Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0295E14257D111ECBCB213B95A40D577.roa
File: 0295E14257D111ECBCB213B95A40D577.roa (raw, json)
Hash identifier: XH40dNTD5OPnPhXdrtW5z5G4uRawtQm17AlYgKuLtCk=
Subject key identifier: 54:D5:A8:BC:A1:9B:6E:37:B8:E6:C4:C8:E0:77:47:36:4C:64:CD:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 132F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0295E14257D111ECBCB213B95A40D577.roa
Signing time: Wed 08 Dec 2021 02:46:14 +0000
ROA not before: Wed 08 Dec 2021 02:46:11 +0000
ROA not after: Fri 30 Dec 2022 02:46:11 +0000
asID: 9009
IP address blocks: 154.92.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4911 (0x132f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 8 02:46:11 2021 GMT
Not After : Dec 30 02:46:11 2022 GMT
Subject: CN=61b01c76-8d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:aa:8c:5c:13:78:ad:8a:40:f9:16:fc:17:94:
ad:4f:0c:10:79:fc:26:24:3f:96:be:35:3b:c9:02:
d4:d2:b4:da:9e:0b:73:45:4c:ca:35:cd:c6:a2:9b:
41:8a:af:b2:33:f8:f3:b8:06:22:fc:1a:ec:53:dd:
e2:50:93:d7:fa:36:1e:a2:6d:df:b0:34:93:52:4a:
08:c0:de:91:09:b9:1d:f0:02:cd:a0:ac:19:4f:7d:
f8:88:a1:c2:b2:89:74:ae:44:55:62:20:92:36:0c:
2d:c7:bb:7d:8d:89:b0:07:95:dd:8b:3f:bc:b5:eb:
9c:7b:08:29:85:ab:6d:fb:91:11:1b:44:14:29:b1:
fc:04:11:44:8b:28:a8:29:16:d7:98:f1:55:6f:36:
ac:56:96:79:7a:ee:f0:12:62:9b:c2:b1:c7:55:35:
a6:bf:91:47:b8:cf:4c:a3:4a:c9:87:f3:20:bd:dd:
0f:2a:c9:48:7e:94:f8:bf:57:d0:6c:46:f9:c6:6a:
2b:d4:cd:f0:e8:9b:af:5f:93:6b:15:94:50:36:74:
5a:ea:4d:01:1f:19:21:ff:dd:a7:52:3c:89:71:a9:
16:36:ff:bc:ee:63:b9:21:bb:d1:ea:98:c7:e7:4e:
7b:53:2f:ac:c2:eb:53:d6:94:17:9c:01:37:12:1a:
cf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D5:A8:BC:A1:9B:6E:37:B8:E6:C4:C8:E0:77:47:36:4C:64:CD:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0295E14257D111ECBCB213B95A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.123.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ba:52:fd:dc:c9:41:03:b9:1f:5c:9b:94:59:d2:ce:cf:77:
36:21:67:38:7a:ce:a7:ab:a9:8d:78:85:16:cf:02:a7:08:8b:
40:62:02:f2:ce:6c:7f:45:83:8e:d8:00:82:ce:1e:be:9d:bd:
1e:03:8b:8a:b8:7b:01:59:5f:66:d4:f0:3e:2a:c6:89:35:1f:
00:d0:49:9a:36:d6:c1:35:19:01:39:29:10:71:9c:1b:8a:37:
60:74:37:e4:27:80:47:fa:a4:24:45:05:75:12:e9:e4:7c:af:
a4:7c:91:d7:e6:96:5b:61:af:29:14:ff:4c:d7:0e:2f:1e:02:
e9:6a:19:0a:37:e6:08:bc:1e:9d:35:ec:d5:8c:d2:b3:80:a1:
0c:7a:00:8f:50:b6:f7:8b:be:0b:59:5b:38:db:42:69:43:f7:
23:1e:ae:64:ad:ee:71:d4:05:4c:c6:44:6b:af:79:f0:b6:59:
a9:56:48:cd:31:38:b2:29:79:8e:82:52:2e:67:a2:ff:4f:23:
75:c3:1e:c2:d6:f4:67:2b:c1:64:9b:dd:34:4c:2e:40:a2:cc:
ef:1d:fa:f6:c2:94:95:6b:55:a1:50:d1:f9:d1:8c:a6:d8:cb:
34:75:c7:4d:d0:da:3c:0c:38:3e:33:27:b0:0a:00:1a:d9:9a:
fd:2d:9f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-ams.rpki-client.org