Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94CC3460E47611EEBDA39388775412E6.roa
File: 94CC3460E47611EEBDA39388775412E6.roa (raw, json)
Hash identifier: km45WtTz0f735kAIvLbFStveZriLkwL4i2U/uULANZI=
Subject key identifier: 4B:CF:B6:7C:0C:54:02:4B:96:EC:62:C7:44:0B:CA:0A:F9:32:94:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A25B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94CC3460E47611EEBDA39388775412E6.roa
Signing time: Sun 17 Mar 2024 15:54:05 +0000
ROA not before: Sun 17 Mar 2024 15:54:01 +0000
ROA not after: Tue 30 Apr 2024 15:54:01 +0000
asID: 63139
IP address blocks: 154.94.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41563 (0xa25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 15:54:01 2024 GMT
Not After : Apr 30 15:54:01 2024 GMT
Subject: CN=65f7121d-0e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:29:64:f6:e2:b4:45:49:6e:80:c4:1c:5a:
33:c4:a2:8c:e1:2f:c2:a4:6e:ee:25:cd:4c:44:3a:
9e:cb:b3:31:d4:de:d5:6a:db:a1:83:64:b4:b4:b6:
1c:42:a5:7a:3f:b7:2e:ce:9f:37:15:3c:4f:3d:bb:
03:5a:65:32:99:bc:f1:20:a7:eb:f7:49:f0:5b:40:
ba:8f:51:6a:d7:97:03:cc:4d:60:19:48:bb:d5:cf:
da:91:b5:dd:9b:28:14:ba:37:4b:df:35:1e:c4:50:
84:e2:fa:17:5d:38:3f:d9:ee:0c:65:0f:b6:96:71:
16:26:06:b8:56:17:23:8d:c5:5c:a3:ae:eb:df:78:
7e:d2:ca:c1:b9:02:6d:4b:db:fa:5b:cf:e5:a2:0e:
e2:85:08:81:f7:a6:78:2d:8c:f9:df:95:61:68:36:
59:17:20:2f:58:0e:be:01:03:5b:a0:b5:36:09:cc:
fe:0b:50:7d:0f:41:6b:1a:e5:a0:a1:a2:e8:c5:a3:
8e:e3:90:f7:9e:48:fd:f3:6b:29:0b:77:28:2b:d2:
6e:6a:c0:33:d0:15:84:28:2e:fe:7a:3e:3e:88:75:
4d:87:19:ad:40:1d:51:a9:81:66:c9:8a:5f:bc:07:
04:3c:17:32:ea:6a:b4:f5:a9:2c:9d:27:dd:82:8e:
79:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CF:B6:7C:0C:54:02:4B:96:EC:62:C7:44:0B:CA:0A:F9:32:94:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94CC3460E47611EEBDA39388775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.101.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b5:a7:16:85:61:ae:46:85:0d:b9:55:c2:c2:81:e1:f7:7a:
97:b8:f9:19:5e:a9:14:07:2f:3a:37:24:46:63:f3:99:4c:98:
2f:30:c4:a1:99:18:e6:63:17:8e:8d:77:50:a2:93:d7:7d:fe:
ac:4c:1e:5e:e1:dd:ee:47:b6:63:1f:a1:94:90:ad:bf:a9:9a:
db:60:3f:8e:4a:bd:9d:e1:bf:b8:05:54:85:30:9e:d3:aa:02:
a4:a8:ca:38:18:ec:09:02:7a:00:4b:4b:57:3c:46:f1:ef:9b:
be:75:40:d6:f0:07:d8:05:e9:0a:ef:83:a8:49:52:39:b9:df:
b3:8e:7f:1c:0d:3c:31:bb:1b:64:db:8c:f5:9d:df:17:40:d1:
20:62:13:38:16:5d:71:fc:e0:f9:6d:39:95:57:2c:cc:24:b5:
36:90:57:be:a2:3b:39:70:7f:48:81:e4:09:5f:02:6c:cd:4a:
39:ac:ee:aa:42:db:6d:78:0a:ba:b6:65:ad:cc:8e:76:52:7e:
ed:b3:84:55:fe:3d:0e:64:66:40:54:3f:62:a0:9b:21:43:3e:
b0:b1:df:9a:9d:b5:d9:30:dc:27:7b:b0:c3:5b:b3:7b:5b:62:
d7:c6:dc:ca:81:db:ba:2f:43:8b:64:a8:53:f8:ac:c8:fc:39:
f0:64:f5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:03:19 2024 by rpki-client on console-ams.rpki-client.org