Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F33CCF32E2C311EEA4C8F498775412E6.roa
File: F33CCF32E2C311EEA4C8F498775412E6.roa (raw, json)
Hash identifier: LNFQj0Sn9VLdkLSlYHFRvaN7gA09RT+GDHj4TTdwyL0=
Subject key identifier: 00:00:7D:E2:AA:EC:AB:41:25:86:89:80:E2:E2:79:7C:DF:D2:A3:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A1AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F33CCF32E2C311EEA4C8F498775412E6.roa
Signing time: Fri 15 Mar 2024 12:02:52 +0000
ROA not before: Fri 15 Mar 2024 12:02:49 +0000
ROA not after: Tue 30 Apr 2024 12:02:49 +0000
asID: 63139
IP address blocks: 154.94.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41389 (0xa1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 15 12:02:49 2024 GMT
Not After : Apr 30 12:02:49 2024 GMT
Subject: CN=65f438ec-99b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:c3:80:05:6f:32:db:85:9b:3f:4f:7b:13:
5e:56:2f:0d:e8:35:1b:62:50:c0:5e:40:6d:cc:5e:
64:c0:c3:79:2d:0f:f2:dc:62:d4:8e:54:01:43:05:
c0:52:c2:5a:84:3b:2b:c8:21:5c:4f:14:43:2f:eb:
29:17:ae:b5:4f:fc:c6:db:78:c5:5a:21:2e:ee:2d:
46:79:09:06:63:9e:0a:dc:78:aa:7a:cf:97:8c:a3:
52:27:6c:57:03:11:8b:e5:e2:93:ce:16:03:03:13:
1d:9c:3c:09:18:4d:f8:86:ea:87:03:c3:5b:e3:17:
f4:99:d2:b1:c1:e6:44:34:20:da:78:68:5e:c0:a2:
fb:ba:8a:3f:09:49:08:b9:68:31:1a:6a:be:de:a3:
32:27:09:69:b2:88:ab:e8:b9:37:58:4f:3b:e3:07:
ca:5c:a6:f2:53:0b:d6:50:08:27:16:08:24:10:d0:
ce:45:9f:48:55:6c:72:7a:c0:9c:1b:05:46:2d:05:
0a:35:b1:b4:37:cd:38:b8:f8:6a:a7:e9:7d:02:d2:
bd:60:02:89:6f:5c:fc:9e:55:c5:0a:a2:75:24:97:
66:b9:50:b0:c5:6d:23:e5:ad:71:e1:1e:08:43:77:
bd:ff:72:74:f9:21:8f:c2:94:21:99:a8:12:9a:4b:
11:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:00:7D:E2:AA:EC:AB:41:25:86:89:80:E2:E2:79:7C:DF:D2:A3:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F33CCF32E2C311EEA4C8F498775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.118.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:f2:06:ea:cb:36:de:07:9e:26:c4:e0:41:8b:d7:42:c6:f9:
3c:9f:d3:fc:d7:32:ce:1e:05:34:2a:e4:56:7a:c1:90:7a:35:
3c:11:1e:81:12:2f:66:bc:a3:0f:30:72:64:96:16:be:4f:80:
18:b1:24:52:b2:be:eb:f8:ab:5b:9b:cf:81:9c:b1:41:d6:b7:
88:25:5b:bf:95:1c:15:1e:21:df:44:7c:72:bb:3f:dc:81:8d:
88:8c:a3:5f:ec:8d:29:f2:5c:93:ee:d7:44:60:6c:2a:dd:09:
b0:5b:d2:97:c5:a4:1a:8f:ad:b6:41:7e:b1:eb:03:3c:50:25:
5f:4b:34:8b:00:97:c4:04:cf:01:b6:cf:a2:9c:c8:5b:67:f4:
a0:51:21:41:c0:6f:ec:db:81:c4:5e:8b:11:70:47:e9:2d:af:
5b:11:ac:02:70:6f:84:02:d1:8e:33:81:5f:58:8a:52:8b:a4:
c3:f2:3d:12:f3:bd:3e:07:1a:3c:1c:a7:93:95:de:45:24:f6:
8e:1a:32:df:73:71:e6:75:1f:3c:e9:54:20:c4:6b:a4:a9:07:
52:12:88:2f:ed:1e:89:14:b1:ba:62:43:17:99:e5:32:a7:e2:
04:f9:93:ba:d1:65:fb:ef:20:83:d6:89:7f:ee:f6:b4:da:f0:
6e:e0:88:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:40:37 2024 by rpki-client on console-fra.rpki-client.org