Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C820CA4A44611ECBBEBFBD35A40D577.roa
File: 1C820CA4A44611ECBBEBFBD35A40D577.roa (raw, json)
Hash identifier: 8N0mY/z3kVbk4I6sWdh0aQjojzNP0A4ONsruhsQyZps=
Subject key identifier: E1:E9:6A:85:53:84:C2:6B:57:9C:F3:87:77:5A:98:70:F5:5C:6D:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 154A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C820CA4A44611ECBBEBFBD35A40D577.roa
Signing time: Tue 15 Mar 2022 09:55:57 +0000
ROA not before: Tue 15 Mar 2022 09:55:54 +0000
ROA not after: Sat 31 Dec 2022 09:55:54 +0000
asID: 135097
IP address blocks: 154.205.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5450 (0x154a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 15 09:55:54 2022 GMT
Not After : Dec 31 09:55:54 2022 GMT
Subject: CN=623062ad-8ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:12:93:7d:f8:5d:94:42:fc:a4:7f:1e:65:af:
50:53:58:cf:2c:19:2a:fb:a5:27:69:32:17:cf:8c:
78:ac:87:0e:14:7e:38:24:1a:3f:0c:de:1a:95:a9:
5e:7f:43:9b:b4:c8:84:c4:59:bd:81:3b:a9:79:58:
51:21:19:b9:8e:aa:31:d0:af:dc:f8:01:58:d8:1c:
95:52:5f:cb:16:15:36:1a:ce:70:f3:a9:bd:90:97:
79:9f:ef:21:72:68:c0:50:fe:90:a0:76:1f:3f:23:
62:b7:19:91:e7:18:84:a8:b5:95:ad:e7:3e:cc:79:
f3:0f:05:d5:ae:c0:75:e0:47:e5:69:60:a5:27:e6:
d2:08:e4:d6:56:06:7d:d2:f3:b8:5e:6f:41:6c:62:
fd:df:d8:98:53:69:04:a0:18:f6:24:d4:22:95:35:
2d:d8:cc:1a:6e:c5:5c:7e:87:79:92:d2:86:3a:49:
2d:f0:d9:a7:b1:ba:38:5d:15:86:e5:15:55:54:7a:
64:63:51:d2:6c:fd:5f:9b:cf:7e:86:d9:89:0c:f6:
31:a0:4e:2c:c8:51:64:86:c2:16:f1:21:00:c6:bd:
25:9e:2a:79:94:10:8d:c6:5d:7a:21:a0:68:4a:8a:
68:5a:27:e6:5a:87:31:f5:5e:50:7b:ca:c3:3b:a0:
16:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E9:6A:85:53:84:C2:6B:57:9C:F3:87:77:5A:98:70:F5:5C:6D:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C820CA4A44611ECBBEBFBD35A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.44.0/22
Signature Algorithm: sha256WithRSAEncryption
28:2d:b7:37:66:d3:b6:c6:cb:98:ef:d1:07:93:b3:cd:9e:ad:
9c:63:fd:49:a6:da:41:8a:c5:61:cd:1b:a2:64:93:4e:bb:64:
f6:f7:28:ee:06:74:52:2d:d0:d4:3d:2f:5f:e1:1e:48:42:ae:
8f:ff:dc:43:b3:d0:1f:51:d1:a0:47:8c:cc:71:cf:75:b9:0b:
11:d1:60:24:46:5a:45:fa:d6:77:fd:9b:ce:72:9c:00:55:e6:
74:e7:d7:85:08:ad:d4:dd:16:05:7e:f2:2d:50:7c:36:1f:1b:
bd:a0:4a:3d:1b:bd:bc:d1:bc:b4:d4:81:d1:4b:6b:c3:32:fb:
c8:c1:83:a3:2b:6d:a8:23:bd:a5:ea:fc:0a:20:ce:a3:1f:1a:
bc:2b:14:8d:85:bc:3e:80:f6:23:1e:2f:74:0c:fc:6b:c1:58:
89:2b:42:85:68:c1:b9:66:d9:5c:e2:14:2f:e6:8d:dc:8b:57:
72:d2:1f:d2:09:2c:f0:11:c4:5e:4d:5d:72:af:b5:ea:3a:6d:
cd:1d:38:36:72:b9:6a:b6:b3:f7:be:94:57:78:cc:3c:1e:0d:
9c:2a:72:9e:0c:f7:8e:17:96:f3:5c:f7:04:40:e5:23:cd:a7:
3a:0c:8a:56:42:a4:44:08:70:eb:a5:25:fd:b2:d5:03:1e:cd:
8e:31:ba:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-fra.rpki-client.org