Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/463ED108FADE11EE9D91230F017001B1.roa
File: 463ED108FADE11EE9D91230F017001B1.roa (raw, json)
Hash identifier: 7t/ySJyKnX5O+yPjU6TsFk9LwKedz03d9zc9QKsMZhs=
Subject key identifier: 1C:27:09:5D:FE:D6:8C:59:54:F5:4B:D5:2A:97:BE:01:A5:3B:77:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC3F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/463ED108FADE11EE9D91230F017001B1.roa
Signing time: Mon 15 Apr 2024 04:11:46 +0000
ROA not before: Mon 15 Apr 2024 04:11:43 +0000
ROA not after: Thu 25 Apr 2024 04:11:43 +0000
asID: 5065
IP address blocks: 154.94.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44095 (0xac3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 04:11:43 2024 GMT
Not After : Apr 25 04:11:43 2024 GMT
Subject: CN=661ca902-e1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:a0:e8:2a:a1:96:64:c7:60:50:18:26:08:
bb:06:0f:e0:d1:61:39:e1:18:06:02:6f:fe:60:13:
90:b0:6a:46:e8:85:e1:a1:32:23:a2:5b:fb:6b:26:
48:49:da:fc:99:9f:0f:4e:57:c2:4a:a9:b1:8e:11:
33:23:83:3a:8f:d9:13:f5:bd:ae:0f:41:a5:21:a2:
f9:00:c2:0c:98:85:79:ff:a2:15:32:fa:60:3f:37:
76:60:51:5c:ee:2a:88:b6:da:bd:77:0e:19:00:7c:
ee:3f:30:58:29:bf:01:e6:e2:c2:c5:d4:97:d6:23:
1b:b1:67:6c:97:fa:10:36:1d:76:3c:99:83:42:ac:
f1:cf:f4:1d:02:13:b2:6d:ed:35:19:21:d0:61:bf:
c9:be:8c:c2:30:52:1e:21:52:4a:5b:09:8b:96:02:
bb:64:b7:1c:b0:3c:d0:30:98:51:b7:92:e2:89:40:
78:83:fe:8e:d1:d1:06:4f:33:c6:f7:44:be:29:88:
f1:d6:6a:d0:54:3a:87:c5:75:03:a6:17:cc:17:9d:
f1:56:11:89:2f:8b:16:20:ca:42:56:69:50:aa:2f:
87:c4:45:76:2c:29:c8:c8:42:eb:c8:44:33:52:ee:
6a:32:15:c8:46:e7:45:00:32:d3:d1:bb:f7:af:6f:
c4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:27:09:5D:FE:D6:8C:59:54:F5:4B:D5:2A:97:BE:01:A5:3B:77:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/463ED108FADE11EE9D91230F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.56.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:4a:69:07:dd:1f:0e:da:25:98:d6:d9:a4:5e:fb:fd:76:a9:
fd:c2:18:db:19:b9:33:f0:1c:c0:7d:f6:b7:63:7d:8f:21:aa:
92:17:d6:1c:78:d4:4c:42:11:d7:47:e5:d5:11:ac:47:b6:ef:
6e:cf:99:40:20:ad:75:f6:7c:09:4a:1a:b9:91:fb:84:f8:32:
e5:f3:07:d2:ba:55:b5:74:26:2e:d1:56:47:dc:f8:96:a7:f2:
0e:7b:43:26:fe:07:58:39:f4:f0:a2:42:bb:8c:4a:83:04:be:
7f:aa:da:85:72:bf:ec:39:3c:45:e4:94:fb:e9:57:05:92:08:
04:20:83:bf:d4:ac:93:c1:26:2f:41:32:87:40:2d:80:37:ba:
1a:0f:40:92:1b:33:c2:cb:ad:49:37:2c:4f:af:24:84:e7:1e:
17:f5:21:34:02:c4:7d:56:46:2a:05:e9:05:a8:24:82:1e:d2:
d0:1c:e8:ce:de:db:3d:98:f1:20:2a:ea:cb:ae:f0:29:36:ad:
07:1f:b9:e5:2c:a7:08:1f:dc:d1:d8:c8:e8:7e:38:5d:17:d6:
24:41:99:aa:03:0a:e3:2c:e8:c3:43:e2:04:a2:af:d7:61:ef:
b2:a1:d9:29:31:f0:6d:24:31:1a:9d:00:f2:6b:7a:2c:1f:29:
79:bc:85:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:50:18 2024 by rpki-client on console-fra.rpki-client.org