Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE1B631CFAE411EE90167E45017001B1.roa
File: FE1B631CFAE411EE90167E45017001B1.roa (raw, json)
Hash identifier: ysLpDB4ODAr+DR5wqp2YAMCLFznh9huUSSoFJ9NWgq8=
Subject key identifier: BD:DB:B4:8B:7A:BF:E9:D2:70:C7:5A:2A:A4:25:9C:0E:D3:0F:58:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE1B631CFAE411EE90167E45017001B1.roa
Signing time: Mon 15 Apr 2024 04:59:52 +0000
ROA not before: Mon 15 Apr 2024 04:59:48 +0000
ROA not after: Thu 25 Apr 2024 04:59:48 +0000
asID: 5065
IP address blocks: 154.94.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44136 (0xac68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 04:59:48 2024 GMT
Not After : Apr 25 04:59:48 2024 GMT
Subject: CN=661cb448-2f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1c:d9:65:19:3b:5f:3c:3f:d9:d7:0d:5e:e9:
be:eb:99:b1:5d:08:46:7b:29:2a:0b:1f:00:8c:2f:
22:fb:c8:2b:9f:a7:96:79:ba:24:37:ca:84:b4:5e:
30:e9:83:b7:d9:30:fe:4c:ff:43:3a:ee:f0:fe:32:
36:ad:f8:5e:66:a7:cb:fa:20:03:b9:25:b0:1c:cb:
2b:de:5b:38:71:48:d4:4e:b7:58:28:61:77:7c:17:
6f:57:c1:7e:12:d9:7d:13:70:d5:ba:87:68:6f:b2:
b1:b9:74:61:30:af:89:67:ec:88:65:ed:99:57:8f:
da:1f:91:ef:9f:c0:28:38:f5:c7:fc:ec:33:b5:36:
af:e1:28:a6:b8:b6:af:59:3f:12:e2:5f:0b:32:02:
08:f6:ad:56:f2:5b:9a:b4:f5:24:b8:d7:2f:1a:8a:
d7:24:9d:d7:f3:07:2d:cf:ab:a0:19:58:4d:ec:07:
26:70:23:87:21:4a:fb:f5:11:cb:16:cc:fd:bd:ce:
0c:c9:ac:5a:70:40:89:b9:40:a4:8b:13:9d:92:46:
54:78:b6:bc:f3:56:aa:a5:c2:46:42:e4:d3:9f:9d:
d8:62:03:a2:4f:b6:ca:0c:c0:06:96:8d:26:e0:75:
a2:d9:2a:82:9e:c7:e2:e9:1a:a3:f9:38:80:a1:ba:
4c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DB:B4:8B:7A:BF:E9:D2:70:C7:5A:2A:A4:25:9C:0E:D3:0F:58:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE1B631CFAE411EE90167E45017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.38.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:ab:a0:ef:c2:d2:5e:ca:06:61:ec:fa:c1:2f:c8:ea:7b:b4:
cd:30:49:13:3e:46:80:1f:c7:4a:91:4e:5e:07:c1:19:6b:32:
81:18:89:af:d7:ce:d3:ec:d2:99:b5:49:59:b6:4a:ea:8c:42:
2f:88:ad:3f:27:11:32:4f:aa:0c:fe:0f:9e:1f:74:a0:c2:73:
51:51:b7:a7:f6:3e:ac:95:95:72:30:ed:ed:e5:d3:af:9e:91:
1d:69:67:9d:8c:16:38:1c:4d:47:d1:f1:be:96:56:8d:51:57:
d7:bd:e3:61:8a:1b:7f:b6:a5:7d:5e:18:45:d0:e6:74:cf:c6:
12:09:6a:d1:5a:a9:20:71:6e:02:ea:85:a1:2e:18:1a:e6:10:
fe:6c:f6:b5:e5:94:77:d7:19:86:50:c0:1b:70:77:58:cf:39:
51:dd:88:c4:fe:e5:b7:40:3e:1a:4a:0d:a6:29:16:d5:e9:74:
65:07:03:55:de:8a:66:e9:46:8b:b5:d8:77:6d:28:ad:09:c5:
f2:ce:b3:ac:9b:e5:a7:b8:82:50:de:61:74:b6:51:99:7f:52:
47:7a:83:f9:9e:1c:50:d2:48:f0:41:6f:6f:82:1b:de:46:1f:
0a:b2:fa:cc:f0:4a:18:33:cb:ed:ac:7b:ae:de:c9:e2:6b:40:
cf:1a:00:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 10:41:11 2024 by rpki-client on console-ams.rpki-client.org