Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E7191820E5011ED9B58E6A4F1222468.roa
File: 1E7191820E5011ED9B58E6A4F1222468.roa (raw, json)
Hash identifier: a9zf+Yh61aGEjWuEwWePvPIupdwkX5LTZvYQK+biVxw=
Subject key identifier: 59:3C:4C:F5:DB:F5:E8:46:2F:06:27:80:71:99:22:AB:DB:D9:8A:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1798
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E7191820E5011ED9B58E6A4F1222468.roa
Signing time: Thu 28 Jul 2022 08:34:39 +0000
ROA not before: Thu 28 Jul 2022 08:34:35 +0000
ROA not after: Mon 15 May 2023 08:34:35 +0000
asID: 397630
IP address blocks: 154.201.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6040 (0x1798)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 28 08:34:35 2022 GMT
Not After : May 15 08:34:35 2023 GMT
Subject: CN=62e24a1f-8d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0a:0e:51:98:a5:88:d7:0c:8a:1e:41:a6:11:
60:94:86:b2:6b:0c:0b:ad:3e:54:17:05:03:d4:0c:
ae:40:75:0d:41:ea:4f:8e:2d:a0:b8:b6:3d:35:2a:
20:87:ea:a8:64:46:98:25:a1:f0:b7:d0:32:13:58:
8d:af:b9:29:8a:87:06:71:95:b8:41:df:f8:f0:31:
ba:0d:0c:04:e0:49:13:98:54:7d:9d:47:9f:6f:f3:
32:18:e9:62:c6:92:ea:f1:87:1c:e0:e5:7c:5b:a0:
24:fd:88:d1:19:8b:9a:f7:9c:99:75:dc:cf:54:1a:
6c:88:c1:75:59:b5:ed:63:e6:d0:29:de:2d:99:c7:
5c:9a:0c:e0:ae:e0:18:92:d3:ff:ba:df:fe:96:f5:
89:12:26:3e:0a:b2:7f:30:ae:f0:dc:33:2e:b2:7a:
33:23:5c:42:68:03:4b:ca:ec:37:25:be:2b:18:81:
d5:08:77:1a:6f:7e:5b:b3:83:ab:5b:60:83:ea:f0:
2a:4d:4d:78:eb:20:54:1b:7a:66:db:c2:e6:ef:76:
55:43:b7:c8:c8:8a:2e:3a:5d:98:fd:75:af:87:97:
2b:01:36:35:17:35:c9:47:09:79:9d:5a:3b:48:9a:
fa:be:7f:27:a7:9c:aa:bc:24:7e:72:8a:2d:df:67:
28:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3C:4C:F5:DB:F5:E8:46:2F:06:27:80:71:99:22:AB:DB:D9:8A:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E7191820E5011ED9B58E6A4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.32.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:12:47:a5:70:9f:a1:23:3d:6a:47:f2:ca:16:2f:71:a2:01:
55:57:7b:ae:47:07:a6:47:b5:9e:da:a8:ca:ee:31:0e:1f:96:
5c:d8:99:2f:eb:60:e7:6e:c5:60:8d:fc:47:e5:94:43:97:d1:
ec:32:6e:3c:1e:c0:2e:68:b3:56:ef:64:37:f6:19:6b:46:97:
99:c4:36:da:2c:3b:a2:e1:0e:de:05:a6:7e:4e:c5:ad:0e:53:
b4:26:68:8c:15:7e:7e:f5:2b:46:85:d1:ef:5e:9c:c9:e3:df:
08:b7:53:61:0a:af:bf:07:1c:e3:0a:b8:d2:d1:a9:e5:fc:db:
ac:45:a0:ae:ef:97:05:0e:44:01:b5:dc:ed:e2:f2:5b:0d:a3:
4a:78:5d:e4:51:bd:42:65:a3:41:fb:57:68:bb:d5:9a:7a:11:
74:ba:83:db:b5:16:01:27:f4:6e:b2:a7:36:74:bf:03:ec:d8:
65:b3:0a:cc:12:bb:a0:36:70:1a:51:a6:f3:30:b8:f5:2e:16:
2a:ea:06:29:f5:78:bb:f7:f1:fa:1f:82:5c:f4:d4:9d:fb:58:
46:64:ce:e4:9e:c3:ee:73:e9:ff:6d:04:9c:1d:54:19:37:75:
f0:8f:e0:fe:7c:99:0b:cd:f5:fa:05:3f:68:f0:30:6a:28:c4:
76:2e:bc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:05 2023 by rpki-client on console-ams.rpki-client.org