Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9294186FADD11EE82C16D0D017001B1.roa
File: B9294186FADD11EE82C16D0D017001B1.roa (raw, json)
Hash identifier: wV2A7j8B21OXlxxLHRxA1ch8KMkxGtshEltWfwbk720=
Subject key identifier: 04:62:00:0E:1F:44:6D:82:1A:4F:94:D0:37:36:8E:18:C9:97:87:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC39
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9294186FADD11EE82C16D0D017001B1.roa
Signing time: Mon 15 Apr 2024 04:07:50 +0000
ROA not before: Mon 15 Apr 2024 04:07:46 +0000
ROA not after: Thu 25 Apr 2024 04:07:46 +0000
asID: 39600
IP address blocks: 154.94.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44089 (0xac39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 04:07:46 2024 GMT
Not After : Apr 25 04:07:46 2024 GMT
Subject: CN=661ca816-3e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:91:00:14:a8:9f:96:8a:ca:34:ca:f9:64:b6:
65:b3:78:fa:c4:c5:61:c2:c3:5c:10:c0:33:74:0f:
8a:4c:58:67:fa:d5:ee:d9:9d:85:e4:65:c1:db:4f:
d5:f5:8e:d1:f3:b7:dd:59:25:9a:0f:31:50:1a:68:
13:32:9b:f7:06:aa:ca:7d:d6:93:52:72:d0:7c:8b:
33:c0:47:a5:1b:c2:cc:c0:b0:99:7a:05:fe:59:f6:
b6:22:7d:92:70:98:99:43:ce:cd:7a:2f:f2:df:e3:
87:f0:a7:62:49:02:0f:8d:ce:fd:f6:36:ae:72:4d:
23:af:bf:c6:0e:87:b6:e7:c8:9f:ae:6f:b7:69:ea:
58:78:88:22:14:9c:6f:e8:48:0e:d9:95:19:78:72:
c0:10:ca:54:e6:a0:a3:18:c7:99:f4:6e:9c:91:01:
9c:87:f1:5c:a5:4d:6e:7c:8d:b6:77:48:9a:40:80:
49:8b:26:11:47:0e:a3:09:44:9a:a6:7f:9c:d8:a1:
95:ea:a2:6c:ff:19:d1:69:c0:e4:7d:a7:87:e5:3d:
c4:e4:dc:5c:ba:20:70:b0:02:47:69:13:da:c9:c5:
ab:e1:6d:96:98:6c:35:e7:34:7a:e8:f7:46:c8:cf:
72:a8:9b:ed:0c:fb:a2:9e:b1:ca:bd:b4:d2:9b:67:
07:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:62:00:0E:1F:44:6D:82:1A:4F:94:D0:37:36:8E:18:C9:97:87:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9294186FADD11EE82C16D0D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.62.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:66:c1:2d:98:f0:16:c4:8c:cf:5f:56:bd:43:f8:6f:3d:2a:
f6:9b:6c:34:a8:b1:56:ca:98:ae:78:be:11:61:a1:cb:e5:89:
7c:5d:91:31:e5:51:c1:3f:d6:74:b9:bf:21:d7:40:29:b3:11:
d4:a4:eb:65:94:60:04:96:42:76:a2:da:18:6f:b3:60:ca:5c:
e0:d7:09:b6:25:2d:fe:cc:a0:31:e6:eb:f0:97:cf:67:fc:b3:
1d:5b:80:5a:ad:c4:5e:e7:13:f4:1e:5b:95:3e:57:10:31:3b:
17:ca:72:ef:7d:08:5d:f3:8d:63:65:4e:99:5f:a4:a2:b2:e6:
99:3b:0c:55:f6:7c:e6:59:f5:14:12:ec:e1:6e:d9:50:cf:45:
67:0d:bd:81:f8:db:14:b6:4d:19:37:d2:1e:ab:9f:a5:94:48:
f7:ee:41:0a:37:ba:b6:ce:a0:8c:c7:d2:80:67:41:87:9c:ef:
1b:87:d1:e9:94:20:57:c8:85:54:90:c0:22:93:9b:fd:e3:0e:
0e:aa:04:ab:f7:95:1a:c1:a9:be:6b:f6:02:ef:71:c2:77:17:
cd:c3:42:bf:9f:0d:04:55:e2:5b:bb:60:28:f7:5a:c0:4d:b3:
3d:bf:76:34:81:11:eb:12:b9:2a:c1:8f:4b:0b:75:7b:db:92:
90:9c:b0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 10:41:11 2024 by rpki-client on console-ams.rpki-client.org