Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB1A6B5CFADD11EE9019020E017001B1.roa
File: EB1A6B5CFADD11EE9019020E017001B1.roa (raw, json)
Hash identifier: /wKq6FKZAUavBBWJ98DUtuaT5iNquHo81U1ozKGR590=
Subject key identifier: 5F:C6:33:BB:0B:44:14:51:02:B3:F9:73:8D:C2:DF:F8:6D:D3:B0:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC3B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB1A6B5CFADD11EE9019020E017001B1.roa
Signing time: Mon 15 Apr 2024 04:09:13 +0000
ROA not before: Mon 15 Apr 2024 04:09:10 +0000
ROA not after: Thu 25 Apr 2024 04:09:10 +0000
asID: 5065
IP address blocks: 154.94.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44091 (0xac3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 04:09:10 2024 GMT
Not After : Apr 25 04:09:10 2024 GMT
Subject: CN=661ca869-0792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:26:6b:19:c6:54:30:92:9c:a2:54:b4:41:73:
ce:f1:6e:b0:49:86:ad:19:f2:40:3d:99:16:0a:fd:
52:f1:d8:12:db:37:38:fb:5d:05:f4:22:c8:9c:8d:
91:ca:d1:52:f4:cf:49:89:88:44:05:f0:2e:35:9b:
96:76:82:74:3c:ab:f3:db:e5:6a:07:e8:2f:57:fc:
75:87:41:6a:c6:83:b1:be:5a:27:55:27:99:f9:6b:
29:56:41:39:5c:02:35:af:af:48:4f:08:16:b7:78:
b3:5a:e9:22:b5:0f:59:2d:01:61:21:5c:5b:fd:18:
98:da:1a:11:bf:e9:b6:0c:f4:c1:75:c3:11:4c:a0:
ae:a7:ff:44:e7:e1:64:54:1b:b8:71:a0:88:e1:0d:
44:83:0d:74:e4:80:0a:7d:33:49:27:46:ac:17:fe:
bd:1d:60:32:8b:40:98:d9:26:f4:f6:19:18:b2:27:
4a:df:31:4a:da:43:91:ce:6e:c2:21:c1:02:c3:b5:
9a:f4:ca:3c:e8:ed:5d:96:2b:75:93:d0:84:c9:cf:
f8:31:26:ae:60:19:b6:9c:e1:49:33:05:d6:d6:8f:
ce:a5:02:d5:04:9e:bd:c5:e0:64:b9:ae:ab:ca:09:
3e:75:69:29:3d:4e:35:c5:4b:dc:f1:a0:40:15:a6:
17:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C6:33:BB:0B:44:14:51:02:B3:F9:73:8D:C2:DF:F8:6D:D3:B0:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB1A6B5CFADD11EE9019020E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.60.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:58:a3:74:72:83:67:e7:e5:1b:23:fc:5c:83:8e:3c:40:02:
52:53:a9:b6:8a:53:81:4d:75:b6:58:5a:a9:86:66:d4:27:de:
8e:92:d1:77:24:69:69:82:83:3f:d0:af:d8:b6:0f:1f:df:3f:
37:96:04:b4:5f:31:de:46:73:18:df:d3:e5:0a:c1:c6:08:52:
fd:eb:53:c3:39:10:f9:e6:d6:0e:fb:d7:a3:8c:1c:1e:a2:69:
08:ba:72:fb:ea:69:c5:54:61:5d:e9:4a:0e:4d:9d:70:15:bb:
8c:e2:81:ee:14:ad:a7:f9:e7:b9:52:84:e2:a9:c7:d1:d8:49:
15:92:c6:7d:9c:a7:13:1e:f7:44:73:f9:c2:c6:ba:ac:fc:a7:
33:95:c1:7d:a9:e3:98:11:5b:07:8e:4c:30:3a:5f:c0:38:3d:
7d:84:03:65:ab:5f:f0:9f:a1:6a:39:9c:74:33:f0:6c:b2:f1:
33:d5:e6:07:98:b3:66:a7:3b:40:bd:13:e3:57:6e:d5:bd:7b:
0b:5e:33:a7:7d:76:84:fa:4a:e6:80:37:2a:b7:5f:c4:8d:45:
7c:e7:fb:e5:a8:21:42:7c:dd:d8:ec:91:2a:64:bb:8a:49:bc:
ca:70:3a:f4:21:ad:ee:1d:2d:37:48:be:7b:4f:80:43:ad:64:
ac:55:d0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 10:41:11 2024 by rpki-client on console-ams.rpki-client.org