Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FCFCCF84CC911ECBB125B7BD8A014CE.roa
File: 2FCFCCF84CC911ECBB125B7BD8A014CE.roa (raw, json)
Hash identifier: gVL3lGU+4iVOzcAR2+adEJKB7asEL9j8K5XFKKPjwu4=
Subject key identifier: DB:C2:20:DD:A5:BF:F1:B9:A9:3C:9C:12:EC:C4:76:08:60:9C:10:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1297
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FCFCCF84CC911ECBB125B7BD8A014CE.roa
Signing time: Wed 24 Nov 2021 01:52:32 +0000
ROA not before: Wed 24 Nov 2021 01:52:28 +0000
ROA not after: Sat 24 Dec 2022 01:52:28 +0000
asID: 54600
IP address blocks: 154.86.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4759 (0x1297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 01:52:28 2021 GMT
Not After : Dec 24 01:52:28 2022 GMT
Subject: CN=619d9adf-9a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ac:e9:09:05:5a:44:17:f1:9e:3d:6c:39:57:
02:80:08:66:2f:4a:b8:70:e3:85:71:46:40:b6:26:
f4:3f:9a:98:62:30:ad:c1:1a:8a:e9:6d:82:ca:95:
a4:71:b0:db:14:cb:cd:56:c4:56:4f:7f:e7:8e:a0:
f3:e2:76:b4:ff:3b:ea:f1:c0:75:ec:28:f3:84:b0:
33:c9:44:a0:98:9c:9c:26:06:09:9d:0e:24:d8:82:
c1:53:a9:27:37:f9:c2:42:91:a0:92:1f:8c:12:52:
b2:49:72:00:67:da:3e:4b:e2:5f:93:86:02:4f:b8:
b9:91:73:be:24:0a:91:8c:fc:c6:e9:a3:e7:a0:e5:
0a:ae:20:2b:58:63:10:2b:5e:a8:84:c2:ee:b4:ec:
62:db:58:02:21:2e:fe:0a:ca:df:a8:c3:6e:27:11:
5d:01:08:b4:f5:6c:40:69:f6:9c:a0:77:c2:fe:49:
1d:fe:f6:d1:1f:f4:04:26:42:f1:44:6c:3a:4c:88:
2e:e3:a7:a0:84:97:75:e9:63:52:ef:3f:9d:00:32:
ef:68:8b:2b:f2:ad:b4:53:22:2a:4a:41:88:87:2f:
90:31:35:2c:93:8a:dc:c3:c0:19:ae:89:e0:42:05:
a2:6d:67:1a:b2:16:49:80:95:1f:af:01:52:d0:f5:
4e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C2:20:DD:A5:BF:F1:B9:A9:3C:9C:12:EC:C4:76:08:60:9C:10:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FCFCCF84CC911ECBB125B7BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:df:c3:75:b5:3d:97:38:42:a1:86:67:18:89:a8:23:a0:72:
a8:ff:b8:3e:75:25:9b:b3:64:9e:d0:de:3d:1c:3d:58:d3:03:
41:e6:5d:c8:6e:b8:e0:eb:17:f0:9e:33:6c:aa:7b:8a:6a:3b:
22:e2:34:06:f3:63:08:9f:8c:a0:3a:02:3f:3f:1d:8f:19:9a:
93:a0:4a:5f:fd:5c:05:7e:0f:68:44:ac:aa:6a:50:02:a6:6e:
1c:08:1e:95:32:74:71:5c:89:b0:99:8b:3d:14:70:d7:e6:0d:
69:74:0c:e3:fa:e6:28:5b:63:bd:2d:18:da:df:dd:16:de:6a:
04:c2:41:e2:bd:23:35:27:0a:61:61:10:46:5d:86:ef:43:08:
49:fd:58:61:21:25:32:81:b4:98:4e:05:60:83:8a:bd:b2:09:
2a:10:6f:d8:fc:19:c6:b2:ac:0b:d2:08:1e:89:bc:30:ca:cf:
1d:84:b2:da:39:fc:d4:47:1e:23:8d:80:a5:69:c2:63:39:86:
66:b9:bb:13:be:47:2d:a0:11:6a:c3:0e:01:5f:de:37:23:6f:
4e:23:66:24:e4:35:84:4d:cd:8d:b1:eb:33:87:8a:32:24:53:
b7:8b:00:73:b4:0e:36:2c:bf:20:60:06:c6:fd:f3:ad:04:b6:
7c:47:cb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-fra.rpki-client.org