Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9406726FAE511EEBDD2CC4B017001B1.roa
File: D9406726FAE511EEBDD2CC4B017001B1.roa (raw, json)
Hash identifier: CpkX+Tjp4pl05xKVX5uxjGSRbXGoI7uwjbparLj2CF0=
Subject key identifier: F6:FD:D8:51:27:95:1B:30:4D:33:FE:01:AD:6D:26:96:DE:47:CA:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC72
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9406726FAE511EEBDD2CC4B017001B1.roa
Signing time: Mon 15 Apr 2024 05:05:59 +0000
ROA not before: Mon 15 Apr 2024 05:05:56 +0000
ROA not after: Thu 25 Apr 2024 05:05:56 +0000
asID: 5065
IP address blocks: 154.94.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44146 (0xac72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 05:05:56 2024 GMT
Not After : Apr 25 05:05:56 2024 GMT
Subject: CN=661cb5b7-a39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:e6:ea:cd:82:d6:71:fa:e7:68:b6:8d:3f:
af:6f:5c:1d:a7:e8:92:fc:8a:68:81:01:0c:49:6c:
d0:2b:dd:f6:a1:6e:bd:ee:c4:b1:a6:66:5e:f1:b6:
57:d0:1b:0f:81:9b:e4:45:0f:4c:d2:6f:2d:2f:37:
1a:8a:c7:69:3e:34:f5:5a:e6:e9:06:4a:f1:01:42:
53:06:4d:e0:7a:30:45:46:be:9b:1c:e8:31:b0:95:
10:a8:a7:11:81:d5:d9:9c:21:88:6a:e5:89:9d:10:
69:69:04:d7:a7:88:74:0f:01:78:3f:38:02:02:e4:
56:6e:6e:31:7d:c8:99:25:0c:e9:14:bf:ad:c2:96:
99:c0:9d:71:33:10:41:7c:fc:1a:8a:36:0e:29:01:
65:f8:4f:38:58:c8:c4:c6:2e:d1:1e:70:7a:11:8b:
c9:db:c9:f1:89:d2:12:22:1f:83:96:90:c9:55:f2:
1f:32:1a:5d:c5:c4:f5:64:55:f3:de:5c:18:d0:ab:
84:b0:fb:98:a4:91:de:a7:db:c1:15:c8:12:d8:b3:
3a:29:b9:42:33:c2:6e:56:bc:8e:91:42:a5:8d:ae:
30:78:58:37:33:b6:fc:62:55:78:16:27:62:d4:d5:
c1:38:7d:27:30:ec:20:15:f4:c0:27:28:0e:fc:07:
70:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FD:D8:51:27:95:1B:30:4D:33:FE:01:AD:6D:26:96:DE:47:CA:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9406726FAE511EEBDD2CC4B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.32.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:ae:e3:e3:41:6b:f1:cb:c5:e2:99:b1:5d:74:c0:22:a0:2b:
9f:ae:14:80:76:bb:e0:a7:55:b4:d8:ba:7b:5a:46:7b:7c:1b:
52:80:bf:69:8a:f3:ae:11:05:65:26:f7:46:2c:48:d3:08:6f:
0f:e2:ee:09:18:bf:3c:ac:85:73:dc:a8:f3:71:a2:43:70:af:
6b:0e:23:7f:85:40:6b:fd:11:a8:48:05:4d:7c:39:dc:e9:12:
78:09:12:08:d0:65:7a:10:41:88:b9:1a:f7:cf:df:5a:c5:f9:
1d:7d:de:96:45:9e:0f:ed:6e:ed:f0:8f:5e:80:d8:cf:41:21:
ad:ea:35:73:17:80:2d:93:b8:42:f7:c9:0c:b4:13:97:c1:cc:
35:1a:db:72:5d:46:69:1d:40:07:52:67:b5:6e:64:e7:f5:cf:
c4:d3:62:f3:d5:4b:30:dc:1d:61:16:42:aa:a9:97:6c:34:67:
46:02:a2:14:38:a7:9b:a1:7e:29:6b:97:93:f3:df:95:a1:19:
2a:c8:38:2c:0d:31:c0:1d:7a:9a:51:48:40:49:c8:a6:2b:3f:
90:58:18:cb:83:00:34:32:0d:e0:ab:8e:a6:e5:59:d4:ae:7a:
52:6e:d7:35:bb:89:dc:24:bc:11:09:43:cf:b0:a6:b8:de:31:
4c:00:88:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 10:41:11 2024 by rpki-client on console-ams.rpki-client.org