Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC47A99A9F9511EF85AD0E58762E951A.roa
File: BC47A99A9F9511EF85AD0E58762E951A.roa (raw, json)
Hash identifier: VQHOUmDZDW9YW5PihwOzq/zikyni0APj6ev555lkZI0=
Subject key identifier: FB:C3:AA:8B:59:31:3F:5F:00:FB:2D:8A:D6:48:55:94:AE:58:8E:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010BA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC47A99A9F9511EF85AD0E58762E951A.roa
Signing time: Sun 10 Nov 2024 18:58:13 +0000
ROA not before: Sun 10 Nov 2024 18:58:09 +0000
ROA not after: Thu 21 Nov 2024 18:58:09 +0000
asID: 63139
IP address blocks: 154.223.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68518 (0x10ba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 10 18:58:09 2024 GMT
Not After : Nov 21 18:58:09 2024 GMT
Subject: CN=67310245-15b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:98:e6:80:a0:59:2f:1d:8d:92:1f:3a:ec:
ae:d5:25:b0:1b:fe:8b:52:92:08:87:c2:ff:c2:f0:
45:1c:49:7d:e2:70:74:0f:3d:01:30:5b:19:64:60:
b0:9e:85:56:b1:df:9d:d6:85:e5:c6:d1:42:6d:e6:
37:90:94:bf:6f:0d:fd:33:f7:a8:dd:c9:32:cd:52:
73:cc:23:db:c6:82:7d:74:01:8c:bf:1b:59:68:00:
cb:2f:e5:0c:68:a0:53:58:77:0a:af:4d:97:94:49:
f1:d7:63:00:2c:a5:4f:93:ae:28:72:6d:91:1e:ef:
d4:71:e8:3e:f1:bd:dd:ce:8e:18:18:ce:71:6d:b6:
e4:2c:d3:b6:db:54:8c:99:52:8b:5f:ef:c1:c7:59:
23:33:a9:f8:0f:e4:32:58:66:26:83:93:84:6f:b2:
26:bc:41:ae:74:a2:de:d4:80:f0:0d:e5:de:26:bf:
db:af:f9:e6:69:0d:b5:d4:e6:eb:e1:aa:1d:a7:d6:
74:53:ad:04:f4:f2:cc:cd:2f:06:bd:be:1a:d9:96:
35:b1:26:73:7d:1b:76:3e:16:1e:b7:ee:ea:f5:7d:
d3:57:de:0a:3b:51:3c:7c:e8:89:db:09:62:c0:0a:
5d:f3:2c:81:08:cc:a2:95:df:23:48:f4:04:f8:d3:
5a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C3:AA:8B:59:31:3F:5F:00:FB:2D:8A:D6:48:55:94:AE:58:8E:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC47A99A9F9511EF85AD0E58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.39.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:84:80:7e:3c:bc:c2:0f:02:c0:12:a2:e7:b2:dd:2d:b9:6b:
a3:bd:d1:1f:39:8a:73:58:7f:ad:db:82:ab:9b:26:42:68:74:
31:07:be:0b:d6:f3:4e:82:cc:36:c4:3d:2c:8d:af:ef:e4:44:
03:31:a1:b9:6d:97:87:ed:f3:91:4a:34:0d:03:d5:d1:9f:74:
05:b1:92:85:c2:ab:bb:d7:99:5f:15:31:82:79:c2:18:aa:1f:
34:8d:97:a0:e8:d9:8a:0a:23:7d:2c:b0:aa:9c:fc:22:70:15:
c8:93:ae:31:1d:af:9e:a3:f8:c3:e1:ca:b5:2f:d0:6b:a2:54:
52:84:a4:37:c0:21:91:f2:73:f8:6f:3e:66:6d:94:a9:9a:11:
07:94:57:9a:b6:2a:22:c4:72:63:3a:c4:6d:7f:4e:57:78:86:
54:bc:50:e6:5d:5a:d9:5f:d6:9d:e1:23:d8:12:24:99:f5:e3:
5e:8d:1d:66:1c:ce:90:dd:0b:7f:ae:ed:da:91:a0:d2:c0:b6:
b7:54:16:6c:18:a9:4b:46:3c:ef:5b:5d:d5:6f:9d:b2:af:4d:
4e:a4:9e:d5:92:7e:f8:5b:d1:21:31:15:75:5e:ad:18:e7:c5:
bb:7f:9d:e2:c5:bd:c0:85:50:19:85:f8:48:bc:e7:03:58:f4:
0f:aa:fa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:47:23 2024 by rpki-client on console-fra.rpki-client.org