Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0CC85D80B4511EF9C20DB32017001B1.roa
File: C0CC85D80B4511EF9C20DB32017001B1.roa (raw, json)
Hash identifier: y7d0xXVK4vpyXH6aOQa0wWLCd2SzJo9odQRVYO70w4M=
Subject key identifier: A1:69:0C:9C:83:B2:42:BB:CF:06:B9:A0:72:42:6F:94:D3:18:D0:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B43C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0CC85D80B4511EF9C20DB32017001B1.roa
Signing time: Mon 06 May 2024 01:12:49 +0000
ROA not before: Mon 06 May 2024 01:12:45 +0000
ROA not after: Tue 14 May 2024 01:12:45 +0000
asID: 44559
IP address blocks: 154.207.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46140 (0xb43c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 01:12:45 2024 GMT
Not After : May 14 01:12:45 2024 GMT
Subject: CN=66382e91-92b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:10:80:51:c3:40:34:dc:d5:80:a9:5c:f2:
50:16:1e:6c:f3:09:0c:99:76:6a:2d:d5:70:b2:10:
d5:a1:70:57:45:29:ae:6b:b1:23:cc:ea:7b:e9:eb:
6a:a8:d6:84:11:e1:e3:eb:c1:e1:96:3f:d2:71:20:
05:9c:31:1b:1b:03:81:b3:6b:19:d0:1d:97:25:fc:
ef:ee:16:2c:e9:35:51:cb:a5:a3:e2:3d:0d:58:83:
1e:e0:c0:42:a9:c5:2e:0d:6d:22:77:75:46:a8:79:
51:29:1b:d6:f1:98:04:23:fb:a6:a5:d9:68:4d:28:
31:e6:23:8a:c1:fd:7c:5f:f3:98:bf:4e:9c:a3:d3:
04:c5:a9:53:7b:ce:d6:02:90:6c:3c:4b:e4:90:a3:
8d:f5:51:17:05:6a:26:be:fb:48:b7:19:65:e0:fe:
7f:65:1b:99:2c:55:85:b2:c2:77:1e:be:b7:47:42:
6d:00:b5:7b:45:e9:a3:ac:bc:e6:5f:82:4c:df:49:
3a:a4:1f:4a:7f:9a:34:71:95:33:41:96:d0:2b:f7:
7d:65:fa:79:49:17:98:e5:1a:ba:dc:c4:39:d2:eb:
21:fe:ef:17:1e:f3:77:57:66:53:3b:57:f7:f4:d0:
d8:26:e9:e0:7f:59:7c:c2:eb:da:73:59:e1:ae:da:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:69:0C:9C:83:B2:42:BB:CF:06:B9:A0:72:42:6F:94:D3:18:D0:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0CC85D80B4511EF9C20DB32017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b9:c4:7c:38:8d:19:68:cf:e6:89:8e:6b:72:4e:11:08:d7:75:
df:fa:d8:4a:f9:d5:60:e0:c4:59:25:52:60:c0:ff:d0:22:83:
21:44:7a:9a:8e:cd:ce:18:4c:67:bd:7c:35:c0:7b:18:82:c6:
bb:bc:d8:38:f4:b5:d9:c5:ba:13:59:7f:a2:0e:08:d9:11:db:
3c:87:0b:3d:90:93:82:1d:d3:e1:0c:54:5f:a3:2b:6f:1e:b0:
16:9a:c1:9c:ba:9a:dd:f4:e3:bf:2c:ca:0c:25:ae:da:39:ca:
bc:00:cb:a8:55:77:6f:d8:c3:e1:ab:c0:a5:22:db:4c:ce:5c:
6f:6f:87:61:9d:5a:2a:e1:5d:f6:76:35:f0:f0:25:f8:f3:f8:
f7:c0:34:21:bc:88:12:b4:d9:60:27:2b:c5:c5:cb:ac:dd:ba:
90:06:9d:54:5d:72:66:89:55:07:4a:96:bc:f7:ae:3b:4e:01:
04:c0:86:b8:2e:b2:be:10:1d:f8:73:c1:2c:07:b3:e4:0a:35:
35:0d:ac:b4:ec:7d:36:50:53:48:59:72:96:96:41:2c:4e:70:
48:d2:83:45:28:71:b7:52:0e:a9:08:6c:7f:03:4b:70:11:7a:
77:f0:86:69:9e:40:4e:1b:b1:03:8b:e9:fa:a0:04:f9:1c:0d:
62:6b:88:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 03:25:15 2024 by rpki-client on console-ams.rpki-client.org