Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4207A6E8E47511EE89987980775412E6.roa
File: 4207A6E8E47511EE89987980775412E6.roa (raw, json)
Hash identifier: NCbld1+BHvAeU2rF8Ggj8MDzAWNz/vo5o5ANGdsfdJ0=
Subject key identifier: 41:5D:4D:EA:34:51:48:F4:EE:D1:49:15:CF:84:28:8B:E6:9C:0F:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A24D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4207A6E8E47511EE89987980775412E6.roa
Signing time: Sun 17 Mar 2024 15:44:36 +0000
ROA not before: Sun 17 Mar 2024 15:44:33 +0000
ROA not after: Tue 30 Apr 2024 15:44:33 +0000
asID: 63139
IP address blocks: 154.94.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41549 (0xa24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 15:44:33 2024 GMT
Not After : Apr 30 15:44:33 2024 GMT
Subject: CN=65f70fe4-4ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:62:c9:91:a5:99:32:21:a7:eb:bb:3b:ea:50:
df:8e:4b:6d:7c:b7:e0:48:cf:4d:63:51:a3:eb:a3:
c0:00:b6:59:d3:80:15:eb:64:99:4c:82:d5:a7:96:
b0:08:47:fe:81:11:30:35:48:f0:cf:ac:61:1f:55:
b4:53:24:90:18:c0:7b:93:4e:02:9f:9c:e1:2c:d8:
41:dd:a9:8d:a6:cf:60:b0:af:f9:ec:c1:63:a2:a7:
df:c2:8f:26:21:92:88:2d:6c:4d:82:e7:10:73:56:
15:dd:96:b5:9d:a4:8e:60:a7:9f:a4:f5:8d:f3:c2:
6b:5e:cd:89:83:3c:2f:16:67:2a:0c:2f:b8:74:9a:
e6:d0:d1:9b:e6:9e:82:1d:b1:a3:e0:04:8d:4f:f9:
f0:5c:94:c8:06:dc:e7:f0:6c:ff:d4:2e:f0:5a:29:
77:27:90:53:31:c6:52:ec:45:98:72:81:d3:75:ff:
3c:93:78:05:dc:96:58:01:69:ea:97:e3:dc:9c:25:
24:e9:62:47:4b:e5:80:4a:8a:3e:c7:e5:1e:53:d6:
8b:1c:21:fc:b6:19:30:d4:22:23:bf:b0:71:9a:24:
07:c5:55:6a:a0:43:f7:08:d4:14:5c:94:e8:d9:39:
23:f8:24:7a:bf:47:d8:51:17:b1:25:0d:a4:bb:6f:
b5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5D:4D:EA:34:51:48:F4:EE:D1:49:15:CF:84:28:8B:E6:9C:0F:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4207A6E8E47511EE89987980775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.108.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:20:90:cc:ed:15:dd:02:3b:da:00:17:fe:c4:d3:a6:b2:a8:
9d:82:57:d5:93:1d:44:de:f6:f8:81:63:b7:3d:17:d8:be:01:
e9:a2:3a:79:55:40:34:2c:c0:8d:45:3f:57:66:95:51:4f:4a:
1f:96:91:9f:2e:ec:56:1c:2c:25:ad:51:9e:ba:e6:05:e0:13:
51:bb:e5:fd:83:af:8d:cd:09:84:4d:40:25:f3:7c:d9:36:c2:
bd:b7:6e:79:a2:2a:1d:b1:73:36:4d:c0:76:bc:83:0a:11:89:
22:c9:cf:9d:61:f4:ce:db:37:50:54:a2:c3:38:91:14:8e:5d:
ac:70:af:f9:e6:22:29:db:a0:aa:13:37:f5:90:6d:46:67:b3:
9e:70:67:ce:95:40:16:ca:b9:de:6d:3d:d1:f2:f9:b2:01:8d:
80:e2:95:bf:00:65:9f:66:29:f7:3c:d3:14:0a:b3:3a:18:21:
74:d9:4f:61:c1:74:d9:b1:16:07:e7:79:82:12:07:ad:72:8d:
6e:b3:31:51:9e:a4:a7:4d:bc:56:44:34:9e:11:07:cf:df:0a:
d5:21:3d:94:e9:89:fe:4f:4b:66:e6:13:8f:f0:d5:f3:28:fa:
37:dc:fa:02:5e:f7:0a:82:95:36:66:40:f3:9e:9e:8e:db:4f:
a2:85:87:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:03:19 2024 by rpki-client on console-ams.rpki-client.org