Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70BF6E10E47211EEA730E06E775412E6.roa
File: 70BF6E10E47211EEA730E06E775412E6.roa (raw, json)
Hash identifier: AAYVUqyh22fFcZu8hBXRG4AFwxjAW/htA9IHNacIVPo=
Subject key identifier: 71:6C:EC:C7:52:EF:07:42:C7:EF:62:E5:03:FB:D6:99:E0:A7:64:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A22F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70BF6E10E47211EEA730E06E775412E6.roa
Signing time: Sun 17 Mar 2024 15:24:26 +0000
ROA not before: Sun 17 Mar 2024 15:24:23 +0000
ROA not after: Tue 30 Apr 2024 15:24:23 +0000
asID: 63139
IP address blocks: 154.94.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41519 (0xa22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 15:24:23 2024 GMT
Not After : Apr 30 15:24:23 2024 GMT
Subject: CN=65f70b2a-df26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:90:f9:f9:d4:c8:c2:8b:c2:83:ac:36:64:
29:a5:c4:9d:09:6a:10:dc:77:20:94:b8:c6:cc:02:
7f:91:08:2b:72:b4:6c:25:68:ad:a2:81:66:7e:24:
1c:dc:54:80:0e:dc:1a:0f:62:66:b6:9f:dc:1f:b7:
fc:ae:50:6e:6e:37:65:7f:89:26:fa:55:f8:69:67:
d1:9a:db:b8:d0:ce:78:73:c0:68:06:0e:22:30:99:
d6:73:9e:80:df:df:28:a7:73:af:ae:77:37:13:ac:
27:3d:b8:9e:d3:86:75:67:1a:2e:69:a9:d5:d6:87:
fb:52:e6:86:65:e5:54:6b:5d:6f:23:b3:46:cb:f4:
33:ef:4c:9e:db:e5:bc:6a:e4:a2:5b:f5:9b:41:37:
70:a4:b6:56:25:ab:88:81:10:d7:b9:f8:45:c8:19:
56:ba:d0:fb:19:ad:e6:99:7c:99:c8:b4:6d:9f:b0:
76:5d:76:c0:30:d7:c1:a3:e2:d1:2e:3c:07:0a:c7:
e3:3b:35:28:3b:09:75:b6:8f:f7:96:11:fd:41:ea:
34:45:38:e6:44:0d:61:52:5b:d8:dc:88:c2:f2:f8:
91:6f:dd:cf:0c:de:f2:64:e7:04:df:55:07:cf:d4:
be:bc:70:58:a3:e9:99:01:32:69:fa:60:b0:53:dd:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6C:EC:C7:52:EF:07:42:C7:EF:62:E5:03:FB:D6:99:E0:A7:64:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70BF6E10E47211EEA730E06E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.73.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:7f:9a:f0:18:99:93:9a:8e:15:f0:d0:52:46:c9:6a:94:60:
1a:12:ea:30:8b:14:97:9c:3d:75:5c:c1:a6:9e:54:0b:6f:ad:
e4:59:f1:fb:7b:59:f6:9d:23:73:da:32:17:19:ad:80:19:fa:
7d:4c:f9:f3:42:56:89:0c:6a:1f:1e:a8:3c:48:96:71:61:ee:
06:5a:df:19:cd:44:c4:3e:39:3e:8b:d8:ad:3e:b8:0f:65:4d:
c6:da:35:c6:f8:1a:ab:44:f7:f1:38:e5:9f:13:5c:dc:49:46:
b8:64:27:3b:e1:8b:ce:3b:6b:b3:9d:97:8e:ac:01:48:39:84:
b9:03:37:bb:49:9e:ce:c2:7d:7e:88:e9:e3:a0:50:97:21:d4:
8a:bc:f3:e8:f6:d6:3e:75:37:9f:32:e5:12:23:85:09:b4:16:
4d:b6:39:b7:1f:4a:19:d3:c4:93:3e:75:21:d7:f5:67:c7:07:
95:a2:2e:da:e6:ff:90:a5:aa:0b:c3:02:19:f7:14:b9:a2:2a:
43:61:dd:6b:e8:66:7f:a0:68:61:68:c9:c4:b0:f7:79:55:3b:
ef:b5:6d:6e:71:5b:53:4e:9f:df:6e:0e:94:e7:89:1b:46:a5:
e8:cd:77:ed:18:20:10:37:04:31:36:d0:d9:16:fb:ae:25:05:
c6:cf:5c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:40:37 2024 by rpki-client on console-fra.rpki-client.org