Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/638DD4DAE47611EE98BD2B88775412E6.roa
File: 638DD4DAE47611EE98BD2B88775412E6.roa (raw, json)
Hash identifier: 7g0yGWATULYN/0wQmyTdnXvQFs2R+ggrVrp33lyYAAk=
Subject key identifier: 6E:E8:88:A7:1A:B0:B0:E5:8F:A2:60:B8:C2:36:90:B6:1C:E9:38:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A259
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/638DD4DAE47611EE98BD2B88775412E6.roa
Signing time: Sun 17 Mar 2024 15:52:42 +0000
ROA not before: Sun 17 Mar 2024 15:52:39 +0000
ROA not after: Tue 30 Apr 2024 15:52:39 +0000
asID: 63139
IP address blocks: 154.94.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41561 (0xa259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 15:52:39 2024 GMT
Not After : Apr 30 15:52:39 2024 GMT
Subject: CN=65f711ca-948e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:29:46:fd:51:a1:e9:b9:1e:99:87:7b:01:
00:0c:12:ad:88:56:f7:21:4a:9b:b0:28:a7:ab:3f:
eb:f2:43:09:12:81:d5:33:4a:9b:29:86:08:d4:64:
14:9d:b0:21:a9:c5:f6:7f:c5:6d:a5:c9:2a:e3:60:
50:74:25:1c:45:18:d6:f1:6d:4e:f7:f6:8e:aa:e4:
a7:70:9a:ba:15:32:8e:f5:be:9c:f1:68:d8:65:19:
6b:00:b1:15:47:82:97:45:e3:48:2b:ff:57:d2:87:
7c:c5:4a:6a:06:97:3f:b3:df:57:16:b8:df:b0:c7:
23:68:f5:3d:a5:f2:a3:ae:96:4c:84:f6:54:ce:de:
95:c5:6f:82:07:79:c8:76:27:8f:91:94:db:3e:fa:
73:a2:a2:4a:38:35:1a:99:be:c2:a9:da:f5:23:0f:
da:61:9a:b7:79:d0:b4:23:13:fb:42:f1:da:5f:cb:
95:ec:92:fb:c0:0a:ce:34:18:cd:39:ef:42:6c:73:
2a:a8:ed:0c:03:9c:bd:1d:a5:98:7e:c7:66:85:5d:
d5:8a:d3:0c:16:8d:37:64:f3:b7:23:f1:c6:95:78:
2d:3e:ce:ea:41:f2:38:c4:bd:81:07:8d:88:f1:08:
f6:0d:1b:e2:1a:fa:ca:62:27:20:bc:e3:24:45:83:
48:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E8:88:A7:1A:B0:B0:E5:8F:A2:60:B8:C2:36:90:B6:1C:E9:38:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/638DD4DAE47611EE98BD2B88775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.102.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:9d:1b:23:df:6a:7f:b6:6e:50:43:19:b5:62:00:de:e4:4a:
05:58:90:16:8b:ee:cf:0d:7f:1a:0b:e3:1f:81:4e:33:7d:5d:
bb:77:1b:f1:45:1d:25:d1:e7:72:72:da:d1:82:7f:c6:3f:d1:
70:4f:4f:25:0c:6e:06:b2:93:41:fa:b4:7d:56:69:3b:7c:ae:
ca:b9:dc:cd:bf:6e:1d:79:53:17:65:7b:8f:f8:d4:42:d8:fd:
84:d0:78:1f:00:53:5c:82:5a:f2:6b:a2:e0:b4:f4:79:6b:18:
a0:39:b8:16:3e:5c:28:56:69:5a:ca:f5:40:2c:71:54:e1:1c:
1b:d1:bb:be:c8:96:ca:52:7f:b7:46:bc:4a:76:04:17:2e:df:
ec:0e:44:12:1d:99:9c:64:4e:15:c8:4f:83:4c:fb:45:49:49:
ca:0e:2d:70:20:88:15:de:f2:21:a3:9c:87:13:6c:53:9b:de:
bb:3d:75:43:82:cc:1a:ea:5b:29:07:11:b9:ae:10:df:91:78:
f7:cf:8f:b7:f8:45:32:20:ca:1a:c5:70:9e:20:be:0e:b8:e5:
59:43:4a:d6:a1:92:c4:f6:6b:94:92:19:f1:59:2f:37:8a:f2:
71:47:3a:69:4f:d1:35:fa:f0:a9:34:92:b9:88:57:d5:c3:87:
18:59:57:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:03:19 2024 by rpki-client on console-ams.rpki-client.org