Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/098D3E5257CF11EC9CADF2B25A40D577.roa
File: 098D3E5257CF11EC9CADF2B25A40D577.roa (raw, json)
Hash identifier: KPis2cFaLXq3nq2CSaUYDcFtPSjJmVR6NTOoEewyNXA=
Subject key identifier: 06:90:3D:CC:5B:9F:1B:F9:55:B5:23:41:5A:90:17:1D:79:4C:7D:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 131B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/098D3E5257CF11EC9CADF2B25A40D577.roa
Signing time: Wed 08 Dec 2021 02:32:07 +0000
ROA not before: Wed 08 Dec 2021 02:32:04 +0000
ROA not after: Fri 30 Dec 2022 02:32:04 +0000
asID: 9009
IP address blocks: 154.92.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4891 (0x131b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 8 02:32:04 2021 GMT
Not After : Dec 30 02:32:04 2022 GMT
Subject: CN=61b01927-708e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:34:fe:7e:a7:70:27:0e:ee:0a:50:69:50:
42:d1:2a:49:78:ba:ab:a1:9f:85:80:4f:55:0b:1c:
77:33:ec:68:7c:bc:0c:f3:df:eb:a0:fd:8f:0c:1f:
83:5d:84:77:39:a2:ed:26:f3:65:68:a0:46:78:b0:
10:80:b8:c9:45:2f:cb:98:28:af:5f:c9:f0:b6:78:
86:5a:04:db:61:c3:5a:90:a1:da:ec:d3:e2:d2:1c:
69:85:16:3b:99:d3:bf:fc:cb:d7:5d:fd:34:a4:be:
46:f1:36:e9:16:b1:c1:09:ae:e4:b0:66:d4:fc:b2:
b3:fa:3e:1e:d9:8b:00:43:bd:ae:92:9a:69:04:29:
dc:c7:fc:6c:fa:a6:59:a7:52:b9:e4:34:d7:d7:e4:
ac:92:e9:b6:25:c3:8c:35:3c:87:d8:2c:43:3b:75:
7d:e6:37:66:c1:bb:30:f3:0e:d3:0c:37:9c:f1:a3:
fc:11:f7:18:5f:c5:08:22:0a:9a:1d:ff:92:bb:f2:
ed:b3:b0:8d:4d:dd:19:14:7a:80:18:26:e9:6e:ba:
37:f7:c8:89:5d:1d:4f:9d:34:21:cf:98:ce:6f:9a:
01:0d:7e:ff:05:df:9e:39:fc:0b:cf:1b:c7:5b:3c:
04:68:d0:5f:ed:42:3c:f1:f7:1b:7d:c2:1f:79:82:
ed:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:90:3D:CC:5B:9F:1B:F9:55:B5:23:41:5A:90:17:1D:79:4C:7D:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/098D3E5257CF11EC9CADF2B25A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.124.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:40:18:45:04:98:12:37:18:48:55:24:d4:57:b9:91:99:1d:
c0:39:52:9c:e0:f7:55:b7:91:8a:47:fb:a2:5a:bb:18:00:10:
1e:b7:ef:4e:94:b2:ab:4d:18:d6:5b:b9:de:0f:1c:84:1f:8c:
b8:a7:f1:e8:94:1f:99:08:4b:bc:02:b9:94:8a:17:e0:bb:90:
12:30:09:7d:fa:ee:de:aa:1c:f8:09:0e:9f:c2:86:d8:f2:32:
48:f0:90:10:ad:8a:f0:8d:52:b0:4b:51:1c:59:80:b8:10:a8:
f8:90:c9:9c:2d:52:17:8e:aa:9c:cd:50:ee:fb:0f:61:07:01:
49:66:58:41:af:ef:4c:78:e8:20:6a:d9:5e:1d:87:45:d4:60:
81:a6:f6:65:8f:2f:c1:a7:06:26:49:5b:13:94:af:bc:da:e3:
36:0c:c6:f0:23:0e:2c:c0:10:f1:6b:63:5e:74:42:3c:9d:ad:
5a:ca:d3:b8:e9:cc:08:24:8c:11:9a:98:37:c6:c8:6b:47:24:
f8:32:92:82:dd:f9:14:18:d0:59:98:40:47:93:f4:62:de:6b:
5e:9a:1a:f6:05:78:86:d6:44:41:b0:28:16:98:da:44:d6:28:
68:0e:ea:62:6b:f8:94:ec:56:c6:c7:fb:99:d0:08:66:d6:aa:
87:59:32:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:04 2023 by rpki-client on console-ams.rpki-client.org