Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D48B191CE47211EE9CBD556F775412E6.roa
File: D48B191CE47211EE9CBD556F775412E6.roa (raw, json)
Hash identifier: sVPK3IKkWGl72yyUXVc5gLMazGUaI16p+znKtBn1u48=
Subject key identifier: 84:7B:79:0E:1A:B3:52:72:8C:6A:A4:4B:17:4E:36:50:02:3C:4C:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A233
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D48B191CE47211EE9CBD556F775412E6.roa
Signing time: Sun 17 Mar 2024 15:27:14 +0000
ROA not before: Sun 17 Mar 2024 15:27:10 +0000
ROA not after: Tue 30 Apr 2024 15:27:10 +0000
asID: 63139
IP address blocks: 154.94.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41523 (0xa233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 15:27:10 2024 GMT
Not After : Apr 30 15:27:10 2024 GMT
Subject: CN=65f70bd2-ce30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f4:f0:01:dd:2b:be:0f:a8:6a:a1:36:af:f9:
3c:83:c2:79:51:bb:ff:87:f1:9b:e8:e6:b5:48:e2:
b5:31:19:ae:4f:2a:de:d6:57:a5:1a:83:1c:56:9f:
58:6b:3a:7e:77:b1:f8:7a:04:f8:42:bc:4d:f0:54:
cb:61:a3:d9:04:bd:a5:ed:fa:25:f5:3a:a4:f1:78:
4f:8b:50:37:24:14:a6:eb:a0:d9:28:79:e8:76:71:
31:f9:dc:c1:fb:9d:ae:32:d4:2c:4d:cb:a8:77:9e:
f8:e4:54:b6:18:84:5f:bd:b9:bb:02:ad:f0:a0:2e:
97:ba:a6:2d:06:21:4e:99:f6:a7:27:ea:9d:32:40:
ea:7d:8c:4f:06:83:9f:de:0f:89:5f:5b:c7:2f:03:
b3:1c:d3:31:e5:5e:b9:5c:57:f3:de:4c:98:18:e2:
45:38:2d:06:07:06:90:ae:68:4d:fe:40:ee:97:4c:
6f:94:f1:cb:c7:0d:3e:ab:82:a6:a5:b4:72:0d:47:
43:42:8e:97:9b:48:dc:dd:8f:11:e7:c6:01:46:e2:
c6:62:4f:99:03:b2:30:81:97:da:1e:51:6e:13:73:
d7:a0:6a:5c:c2:40:cf:f0:93:89:1d:a3:b3:fc:18:
07:90:8b:3e:72:a2:40:b9:4f:1c:fa:f7:3f:58:60:
de:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7B:79:0E:1A:B3:52:72:8C:6A:A4:4B:17:4E:36:50:02:3C:4C:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D48B191CE47211EE9CBD556F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.71.0/24
Signature Algorithm: sha256WithRSAEncryption
08:8e:b9:5a:f9:c1:d8:64:75:9a:8b:32:60:5f:ca:30:a4:7a:
8d:e4:1c:66:4a:2b:b4:87:6e:3b:e4:04:8d:e3:f8:27:01:80:
04:c9:e5:96:d1:0c:5a:2f:ba:9d:34:d5:3f:65:c8:2d:7a:17:
32:83:86:e9:5a:e5:5e:d4:e8:ac:dc:8a:d8:7d:24:19:7c:c0:
6a:e5:11:ba:4d:47:59:7e:87:66:65:43:f7:1b:98:91:75:ee:
28:7a:74:02:cf:ee:b6:90:a2:92:5d:fa:e7:3b:07:64:1e:bc:
8a:2c:a4:eb:f0:6c:b4:bb:85:59:c0:a6:60:f2:92:47:dc:7f:
e1:d2:6d:8e:ea:54:5d:e2:be:84:99:f5:b9:fb:34:5e:e1:a6:
64:fe:c9:54:fc:c7:e9:3e:9e:78:9f:26:d3:b7:97:9d:b3:dd:
56:28:ef:3b:87:75:81:42:00:7b:cf:55:e9:ac:05:d1:30:1c:
d4:58:26:4f:1a:8b:b5:ef:92:9a:74:56:a1:c1:8d:a0:4b:d6:
e3:24:de:af:da:32:bc:f0:cf:00:c3:10:b0:68:6d:bd:af:90:
e1:f9:9a:a1:53:07:f6:79:3b:91:b2:cc:82:da:4d:6c:8d:08:
29:d2:c7:aa:0c:ec:68:a5:4f:b9:db:48:5f:c3:0a:71:d0:d2:
38:d3:76:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:03:19 2024 by rpki-client on console-ams.rpki-client.org