Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54970BB0FAE511EEA534BE46017001B1.roa
File: 54970BB0FAE511EEA534BE46017001B1.roa (raw, json)
Hash identifier: SPwK0M3PizMqBa4ry+pCTSvHQBvKmUYZz0fy7EjcOLc=
Subject key identifier: EF:E2:E7:D8:83:6C:F0:7E:A8:05:A6:8E:68:2E:F7:9C:EA:10:03:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54970BB0FAE511EEA534BE46017001B1.roa
Signing time: Mon 15 Apr 2024 05:02:17 +0000
ROA not before: Mon 15 Apr 2024 05:02:13 +0000
ROA not after: Thu 25 Apr 2024 05:02:13 +0000
asID: 5065
IP address blocks: 154.94.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44140 (0xac6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 05:02:13 2024 GMT
Not After : Apr 25 05:02:13 2024 GMT
Subject: CN=661cb4d9-995e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:be:ba:6f:bd:90:5f:6b:9b:f5:1f:8c:2a:81:
fe:fe:47:7c:31:3b:a5:8a:56:62:4e:95:1a:5d:0e:
1e:e4:eb:05:e5:91:31:aa:4a:85:c8:c7:80:54:02:
d8:cb:6c:ec:83:c5:98:49:aa:9f:e2:b0:e5:3b:b9:
6e:cd:96:a3:b8:0a:8c:89:c7:ea:6e:75:25:12:d1:
2b:e6:64:00:7e:1d:5e:5a:21:46:ce:75:1a:c4:80:
32:7a:a1:6d:38:bb:62:9e:a3:76:35:c3:d8:b3:60:
66:a9:59:3f:86:20:8a:8c:64:a4:41:13:12:bf:07:
5b:3f:b3:3d:c2:93:b4:2e:9d:6b:b6:03:a7:a3:57:
d7:23:9a:83:b3:53:5f:8f:f7:fd:c6:b1:05:11:e7:
7a:75:71:4c:ae:c4:74:95:2b:46:74:4e:64:fe:06:
74:64:f7:68:ef:17:75:c3:cd:5e:4e:1a:a6:d4:68:
7e:bb:ec:14:77:94:e2:be:15:5e:d0:95:b3:65:f4:
3a:3d:3b:9c:16:73:7c:09:4b:c9:6c:09:96:7c:2c:
ba:06:81:35:6d:1b:e9:2f:be:e6:c5:6d:1f:f2:8b:
01:ab:1b:9b:c7:6d:38:01:0a:ac:03:f7:ff:f7:43:
79:e9:d7:35:c4:95:11:44:36:83:ed:fa:d1:59:85:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E2:E7:D8:83:6C:F0:7E:A8:05:A6:8E:68:2E:F7:9C:EA:10:03:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54970BB0FAE511EEA534BE46017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.36.0/24
Signature Algorithm: sha256WithRSAEncryption
85:46:32:98:d2:07:83:98:6d:88:fb:f6:de:0e:c2:f5:22:aa:
89:b0:aa:38:0d:16:ad:2b:fd:06:15:25:d1:60:42:f0:4f:76:
44:63:16:f0:d3:d3:10:e6:a9:5e:98:a0:51:0e:4e:4e:92:2b:
03:fb:f2:0b:fc:3e:be:f5:da:7c:ff:af:2b:a7:b9:0a:99:d3:
b5:91:e1:3c:1b:07:02:37:85:d8:81:4a:18:60:49:30:c9:e1:
b4:53:c8:75:1b:b3:a8:c9:d4:95:d2:41:38:d0:42:44:7c:c3:
55:0e:fe:4d:42:86:eb:68:bb:09:b3:0b:8b:0d:2e:af:c7:69:
04:5c:a4:0b:b1:26:bb:d0:f1:6c:59:c3:86:26:0d:61:c2:c4:
27:a1:f5:d8:ae:c8:1c:91:b4:19:aa:6a:bf:44:7d:1e:a9:e9:
b3:cb:f1:c1:4f:61:a7:57:81:98:a8:7f:1a:7a:61:97:f3:45:
51:f0:17:17:23:b8:2f:3c:56:55:92:73:a0:75:55:7a:5d:3f:
01:50:f2:35:4d:d7:b2:a0:20:15:41:74:23:d6:fc:a1:be:f5:
0a:1f:19:0f:da:c5:ef:fd:b1:d4:88:25:3b:a2:08:a9:4a:ac:
1d:23:f4:a3:ec:a3:e4:3e:11:c1:d6:4c:1c:d5:b9:19:a0:49:
b9:5c:4d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:50:18 2024 by rpki-client on console-fra.rpki-client.org