Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A398361EFADE11EE916D9A13017001B1.roa
File: A398361EFADE11EE916D9A13017001B1.roa (raw, json)
Hash identifier: TcOmKR+CPEFsgYyyHWWtuRL1/sWCeFoaq64M3mhw9O4=
Subject key identifier: 33:EF:6A:EC:ED:F6:5D:CC:3F:4A:59:5D:B1:6C:B1:04:27:A2:6E:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC43
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A398361EFADE11EE916D9A13017001B1.roa
Signing time: Mon 15 Apr 2024 04:14:23 +0000
ROA not before: Mon 15 Apr 2024 04:14:20 +0000
ROA not after: Thu 25 Apr 2024 04:14:20 +0000
asID: 39600
IP address blocks: 154.94.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44099 (0xac43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 04:14:20 2024 GMT
Not After : Apr 25 04:14:20 2024 GMT
Subject: CN=661ca99f-ca18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:df:7e:d6:b6:52:50:b5:40:57:2e:a4:f6:d0:
5a:e7:f4:e2:46:45:29:52:71:c0:ff:6d:a1:cf:4a:
26:ff:e7:34:e6:45:17:0f:7e:12:8f:fc:9c:f6:70:
0b:26:88:fc:82:ef:10:b4:d2:3e:3f:ae:61:d2:80:
a8:dd:f3:6a:af:27:2c:4f:e0:d8:73:9e:4c:9b:01:
f6:32:7a:5e:81:d7:d7:6c:1a:b6:19:08:67:07:95:
20:79:4b:60:8b:90:f3:ff:4f:60:a6:c2:5c:b2:28:
66:1f:76:7e:5a:5c:37:d0:3a:f9:1c:a8:fe:5b:56:
7f:c5:b1:6b:d1:44:fb:27:2c:a5:8c:b3:0b:11:d6:
e9:e7:1f:cc:1d:69:10:b2:63:8a:78:43:da:c3:96:
ff:e5:25:f8:c2:2b:2b:26:4a:b7:3a:12:42:60:39:
cf:75:22:f1:37:00:a0:47:42:25:d8:a4:b3:97:ce:
ac:bf:35:8b:0d:08:e2:80:0e:31:12:0f:61:45:91:
49:3a:38:06:8a:f1:70:3a:32:e7:aa:df:03:d6:a9:
d9:89:51:9d:57:fd:7d:cb:ab:28:a6:db:32:94:9b:
12:e0:f5:c3:a8:04:fb:d2:52:88:be:cf:4f:03:94:
2e:70:f1:9e:0a:5d:e4:af:4b:e4:b1:5d:a6:29:a0:
72:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EF:6A:EC:ED:F6:5D:CC:3F:4A:59:5D:B1:6C:B1:04:27:A2:6E:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A398361EFADE11EE916D9A13017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.51.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:b0:db:69:ca:c8:fb:f6:47:57:14:c4:20:8e:0a:e9:af:f9:
f0:d2:8e:90:c0:de:d6:cd:b9:1d:b6:a0:f9:d7:15:c3:55:17:
98:52:60:60:2f:4d:78:63:a7:ba:1b:04:e8:6a:02:7c:66:c9:
fb:b6:a9:2e:9a:26:e1:3a:64:8a:ad:f8:4f:fe:ee:2b:9b:b8:
7a:22:b4:83:21:87:da:29:71:40:c8:f7:80:26:2c:1d:f8:1c:
57:17:b2:ff:bb:f5:d0:96:75:43:1b:9d:b1:9c:bd:9d:e3:35:
b1:fe:41:5e:09:ba:ce:48:60:2e:d1:29:96:88:b1:7b:37:39:
50:d4:0b:fb:b1:76:33:5f:f5:bb:bd:16:46:42:9a:8e:b2:59:
dc:a0:cc:e0:b6:9c:f5:cb:53:40:0f:9d:7e:ed:4a:90:97:69:
dc:e0:98:53:a4:a6:b0:57:0b:7e:a4:30:fc:16:4c:79:c6:04:
a8:2e:5d:d8:63:21:20:77:82:8f:9f:bf:bc:31:77:6b:63:a8:
0f:15:73:4b:e5:27:a2:f8:30:22:eb:f6:ae:86:f3:12:0b:75:
51:c2:99:24:8f:9e:5d:a4:78:d9:3e:8b:4b:73:82:e5:db:97:
70:31:b1:ab:55:5b:5f:ab:8a:ff:7a:6c:09:02:dd:79:66:92:
0f:0c:8a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:50:18 2024 by rpki-client on console-fra.rpki-client.org