Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C9A254C090011EF92F94748017001B1.roa
File: 7C9A254C090011EF92F94748017001B1.roa (raw, json)
Hash identifier: uggRvtmdIgELSDwTZ1lY2179fEBZSKCARsl4iNXxgfA=
Subject key identifier: 98:7A:B3:FC:2E:58:74:FC:CE:93:43:46:6F:7F:DC:23:F5:FF:60:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B41D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C9A254C090011EF92F94748017001B1.roa
Signing time: Fri 03 May 2024 03:51:57 +0000
ROA not before: Fri 03 May 2024 03:51:53 +0000
ROA not after: Sat 11 May 2024 03:51:53 +0000
asID: 39600
IP address blocks: 154.207.208.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46109 (0xb41d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 3 03:51:53 2024 GMT
Not After : May 11 03:51:53 2024 GMT
Subject: CN=66345f5d-e206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:b0:f3:52:9d:5e:f8:13:2a:be:01:e0:8e:
41:7b:04:65:8e:7e:18:d4:e9:c5:01:9d:69:cf:51:
a3:36:9f:36:83:61:29:73:f7:8e:68:83:b6:7a:70:
0d:e9:17:2d:f9:a6:1b:08:3c:16:cd:e8:79:8b:18:
36:ad:36:3a:76:94:ef:50:7f:a6:88:b4:0d:5d:9b:
2b:a0:a3:37:5c:2e:8c:3c:5a:e2:4e:a0:b4:34:91:
a7:42:3e:0a:ad:6b:ea:1f:18:e9:9e:78:4b:0f:3a:
7a:19:af:1d:19:cc:21:5b:7d:b7:e0:85:1b:73:6e:
77:17:30:13:87:f1:a2:6a:06:ae:f5:30:5f:12:28:
67:17:4b:cf:83:b1:9e:7e:69:fe:8c:2b:22:4b:4f:
2b:d8:80:aa:0f:01:4a:3e:ab:fe:af:98:72:91:31:
ec:a4:9e:e0:9b:48:8d:c2:af:14:d7:b4:7d:5d:cd:
f0:39:8c:d8:c6:86:2d:dd:17:e3:50:39:e5:5d:a0:
16:4c:f8:ec:9d:a6:ff:f1:b6:97:09:26:ba:5b:a3:
b5:b1:6e:16:a0:42:bf:eb:48:0f:93:da:c3:92:24:
3f:79:03:a0:0e:99:83:32:4d:43:dc:f6:6a:5c:41:
9b:a2:ec:45:7e:fa:73:b9:c4:32:0b:db:ff:4e:e6:
36:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7A:B3:FC:2E:58:74:FC:CE:93:43:46:6F:7F:DC:23:F5:FF:60:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C9A254C090011EF92F94748017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.208.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:0b:b2:93:dc:a5:fa:45:b6:c7:b4:b2:8e:e6:f6:19:47:49:
03:99:8e:e9:b8:08:c4:50:ba:14:a3:d5:91:cb:a0:2d:6a:20:
99:a0:df:87:74:84:3c:86:87:3f:fe:5b:8f:d6:34:8b:c7:31:
4e:7b:35:67:b7:cb:84:62:23:4c:7a:66:78:37:94:5a:4d:aa:
95:48:7d:3b:e5:3c:5b:6f:90:1b:fe:87:46:8a:c0:65:10:da:
ac:05:0d:d8:d1:0c:54:2d:6f:e3:73:56:7a:5e:1f:66:d1:5a:
ba:41:76:c2:0b:f9:a3:f1:b7:43:ac:83:61:f5:9b:c2:a9:49:
5b:2d:ea:27:90:b2:6a:1d:5b:56:97:3c:a8:22:62:31:13:08:
8d:15:9f:ba:97:e0:43:3c:d6:96:c0:65:42:fc:97:75:fb:38:
2b:09:51:1f:e4:a0:93:de:e1:83:4c:90:92:42:e5:1b:56:73:
39:6a:ae:f7:f3:50:86:53:f3:56:ce:04:91:03:b0:fe:d9:e9:
3e:53:60:b6:65:1b:02:5c:10:49:b5:15:c2:7e:4e:93:fe:38:
41:db:83:40:49:51:e4:05:51:43:8f:3c:5a:1e:9d:17:40:f6:
f0:ec:e0:40:8e:18:62:f1:09:36:b3:fa:a7:2f:76:f0:4a:58:
48:f4:b5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:39:47 2024 by rpki-client on console-fra.rpki-client.org