Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47564410F70311EEA4922A78775412E6.roa
File: 47564410F70311EEA4922A78775412E6.roa (raw, json)
Hash identifier: zokTzIGoIAwQ0nEXPqVvkQOQfIXCxFLsqqNGFgHXRjs=
Subject key identifier: 6F:83:7B:ED:57:41:BF:9F:DD:85:1C:9C:19:A3:56:A2:57:49:E7:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AABA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47564410F70311EEA4922A78775412E6.roa
Signing time: Wed 10 Apr 2024 06:26:35 +0000
ROA not before: Wed 10 Apr 2024 06:26:31 +0000
ROA not after: Wed 01 May 2024 06:26:31 +0000
asID: 44559
IP address blocks: 154.205.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43706 (0xaaba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 06:26:31 2024 GMT
Not After : May 1 06:26:31 2024 GMT
Subject: CN=6616311b-75e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:19:07:e5:e5:b7:37:cb:00:a4:9f:45:c8:0d:
46:16:3a:ac:71:2f:92:89:11:8b:70:5b:db:c5:b4:
93:57:d9:77:4d:dd:85:04:81:72:47:2c:ec:fb:f2:
8c:c0:2b:f3:56:e1:fd:8e:c6:2a:15:fd:ad:71:50:
5d:44:48:91:d7:f5:46:da:16:da:f8:0a:98:3f:d7:
c4:4d:04:6b:72:dc:28:82:ff:e9:00:a2:a8:ef:b3:
03:ef:4b:1f:a5:2d:23:93:c3:1b:7e:06:fe:86:0b:
c6:63:73:d1:8f:c3:6d:b7:32:ea:35:9d:cb:d8:fe:
8c:02:aa:ee:0d:1f:10:ba:de:a8:e3:8a:1b:57:f0:
62:5b:7f:79:5e:e0:b5:0d:e9:92:9c:c6:7c:75:ae:
ea:98:be:d7:e2:84:b7:9c:66:74:26:05:8a:64:03:
0c:e2:98:96:e9:b8:4f:b2:6e:7b:c3:e7:39:46:84:
39:1d:19:bc:e5:45:1e:6a:5f:6d:68:21:d0:a9:ec:
87:76:83:af:bd:9b:b1:97:5f:62:2a:e3:10:b9:aa:
f0:1f:7a:52:43:f1:94:60:24:3c:67:6d:df:2a:df:
c6:25:3c:e2:cc:65:e0:a2:d5:ee:74:85:ec:1e:a3:
c0:5d:ee:0b:2b:a7:5c:88:0e:aa:ca:31:2e:44:04:
3d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:83:7B:ED:57:41:BF:9F:DD:85:1C:9C:19:A3:56:A2:57:49:E7:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47564410F70311EEA4922A78775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.224.0/19
Signature Algorithm: sha256WithRSAEncryption
4c:5c:a5:9d:62:52:60:84:2e:35:85:70:d8:17:33:01:3c:e5:
cc:2e:c2:49:9a:36:ed:d2:ef:1c:aa:03:16:30:d7:e1:0a:fd:
14:57:57:22:90:80:5e:87:d7:a8:5e:69:db:b7:2f:5a:65:28:
49:65:64:63:55:e2:75:7c:f6:14:18:d0:73:23:9d:5c:86:dd:
0d:d4:96:fe:10:19:c8:b2:a1:60:c8:ef:e6:9d:46:6d:e9:1f:
34:5b:bf:d3:d5:25:af:85:55:2f:4d:2e:56:30:6b:1e:08:fe:
54:3b:74:4c:e5:f2:22:1a:bf:2d:f3:e0:c6:90:dc:bc:a0:92:
d1:60:a5:39:ec:09:9b:53:84:63:4f:b2:e1:c6:74:60:e6:55:
14:c6:30:ca:39:2a:3b:0b:96:80:c8:b0:b6:ff:2e:c7:98:a2:
40:81:d4:8c:7b:df:ea:bb:18:e3:9c:55:dc:24:95:e2:dc:9c:
11:7b:7b:22:2d:5a:30:b0:35:4f:bc:9c:74:4c:ad:5c:69:96:
c6:0b:7c:f3:40:61:f6:a2:6e:62:3a:58:59:20:e2:3c:e4:d6:
ed:76:88:72:0d:3c:1b:8b:bb:28:eb:59:bd:28:c0:c3:83:3e:
bc:50:a0:22:ba:97:8a:ac:7f:4a:62:7a:4a:2a:8b:dc:9b:4e:
38:93:91:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:29:50 2024 by rpki-client on console-fra.rpki-client.org