Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9D49A7CFAE311EE8E5D9F3B017001B1.roa
File: F9D49A7CFAE311EE8E5D9F3B017001B1.roa (raw, json)
Hash identifier: AQujINUAaKfsNE0MHKAv71gKpuWisl8fi/KMqF+3aKQ=
Subject key identifier: DD:54:82:5F:0F:2F:FE:7C:89:75:A3:3F:E1:4D:54:3B:6C:AA:A4:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9D49A7CFAE311EE8E5D9F3B017001B1.roa
Signing time: Mon 15 Apr 2024 04:52:35 +0000
ROA not before: Mon 15 Apr 2024 04:52:32 +0000
ROA not after: Thu 25 Apr 2024 04:52:32 +0000
asID: 5065
IP address blocks: 154.94.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44124 (0xac5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 04:52:32 2024 GMT
Not After : Apr 25 04:52:32 2024 GMT
Subject: CN=661cb293-a28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:f3:08:4c:d5:93:87:60:d2:46:b6:64:89:
07:f2:fe:fb:e4:1e:47:b5:bf:36:d0:63:48:bb:49:
27:58:5f:38:1e:08:85:f9:1c:3e:ae:a7:24:2a:60:
f5:1f:d7:c3:a1:6f:79:08:d0:9f:d6:ee:c9:12:7a:
60:a1:31:a2:d1:30:6e:03:7f:82:7e:7e:94:b8:3f:
61:f7:68:8b:d8:34:eb:ae:99:80:80:be:66:2b:a8:
e3:21:4f:99:05:39:db:0d:d2:ba:e1:52:74:d7:6f:
d8:21:1a:b1:a3:d9:a6:ec:ed:f6:34:ee:4e:9c:75:
2c:74:ba:ba:6c:bd:53:52:ca:72:89:91:79:0e:19:
e0:99:8e:0f:34:61:b3:3a:36:e2:e4:ec:28:21:28:
62:0c:16:c7:66:f0:a3:4f:89:bb:d8:2f:9d:94:2f:
06:24:1c:bd:7b:5e:77:eb:bc:f3:cf:f3:16:45:c4:
ec:ff:aa:4f:a7:31:e5:00:92:18:d2:fb:ee:f3:ca:
09:63:08:aa:f9:95:07:b2:16:5c:f8:83:d9:60:57:
ea:53:dd:e4:e4:a2:a5:bd:15:a7:05:37:ab:35:6c:
aa:26:61:7d:16:54:dd:e6:27:21:c4:2a:74:c9:5c:
d0:69:a7:88:b3:35:3a:13:31:a3:4b:46:f7:15:c4:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:54:82:5F:0F:2F:FE:7C:89:75:A3:3F:E1:4D:54:3B:6C:AA:A4:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9D49A7CFAE311EE8E5D9F3B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.44.0/24
Signature Algorithm: sha256WithRSAEncryption
29:95:fc:f3:30:a3:45:85:4e:ce:62:44:39:3b:3c:ae:14:73:
88:5d:e6:1b:c2:7c:d2:99:c3:69:6b:ec:12:4c:f2:98:63:90:
fb:d7:79:aa:5c:98:b8:96:a6:eb:ff:8b:a5:c3:23:6e:cc:fc:
e4:c7:4d:b1:00:05:0c:ed:4f:49:c9:05:78:0c:11:c5:7d:5e:
88:2a:2a:fb:0b:aa:9a:a3:dc:28:5d:36:2a:70:53:f1:dd:cb:
45:5b:11:45:75:7e:3a:37:d1:2a:3e:d8:95:ff:ac:33:74:d0:
22:04:c2:bb:1f:10:08:75:4b:30:96:5e:6c:4c:b9:28:63:d2:
3e:73:66:c2:f4:08:ef:0d:54:26:fa:94:53:dd:9c:83:43:17:
63:14:ac:1b:ad:f6:ca:71:b5:20:7c:11:1b:a4:ce:68:6b:2f:
5a:ea:db:0c:36:ab:d6:42:5a:1e:2b:77:cd:a9:40:32:f3:ef:
bc:0d:54:0a:4f:b9:8c:d4:bb:1b:ee:94:b8:f0:de:a1:c4:c8:
a0:74:5c:30:c4:14:e0:56:23:05:ca:3b:e5:cf:9e:b5:32:5a:
b6:b8:e3:d7:8b:21:91:c3:6b:90:93:c4:27:6e:db:be:0a:64:
b4:31:c6:da:6b:43:97:f5:28:ff:43:70:b8:a4:7e:b2:b0:53:
6b:5e:f0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 10:41:11 2024 by rpki-client on console-ams.rpki-client.org