Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADA32A96134E11EFBB60C042017001B1.roa
File: ADA32A96134E11EFBB60C042017001B1.roa (raw, json)
Hash identifier: QCKvSclKsJlFKqRsrL2uNYPDT0o3BgqxzNMK9GHoQCQ=
Subject key identifier: B6:88:B6:EA:B1:60:14:B0:87:DC:C3:90:17:89:DD:03:36:FD:77:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B810
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADA32A96134E11EFBB60C042017001B1.roa
Signing time: Thu 16 May 2024 06:36:51 +0000
ROA not before: Thu 16 May 2024 06:36:48 +0000
ROA not after: Fri 31 May 2024 06:36:48 +0000
asID: 44559
IP address blocks: 154.203.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47120 (0xb810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 16 06:36:48 2024 GMT
Not After : May 31 06:36:48 2024 GMT
Subject: CN=6645a983-f26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bb:19:70:e9:80:6c:cc:a5:a7:aa:f6:c5:72:
2a:9c:b6:dc:8a:93:ab:0b:5f:f4:69:7a:1c:21:c9:
ad:e6:b2:10:02:46:72:8e:01:e8:2b:3b:06:5f:12:
f8:3e:99:f6:03:79:d3:f9:bb:d9:55:a5:34:09:9b:
5a:d1:e8:7f:8a:18:1c:16:49:6f:10:79:d8:91:8e:
73:74:c2:67:fa:5f:63:16:bb:64:9d:0b:ba:80:b3:
0f:25:b4:77:93:35:42:19:5d:41:30:51:18:ed:d9:
23:19:36:e1:f1:56:5c:e4:97:be:fa:aa:f6:ac:f1:
ef:27:cd:96:a2:06:40:40:f5:50:a1:e6:0d:63:52:
3e:34:dd:b4:5b:e1:ec:63:6f:8e:f0:3c:d6:59:7f:
6d:f6:67:40:a0:a0:9a:36:21:b7:58:72:57:0f:ba:
4a:46:dc:05:43:79:ed:6a:0e:b7:c8:8c:6f:5a:4c:
51:7d:8e:1f:5f:8e:ab:c9:74:4a:63:bf:45:a3:c0:
04:a7:16:fc:25:41:8a:77:65:a0:e3:37:e3:a6:32:
f9:14:05:a2:03:62:33:04:0a:e0:bd:bb:a0:4d:b0:
46:a4:61:92:3a:ba:0c:00:00:ee:40:e3:74:73:8e:
af:e1:73:e9:69:e2:d5:b2:8e:50:45:d1:90:4c:99:
2c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:88:B6:EA:B1:60:14:B0:87:DC:C3:90:17:89:DD:03:36:FD:77:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADA32A96134E11EFBB60C042017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.192.0/19
Signature Algorithm: sha256WithRSAEncryption
6d:14:60:8c:c6:d6:b8:fb:b4:01:3d:f3:83:5e:ed:6a:3c:4b:
35:24:c5:3a:a8:1d:9f:42:62:74:01:a9:36:ce:d3:a1:43:d4:
2f:f5:27:b2:02:80:97:e0:54:46:bd:3b:7c:7f:a8:9d:17:bb:
64:ad:1d:ec:d7:c5:27:85:59:e4:25:84:ac:9c:46:d1:a4:19:
17:00:5b:21:3c:2b:1a:91:e6:55:73:0e:50:5d:2e:04:91:d2:
ef:b1:0c:f2:b4:8a:e7:da:8b:05:ae:8c:40:c9:a8:7c:b3:c7:
c0:2c:b5:8d:44:67:8e:1c:24:f0:4e:71:fe:8a:42:49:53:33:
78:82:10:32:37:90:1b:50:e7:81:1c:00:27:fc:f9:82:73:33:
81:9f:a1:1b:af:9f:e3:ce:a0:59:86:9c:b5:05:71:93:49:8f:
c9:fa:d9:36:83:38:3a:cd:f1:bf:d1:8b:d9:66:6e:d4:f0:b7:
24:01:26:2e:09:8f:28:e1:db:a1:14:2f:57:fa:4e:38:49:af:
d0:cf:d3:9d:61:08:f8:fb:53:23:6a:a8:e9:32:15:77:b1:a6:
31:c3:15:f2:55:fb:20:84:13:c3:c6:0b:02:2a:b1:54:a9:98:
3c:1d:f5:e3:69:d0:56:1c:c0:8e:d2:36:77:0a:7b:96:de:7d:
17:f6:0e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:43:28 2024 by rpki-client on console-ams.rpki-client.org