Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6119BE58FADD11EEA51E1109017001B1.roa
File: 6119BE58FADD11EEA51E1109017001B1.roa (raw, json)
Hash identifier: mFfwULY20PhGuSINwpVkjkIci5D5LKiPxL8aR6FKI1E=
Subject key identifier: 60:CB:AF:9B:8B:A5:8A:E9:8F:DE:8D:9E:53:82:14:D4:BD:21:8E:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC35
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6119BE58FADD11EEA51E1109017001B1.roa
Signing time: Mon 15 Apr 2024 04:05:22 +0000
ROA not before: Mon 15 Apr 2024 04:05:18 +0000
ROA not after: Thu 25 Apr 2024 04:05:18 +0000
asID: 39600
IP address blocks: 154.94.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44085 (0xac35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 04:05:18 2024 GMT
Not After : Apr 25 04:05:18 2024 GMT
Subject: CN=661ca782-cd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:28:35:7f:f3:55:0e:a1:89:1e:dc:e2:72:
1f:4d:3e:71:b9:23:85:03:59:34:bc:6e:34:dd:93:
43:9d:fc:8f:fe:11:77:0b:c9:6f:35:dc:c9:6e:09:
0c:73:e1:96:11:0b:80:0c:82:cf:b9:74:54:9f:47:
93:a5:75:35:6a:c5:9e:a9:8d:16:56:9f:b5:cb:90:
bf:3a:4b:48:4e:c2:99:22:e0:e5:e7:0e:e1:29:4f:
b4:37:a0:87:3d:b6:69:0e:19:2d:20:72:d4:22:ea:
f5:72:f6:52:14:9f:5a:9d:7d:56:29:4e:19:f1:bd:
93:4f:2c:fd:50:a1:06:61:30:60:0b:96:21:4f:68:
89:9f:31:2f:52:29:47:82:e4:2b:34:41:76:8e:44:
5b:04:86:b4:4b:b9:7e:44:8a:95:1c:e2:8b:f7:a0:
ca:9a:b6:cf:fd:05:f5:1f:3b:40:0d:92:b2:07:45:
54:34:f9:48:07:39:dc:03:06:f1:2e:89:7c:b8:77:
2e:e1:fd:e6:b5:fc:c3:7a:7d:df:d4:ff:53:d6:8a:
3f:d8:c7:ac:89:5c:87:7d:40:4c:a8:41:4c:e8:df:
d4:e2:ad:0d:8e:ef:ce:79:d8:52:a5:1c:3a:34:d3:
cc:5d:64:20:89:e1:ff:3c:0e:b4:7f:d5:58:85:11:
3e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CB:AF:9B:8B:A5:8A:E9:8F:DE:8D:9E:53:82:14:D4:BD:21:8E:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6119BE58FADD11EEA51E1109017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.55.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:2c:86:92:3e:05:09:53:23:10:b6:42:8a:09:9c:e3:de:4d:
4f:f7:68:20:94:f7:84:31:09:22:4b:36:9e:56:03:93:87:98:
50:33:c0:82:87:e7:cf:3e:86:6c:e4:9a:08:5f:5e:9e:b3:eb:
cb:77:fa:3e:a1:cc:bc:ef:1f:3c:ee:96:79:95:54:69:81:ab:
2c:d9:d8:78:6c:45:aa:18:9f:49:e5:46:0f:99:b6:73:13:08:
f8:17:fc:e1:61:bd:17:d1:73:24:06:35:1c:62:64:3d:d2:9b:
e2:cf:77:4e:a9:b1:07:43:31:8a:47:5a:a5:e2:6c:fd:73:cd:
5f:f3:b6:37:9d:33:b1:f2:e2:d3:99:66:12:e9:bd:ba:b7:1b:
51:75:94:92:e6:bc:04:b8:40:a5:94:be:5e:13:6c:19:3a:02:
ca:d0:2c:c1:ac:51:a9:a8:29:72:c6:14:39:18:69:eb:61:cf:
29:75:03:78:1c:bc:1f:09:3b:8a:b3:05:1d:99:fc:ab:1d:85:
7c:32:97:a9:76:d7:0a:92:90:f6:b7:0e:0e:a0:fd:db:30:77:
a8:cd:8b:ea:32:3e:00:92:64:e4:af:38:b9:60:3f:ef:34:1e:
35:5f:ac:1e:97:b0:14:13:4e:f4:32:4d:fb:cb:e0:5c:4b:4e:
bf:35:ad:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:50:18 2024 by rpki-client on console-fra.rpki-client.org