Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4F1027EE47611EE96F07A8A775412E6.roa
File: C4F1027EE47611EE96F07A8A775412E6.roa (raw, json)
Hash identifier: wemuO3JSHW29Igz0sHxKW4aNsEw9w7CAcNQh/VEYp5U=
Subject key identifier: C0:B8:53:4A:96:C3:21:B2:DE:69:33:F0:82:62:65:6C:FC:80:22:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A25D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4F1027EE47611EE96F07A8A775412E6.roa
Signing time: Sun 17 Mar 2024 15:55:26 +0000
ROA not before: Sun 17 Mar 2024 15:55:22 +0000
ROA not after: Tue 30 Apr 2024 15:55:22 +0000
asID: 63139
IP address blocks: 154.94.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41565 (0xa25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 15:55:22 2024 GMT
Not After : Apr 30 15:55:22 2024 GMT
Subject: CN=65f7126e-6c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:f7:26:b3:d4:67:6b:34:b0:15:4c:95:df:
b1:84:40:be:35:36:cd:fa:84:25:bf:fe:92:d1:8c:
e6:bb:b9:12:92:1b:46:50:5d:03:b3:fe:32:bc:e0:
85:a9:e9:41:62:d1:ee:6b:49:ee:eb:75:4f:b1:1f:
d8:a5:48:8d:cf:bd:f2:e4:54:90:08:6e:d0:8e:ca:
11:86:06:f0:e7:1d:5e:c8:dd:d6:6b:50:05:43:1c:
00:98:e3:61:7b:37:d6:aa:15:4e:14:f7:a9:52:a7:
64:d5:f9:85:59:8f:de:6d:39:b8:22:ca:ef:0d:e3:
cf:f9:43:66:fc:95:57:0c:9b:ff:d7:33:34:03:d7:
ec:da:0a:ef:4f:25:f9:5f:1e:d1:fc:d5:3a:7f:a1:
8c:06:0b:6b:93:f7:a9:7a:8c:2f:2c:a3:bb:2f:7b:
0e:4c:65:57:a8:93:8a:24:d3:b5:58:d5:bc:5a:59:
37:f8:b7:70:f3:7c:2b:79:52:a4:fa:16:03:9a:8f:
51:be:ab:b8:82:9d:23:82:49:c9:8a:48:a8:f9:c0:
f5:2c:a7:2f:de:bb:eb:e1:0c:b0:8d:5e:c4:d6:c1:
31:73:a8:25:18:0c:4c:eb:ba:ac:29:4f:af:af:ba:
65:e9:3b:c4:f2:66:4e:79:a0:68:f9:cf:18:48:bf:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B8:53:4A:96:C3:21:B2:DE:69:33:F0:82:62:65:6C:FC:80:22:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4F1027EE47611EE96F07A8A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.100.0/24
Signature Algorithm: sha256WithRSAEncryption
36:4d:68:6b:ff:5d:f9:e9:7d:ee:5e:de:c4:21:7b:89:66:34:
5a:1d:ef:e1:25:df:7f:14:3f:d7:4f:62:16:22:52:09:9a:d1:
c4:05:65:41:03:84:cf:ae:21:51:dd:ae:28:6b:3b:f9:b5:c9:
01:cd:1b:d9:0a:f5:85:ef:b2:91:fd:1d:05:fd:77:2a:f6:04:
59:f7:dd:12:e7:a7:88:a2:01:2f:d8:ff:8e:d4:b8:51:08:0e:
a5:d5:7a:ec:5e:69:db:16:3b:b3:9c:4f:c3:be:a4:89:51:74:
6c:93:f9:68:58:c4:ef:30:ca:5b:fa:34:17:50:16:b1:9d:c6:
52:bd:56:17:1b:bb:df:e2:e3:90:5c:05:a6:dc:0d:01:73:ce:
9e:e6:a1:4b:36:15:6e:83:2c:31:7a:07:b3:3e:a9:9a:29:8b:
d8:b0:0c:28:0b:8e:a5:fe:00:4e:3b:1b:cf:ec:75:ec:aa:7a:
04:90:ad:74:5d:fb:c2:7b:f3:dc:58:cb:fd:91:04:50:a6:a4:
1d:14:c7:e8:c4:74:01:e5:69:98:c3:e5:4e:0f:75:8b:22:92:
ff:27:e0:fa:6d:db:60:ee:c0:31:e8:17:5d:8c:bb:48:fd:3c:
e5:c8:5d:ad:be:a0:d1:47:c2:76:5d:48:9e:09:63:2d:38:59:
ed:c2:c9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:40:37 2024 by rpki-client on console-fra.rpki-client.org