Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2E239CEE47511EE99C9F380775412E6.roa
File: A2E239CEE47511EE99C9F380775412E6.roa (raw, json)
Hash identifier: 28qZ7d6s8V0G7b65vPvOZhwGIGtd+M166gBduUWg2TE=
Subject key identifier: 18:18:38:A7:D9:66:A6:DA:0C:17:EE:7B:9A:65:1D:35:D8:26:7E:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A251
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2E239CEE47511EE99C9F380775412E6.roa
Signing time: Sun 17 Mar 2024 15:47:19 +0000
ROA not before: Sun 17 Mar 2024 15:47:16 +0000
ROA not after: Tue 30 Apr 2024 15:47:16 +0000
asID: 63139
IP address blocks: 154.94.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41553 (0xa251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 15:47:16 2024 GMT
Not After : Apr 30 15:47:16 2024 GMT
Subject: CN=65f71087-ea03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:60:cb:fa:30:ef:cd:71:35:5d:26:f3:6e:
c2:26:2c:a7:81:da:f7:4b:9a:52:9c:87:ca:c4:a4:
a6:bb:f1:c3:c7:61:5d:8e:df:e5:0f:e0:7c:02:b2:
57:5f:8a:79:cd:6c:20:ff:a4:c8:e5:d2:05:9c:48:
19:f3:6c:88:b7:dd:29:ee:29:d7:1f:16:06:fa:ca:
8c:b6:62:7f:5d:66:f1:82:fa:71:bd:d2:3a:df:15:
a3:cf:cf:fc:67:6a:97:9a:7c:33:35:39:9d:d4:52:
fd:b1:e2:00:df:da:60:c7:0e:0a:64:a0:8a:a8:fb:
26:b2:01:e2:3f:71:57:db:32:aa:1a:64:0d:20:15:
58:ee:e4:13:d4:d0:22:ed:dd:c9:90:b4:3e:3a:10:
9b:6d:af:51:01:df:49:6c:d4:35:58:29:ea:e5:d8:
a6:14:71:a7:e0:c4:61:a0:99:bf:e0:b2:fb:03:27:
15:d2:10:60:32:98:fe:d1:d7:b4:dd:3a:f1:ea:95:
9a:4f:49:42:e0:1d:c9:c3:4d:53:8a:a9:a0:42:55:
4f:65:96:fb:03:41:cb:8c:60:8b:4a:d9:d0:bb:b2:
70:c3:1d:9e:f6:40:4e:bb:79:23:dd:03:ba:02:43:
da:6b:77:da:3d:16:cf:78:6d:6a:38:f1:31:ab:78:
4b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:18:38:A7:D9:66:A6:DA:0C:17:EE:7B:9A:65:1D:35:D8:26:7E:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2E239CEE47511EE99C9F380775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.106.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:cd:7e:f5:8b:46:52:41:17:7e:e0:c6:bd:13:d4:b2:04:7f:
46:10:61:32:50:fc:02:b6:26:c2:9b:0e:73:cb:a3:8d:2c:a6:
55:d6:da:f9:97:3c:fb:55:27:cf:6a:0a:22:03:af:fc:95:1b:
f8:60:27:51:63:7b:83:8f:19:53:51:d9:23:4f:94:f4:69:57:
18:1b:39:68:ac:a6:58:9f:e4:6f:b4:8f:86:70:c2:6e:39:a5:
54:c4:24:53:af:bd:54:4b:19:14:10:de:d6:d5:26:e7:1f:7d:
c2:bd:11:a2:f2:e7:0c:bb:4a:7a:c6:27:12:a5:1e:65:bf:80:
a6:f2:68:5d:00:83:50:1b:9d:d4:07:fc:c8:e5:fc:c1:ca:0f:
7e:36:20:65:7e:4e:63:9e:01:71:63:26:35:e8:06:e1:eb:fc:
af:57:4d:2b:4f:44:f2:da:dd:22:a4:fa:38:a8:47:2f:69:11:
6f:9f:bd:fa:17:3b:a2:05:16:2e:ac:bf:da:0d:fa:39:82:27:
c4:ea:b6:a5:32:1c:87:4a:ba:52:7a:a5:c4:9d:5e:48:db:5f:
9f:fc:e3:a4:a9:a9:7e:74:85:b8:7b:0f:3f:9c:5c:05:ba:3c:
b4:be:3d:8d:a5:df:f1:89:e2:65:68:b9:fb:ca:61:8b:e6:54:
df:34:12:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:40:37 2024 by rpki-client on console-fra.rpki-client.org