Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0234CE0FAE411EEB0C90D45017001B1.roa
File: D0234CE0FAE411EEB0C90D45017001B1.roa (raw, json)
Hash identifier: q3PSTq3i2kRulQVmCA8r1lqp0qDc/FlsmSrv/VCr468=
Subject key identifier: C9:19:00:2D:CD:54:16:9A:B3:61:FB:82:E8:A2:4E:AD:E6:FD:07:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC66
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0234CE0FAE411EEB0C90D45017001B1.roa
Signing time: Mon 15 Apr 2024 04:58:35 +0000
ROA not before: Mon 15 Apr 2024 04:58:31 +0000
ROA not after: Thu 25 Apr 2024 04:58:31 +0000
asID: 212238
IP address blocks: 154.94.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44134 (0xac66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 04:58:31 2024 GMT
Not After : Apr 25 04:58:31 2024 GMT
Subject: CN=661cb3fb-00da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ee:e1:cf:67:1a:16:35:19:44:e8:f5:e0:70:
0c:b9:28:04:1a:18:ab:db:7d:78:f1:d1:e1:79:cb:
9c:a9:6e:3a:ba:f5:b7:ec:b2:1c:3f:91:41:7c:b1:
1c:55:e3:ad:b2:c5:30:59:4f:db:fd:05:7e:0d:e6:
d8:0e:dd:3b:21:e4:fd:fc:e1:63:90:f8:b8:1e:11:
74:4c:4b:20:3a:6b:27:9c:aa:9b:55:54:ca:65:05:
29:dc:1d:2c:aa:0c:94:2c:1d:90:e8:61:71:74:55:
66:73:3c:2a:6b:46:1b:ee:8e:0b:5e:ab:57:3d:10:
68:79:bf:24:c1:ec:4d:94:5e:c0:a2:25:aa:00:a8:
4e:cd:bc:cb:4a:f4:a8:fc:66:0e:4c:67:7f:3b:01:
30:4b:95:6a:ff:51:95:f2:49:ab:5c:4b:c5:07:b2:
e8:da:00:84:02:1e:e6:7a:de:14:1c:27:88:27:81:
74:08:e0:65:03:b8:95:e0:0c:73:b7:a5:31:dd:1c:
14:c1:74:ed:29:9a:2f:49:f6:d1:5a:74:b3:e2:cf:
c4:cc:2d:22:97:6f:f7:bc:7a:c9:b3:72:b5:7e:81:
f6:7b:12:8d:64:f5:6d:73:3e:95:64:8e:5b:8d:04:
b8:39:17:ab:61:82:ad:b0:ba:03:8a:d0:85:00:c0:
34:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:19:00:2D:CD:54:16:9A:B3:61:FB:82:E8:A2:4E:AD:E6:FD:07:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0234CE0FAE411EEB0C90D45017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.39.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:22:51:c5:d4:3e:7e:d1:47:1b:91:10:77:d2:67:81:ce:68:
0f:aa:f1:98:c8:31:11:ed:fb:d8:53:0e:a4:ed:18:49:dd:04:
fd:b4:97:25:59:92:28:bc:c5:43:4e:79:f1:7c:f0:d8:73:b6:
75:d7:00:6e:d4:a3:f5:a1:16:92:a4:94:67:11:dd:4b:e0:33:
6e:ce:78:83:17:e8:e6:0f:ca:af:f5:f5:c2:31:80:c1:14:e2:
1d:eb:3a:86:9a:3f:c1:31:d5:b5:c9:05:cb:30:cd:1b:3d:53:
70:24:bc:fb:7b:32:f9:0f:01:32:7e:17:36:2d:04:81:75:f8:
95:0c:4c:8c:7e:a6:c2:34:45:f8:b7:a2:fa:8c:14:5a:89:09:
ed:89:bf:20:a5:b6:73:4b:cf:4a:dd:fc:9e:fe:e0:80:8f:39:
e9:4a:f6:a0:64:97:ec:20:44:65:99:e9:1b:ff:b4:55:38:4c:
f0:7e:f1:96:78:a2:42:55:3f:7d:8c:92:6e:39:80:47:92:3e:
72:38:4a:f9:2c:bf:b8:1b:f7:b7:57:31:d7:86:a8:3d:db:92:
65:b4:b7:fb:cf:b0:39:14:ff:0f:bd:8a:d8:8d:fc:97:fe:9e:
c8:c9:38:3a:e0:5b:20:76:3f:54:93:42:84:ae:a4:be:d9:f2:
fb:bf:0a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:50:18 2024 by rpki-client on console-fra.rpki-client.org