Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D967318FADD11EEBB778909017001B1.roa
File: 8D967318FADD11EEBB778909017001B1.roa (raw, json)
Hash identifier: gbSHCxgm4+e6yHlq36JS1ndjwguK46d64iqeP9prCXk=
Subject key identifier: 2B:3C:79:1C:E7:C6:3F:76:E2:1C:A1:6D:F5:5A:88:C7:E7:28:7C:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC37
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D967318FADD11EEBB778909017001B1.roa
Signing time: Mon 15 Apr 2024 04:06:37 +0000
ROA not before: Mon 15 Apr 2024 04:06:33 +0000
ROA not after: Thu 25 Apr 2024 04:06:33 +0000
asID: 5065
IP address blocks: 154.94.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44087 (0xac37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 04:06:33 2024 GMT
Not After : Apr 25 04:06:33 2024 GMT
Subject: CN=661ca7cc-4e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:a5:fe:43:2a:d8:35:30:d9:4f:f5:0d:32:
26:ef:05:54:04:69:a5:35:e4:aa:0e:da:1c:e6:e7:
b8:b8:dc:43:5f:fb:23:7c:77:00:f7:0d:53:14:01:
a4:82:8c:97:3b:79:fc:67:6d:08:30:6b:e6:dd:a5:
13:86:9d:35:0b:2c:8d:a4:54:80:51:7f:1c:be:2d:
db:54:0a:d8:1b:04:8f:d4:da:cd:6d:90:b7:61:7e:
ff:61:98:02:07:da:9d:c5:e9:7a:a8:ba:ba:95:42:
a3:8a:4e:8d:5f:36:c3:e0:55:dc:76:50:56:71:18:
e0:aa:68:4b:85:c7:9e:3f:a7:bb:da:14:d9:c3:53:
f4:7a:12:8d:98:fe:78:fa:ba:6c:fe:ff:34:a6:60:
0b:3b:91:f1:6d:d3:3c:6b:52:68:8d:1a:15:8a:40:
78:cd:d0:7d:03:a3:b8:6a:e7:15:cb:8a:f2:e7:f0:
cd:a8:ee:a6:9d:29:9d:29:de:c8:6a:15:1a:dd:a0:
ef:2e:1e:ff:02:f4:a0:7c:ec:de:ad:5a:92:ea:5b:
b0:a6:00:ec:83:45:24:89:43:dc:a9:59:00:63:57:
73:f0:e0:66:d9:62:f9:c3:20:b6:4b:f5:6b:a0:6b:
05:f6:85:75:83:e1:9e:57:a4:d7:3d:cb:9e:de:55:
3a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3C:79:1C:E7:C6:3F:76:E2:1C:A1:6D:F5:5A:88:C7:E7:28:7C:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D967318FADD11EEBB778909017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.63.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:20:46:ba:09:08:00:9d:28:18:df:b9:01:d5:3c:48:08:71:
5c:b5:56:06:7c:a7:3b:5e:34:6f:a9:98:c1:8f:9f:a4:6d:72:
a7:4b:6e:10:07:0e:d8:83:b3:2e:e3:ea:34:b5:10:f3:83:fc:
0a:d0:0a:e4:8b:85:d7:a2:39:49:1b:d3:5e:53:58:7b:43:b2:
f2:cc:9a:9a:ee:83:66:ff:f7:c3:d4:fc:d5:b7:32:fa:80:81:
cb:98:95:18:89:7a:6e:2a:fb:a7:e0:27:db:d1:16:65:fa:e8:
8e:f3:46:47:bb:cd:18:cd:77:2b:26:8b:db:b7:42:a6:bb:a9:
cd:a5:29:2b:0c:58:06:ff:f0:5f:25:eb:76:31:b2:f0:3e:e0:
3c:76:64:41:6a:02:6a:9b:6c:23:0e:7d:d9:03:77:39:b7:80:
3e:5d:3a:35:25:10:b5:5d:2b:f0:7c:e0:f7:61:f8:cb:15:8f:
69:c2:9f:18:5d:e3:30:e8:cb:21:02:72:42:0b:1d:a5:ef:fb:
46:ca:9f:67:4f:13:36:60:bb:24:75:8c:3c:77:e3:fb:50:24:
9f:fe:4e:26:06:f5:46:c9:02:04:c2:67:b0:90:3c:30:44:32:
1b:51:39:73:b1:4e:f9:1f:dc:9c:e8:9c:83:96:57:75:6d:69:
52:03:55:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:50:18 2024 by rpki-client on console-fra.rpki-client.org