Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E42A433CE47411EEAA57697C775412E6.roa
File: E42A433CE47411EEAA57697C775412E6.roa (raw, json)
Hash identifier: sccS9sGTlEgxPR0yhspoCtsUaJKHLP5pYnmfoUCvlS0=
Subject key identifier: 17:D9:D7:44:DA:7C:B6:FD:28:8E:16:E2:71:9A:8A:EE:B1:E9:E1:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A249
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E42A433CE47411EEAA57697C775412E6.roa
Signing time: Sun 17 Mar 2024 15:41:59 +0000
ROA not before: Sun 17 Mar 2024 15:41:56 +0000
ROA not after: Tue 30 Apr 2024 15:41:56 +0000
asID: 63139
IP address blocks: 154.94.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41545 (0xa249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 15:41:56 2024 GMT
Not After : Apr 30 15:41:56 2024 GMT
Subject: CN=65f70f47-9834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:95:f8:bb:89:e8:75:39:41:8c:ce:78:fb:b1:
7b:23:69:dc:6b:40:3b:27:9e:f9:0b:ee:82:82:38:
0f:9e:34:a0:93:c1:58:fb:69:6d:1b:e9:49:12:dd:
97:c4:85:ff:33:54:b8:21:a4:13:d1:2a:fe:57:e1:
79:d1:25:3e:7d:04:4f:66:f2:07:a7:ba:5c:c3:62:
a7:93:60:3a:ac:f1:fc:2c:c7:7d:82:ce:50:17:01:
ba:86:03:d8:cc:50:d6:14:8a:38:2c:e8:92:5a:48:
3a:83:86:b0:77:30:32:2e:a6:e0:10:92:6a:73:e4:
5a:61:d1:cb:cd:17:23:54:4c:e6:b9:c7:62:61:ed:
09:91:33:e4:b5:dc:88:ad:35:34:c6:04:72:97:33:
88:ad:84:e1:5e:37:86:4a:93:85:fa:e4:be:b3:da:
1c:93:78:36:75:86:02:0e:92:0c:cd:8a:26:df:b6:
d4:dc:5c:fd:ab:65:2f:c0:53:79:08:41:86:84:7e:
61:aa:dd:3c:cb:59:d3:23:37:65:42:55:d5:5e:80:
a2:80:9f:11:ee:19:6d:b7:5d:71:c7:b4:f5:76:cc:
41:a5:fb:72:2a:4e:b7:93:bc:a1:4a:7f:86:63:d5:
2d:0e:b4:1a:33:d4:c0:e0:9c:84:f3:ad:61:45:13:
38:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D9:D7:44:DA:7C:B6:FD:28:8E:16:E2:71:9A:8A:EE:B1:E9:E1:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E42A433CE47411EEAA57697C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.110.0/24
Signature Algorithm: sha256WithRSAEncryption
13:af:9d:fa:f0:f0:4a:b8:aa:77:97:9f:01:ae:c2:aa:9c:01:
0e:c0:b4:47:c3:d1:26:63:79:87:7d:8e:73:7a:00:7b:19:8d:
e1:da:18:a8:b6:96:01:b0:83:7a:0e:13:0b:37:47:47:45:f4:
55:b0:16:1a:56:93:3a:8d:b2:c3:3a:d4:34:1d:b5:6a:f8:28:
cf:39:54:60:b9:ee:ef:17:2c:37:a6:e0:77:57:b7:24:98:41:
4e:b2:72:31:07:01:17:af:be:1f:dd:b7:08:87:5a:94:51:b3:
de:3a:9d:ad:99:bf:86:a2:ac:b7:86:1c:53:89:73:28:0c:e3:
1f:05:d5:a5:e4:4c:a2:08:cc:fa:4c:08:44:39:33:71:f4:1f:
d9:a5:1c:f2:9b:a2:47:0c:c9:28:d6:c9:c7:0b:fe:7e:76:21:
32:b1:9d:f7:5a:21:45:b5:41:9c:9c:a7:fa:6f:02:df:cc:16:
e0:82:a3:42:48:0d:9d:bb:26:90:80:7f:9a:56:54:96:03:6e:
cb:f6:64:1e:75:e8:2a:cf:bf:c4:d8:b6:4f:f9:dd:12:76:8d:
e2:4a:1d:f8:89:34:e5:77:1f:97:fc:b1:53:60:51:a2:48:52:
49:e3:49:da:84:f5:e7:4e:3a:df:00:09:28:01:01:db:3a:4f:
dc:19:ba:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:40:37 2024 by rpki-client on console-fra.rpki-client.org