Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCFAF6C6E0D511EEA3A0D18C775412E6.roa
File: DCFAF6C6E0D511EEA3A0D18C775412E6.roa (raw, json)
Hash identifier: nlAMnr1hlHMuJoxL/rqG5hDcf+QF6y59wA6c+cvp844=
Subject key identifier: 7B:65:CF:F6:09:F3:94:A6:1F:63:0A:BB:0F:2C:8C:71:85:8F:F1:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A0F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCFAF6C6E0D511EEA3A0D18C775412E6.roa
Signing time: Wed 13 Mar 2024 01:06:03 +0000
ROA not before: Wed 13 Mar 2024 01:06:00 +0000
ROA not after: Tue 30 Apr 2024 01:06:00 +0000
asID: 63139
IP address blocks: 154.94.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41209 (0xa0f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 13 01:06:00 2024 GMT
Not After : Apr 30 01:06:00 2024 GMT
Subject: CN=65f0fbfb-b872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:b1:2b:f3:65:dd:e2:4d:af:31:51:da:2d:
59:ec:d2:ed:d3:1b:79:66:e3:f5:ed:d0:9f:e2:61:
53:1c:6f:2e:23:c1:c4:4e:c8:82:e6:2c:ca:c7:76:
e8:59:de:c9:e9:47:44:2d:65:77:74:c0:e9:2c:50:
af:19:9c:7d:c8:f5:c3:ad:23:0c:f4:e8:28:87:21:
e7:46:18:50:6d:8b:23:47:d6:77:0a:d2:b7:5f:23:
e5:f8:66:af:df:d9:36:83:79:8d:a2:9e:1d:de:49:
76:2c:7c:f2:1a:cc:4f:68:c0:ae:9d:f3:a0:23:ac:
eb:8e:ff:cd:12:da:5f:27:20:9d:bc:e4:5b:8c:48:
5f:b9:e8:6b:77:cc:14:b6:e0:84:cd:d4:74:37:10:
fa:fd:44:17:ff:7f:f9:17:69:46:87:44:6e:fc:87:
4c:b3:89:c9:7b:96:03:82:48:8b:91:e6:59:bc:df:
be:54:61:46:a0:11:24:a3:95:e0:41:d4:78:89:fd:
23:a5:9e:a6:98:07:2d:13:25:b2:24:8d:bf:3f:d3:
24:1d:0a:b5:e7:0d:91:34:bb:f8:36:30:f5:7c:e0:
f6:8e:c3:c2:9b:b5:52:6c:b5:a9:c2:df:8f:e8:5d:
ed:28:46:ca:97:20:8a:ae:dc:63:43:89:48:46:e0:
c3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:65:CF:F6:09:F3:94:A6:1F:63:0A:BB:0F:2C:8C:71:85:8F:F1:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCFAF6C6E0D511EEA3A0D18C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.117.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:4e:22:47:b4:f6:a3:90:8e:77:ee:55:9d:73:3e:66:80:c3:
07:b5:34:be:b5:95:15:70:b4:41:d3:3c:c4:a6:2d:85:ed:32:
db:c5:7d:15:99:a3:4d:95:a4:c4:c6:47:dc:0a:2b:a4:08:05:
e3:37:85:83:02:d6:df:cd:48:e6:50:b8:0f:28:39:b0:a4:9c:
6b:27:c0:79:2b:29:ca:38:0b:d6:5a:b3:ec:15:0e:bc:33:d2:
e8:7d:e5:45:ad:32:d1:7f:f1:ee:e3:8b:7e:76:c4:53:9c:26:
33:15:8b:f5:ca:f7:98:ca:3c:8b:e6:12:9c:8d:f9:08:fc:2e:
fe:d6:32:02:1f:47:eb:47:92:cd:0f:e3:c6:9a:81:b4:2b:67:
dc:c4:da:22:26:8f:f6:11:97:aa:db:16:de:7c:ff:3c:6f:27:
18:4d:c4:0c:8c:d3:db:dd:da:66:90:f1:82:52:40:1c:a5:e7:
bd:27:a0:7b:d3:fe:5e:ce:df:5f:7a:88:78:f3:ef:46:d5:12:
34:5d:59:b7:d0:42:aa:be:23:c5:d8:2f:e9:25:25:f3:2e:b7:
5e:58:0b:1e:79:9f:04:96:c5:f7:8c:ba:73:93:95:ef:ff:46:
c1:5c:3e:07:63:e0:59:2d:c4:c5:75:38:2e:08:37:4b:9f:16:
42:a4:07:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 12:15:42 2024 by rpki-client on console-fra.rpki-client.org