Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EE0612657CF11ECB67019B35A40D577.roa
File: 1EE0612657CF11ECB67019B35A40D577.roa (raw, json)
Hash identifier: aMNHTDb5ONODh70FOhywzM/8iN29nTM3iJT9sJL7KtU=
Subject key identifier: D6:3F:52:A1:8E:48:7C:F2:E7:A6:D4:91:14:99:79:D3:4B:B3:56:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 131D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EE0612657CF11ECB67019B35A40D577.roa
Signing time: Wed 08 Dec 2021 02:32:43 +0000
ROA not before: Wed 08 Dec 2021 02:32:39 +0000
ROA not after: Fri 30 Dec 2022 02:32:39 +0000
asID: 9009
IP address blocks: 154.92.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4893 (0x131d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 8 02:32:39 2021 GMT
Not After : Dec 30 02:32:39 2022 GMT
Subject: CN=61b0194b-84e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:62:cf:14:2a:1e:f3:1a:e9:0c:6c:22:58:dd:
00:bf:da:23:82:40:ce:ff:61:53:28:1e:3e:60:d5:
9e:54:7e:0d:f0:76:49:59:e8:a3:62:09:7d:95:46:
6d:ae:8d:1e:ba:eb:7b:cc:97:1d:a9:40:ee:12:de:
1a:aa:2f:7c:8c:f6:99:6f:a2:9d:77:3c:dc:ab:87:
16:79:e2:09:40:00:5e:9b:d5:23:12:fa:77:dc:07:
35:ad:47:f4:10:f3:cf:e9:67:59:8c:98:ed:09:87:
10:f9:32:ab:ce:db:9d:61:f7:ef:be:26:4d:eb:97:
7c:b0:84:a4:d7:71:8e:c8:e4:ec:70:f6:af:23:79:
32:f3:3a:63:67:61:8e:07:8d:80:4d:5e:95:93:e3:
b1:a5:86:4e:71:72:e7:93:d7:4f:5a:4e:11:55:5c:
b6:b6:1b:45:10:1b:3f:51:f9:dc:91:15:e5:5f:fc:
5b:2b:61:3e:85:b8:cc:62:a6:61:8e:df:1d:6b:02:
63:8f:f5:58:ff:a1:99:3e:7b:56:cc:0c:b6:66:99:
2b:91:a4:fb:f5:ca:e9:53:bb:0f:a6:09:44:eb:c9:
91:e9:b4:ab:e2:eb:81:91:24:61:3c:fe:25:43:7b:
63:c8:a5:09:3b:d5:ef:85:97:33:f3:8f:07:0b:fc:
fb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3F:52:A1:8E:48:7C:F2:E7:A6:D4:91:14:99:79:D3:4B:B3:56:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EE0612657CF11ECB67019B35A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.126.0/24
Signature Algorithm: sha256WithRSAEncryption
57:54:3d:20:61:50:a1:ea:cb:b6:df:0f:7e:4c:4e:9f:76:a0:
fb:8b:af:6c:87:84:41:3f:71:92:0e:12:5a:1e:57:ee:34:e5:
85:18:1d:8f:bf:18:b4:08:2b:7b:82:50:fa:27:31:a4:14:15:
bd:39:52:b8:09:71:8b:5d:25:77:8b:a1:68:15:61:3f:9a:73:
11:22:83:46:42:81:5c:02:8e:e4:fd:d0:3f:a9:7f:6d:9e:c5:
a2:86:52:59:89:d6:01:a6:b1:7f:dc:63:87:0b:88:c2:60:c3:
3c:59:9b:e1:5f:c1:df:9d:04:00:1f:a5:0a:c1:e2:33:86:fe:
65:5c:a9:16:fc:a4:1d:05:59:f7:4e:1d:5a:4c:9e:da:31:85:
ee:08:23:2e:99:8e:d6:e9:aa:cd:3a:b8:45:b1:4c:6b:25:4d:
47:61:8a:8f:d1:32:20:58:9c:d6:70:87:5c:b2:5c:8d:e1:fd:
ba:3d:ae:0e:c3:92:00:a4:23:71:38:c2:a9:f2:65:9a:03:03:
3a:07:d4:1c:23:d1:4c:69:2f:f7:fd:1c:12:91:39:9d:16:28:
1c:f7:23:53:bf:68:14:0f:7c:72:e7:28:e4:69:27:d0:49:b3:
11:ed:19:cc:81:1b:04:e8:85:9f:ea:d2:2c:27:2d:c8:68:51:
fb:b3:ab:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-fra.rpki-client.org