4:44:4f:ad:1e:36:50:f6:33:22:
5c:27:dd:87:d5:94:bd:de:df:0f:e9:bf:07:2e:72:f0:79:b1:
bf:6d:fd:d3:6d:17:8b:17:4d:ab:31:3f:28:7a:f7:63:45:58:
00:a9:b1:9d:4f:ad:28:68:ed:df:9b:bb:24:d5:b1:8b:c5:17:
eb:4a:2e:83:89:4a:64:ea:b8:4e:f0:82:41:91:38:24:2b:a2:
e6:b7:2b:09:83:99:95:48:fc:79:6d:7b:46:5d:12:d6:81:56:
b5:77:0c:52:8d:41:11:fd:ca:13:fa:2f:04:75:21:86:24:7e:
d2:89:fe:e0:ce:69:7c:82:79:c3:3a:fe:8a:8f:0c:93:5b:05:
06:98:7a:f7:ee:4e:81:f5:32:6d:0a:49:95:0c:f9:66:39:a7:
7c:61:10:55:47:84:a8:34:a1:49:bd:2c:4c:31:d8:d4:f8:ac:
e2:b7:f5:df:21:b9:7b:31:0c:38:47:bf:c7:3d:0e:fc:7b:19:
65:23:62:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:40:37 2024 by rpki-client on console-fra.rpki-client.org