Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4092BACC360911EC82A02C16D8A014CE.roa
File: 4092BACC360911EC82A02C16D8A014CE.roa (raw, json)
Hash identifier: jH3ydpX8KF5F4dYkhrhLU5J/fCN7oUabiTeWbAi+Pdg=
Subject key identifier: 3D:53:82:E1:E5:1C:20:9F:8E:CD:9F:46:8A:EE:5F:ED:43:AB:AD:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0CA4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4092BACC360911EC82A02C16D8A014CE.roa
Signing time: Tue 26 Oct 2021 03:03:11 +0000
ROA not before: Tue 26 Oct 2021 03:03:06 +0000
ROA not after: Wed 26 Oct 2022 03:03:06 +0000
asID: 7018
IP address blocks: 154.85.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3236 (0xca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 26 03:03:06 2021 GMT
Not After : Oct 26 03:03:06 2022 GMT
Subject: CN=61776fef-4004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:24:d6:80:5c:14:f3:cd:70:50:74:82:44:
88:3d:08:f5:1b:17:3c:72:42:1f:4e:4e:e3:bb:d4:
56:c2:d3:8d:cd:60:9a:b3:f0:a8:9c:f4:b0:65:12:
8a:74:0e:2d:9e:cf:f8:20:59:ab:f0:e6:0b:49:9c:
a3:bd:bc:5c:f0:29:b2:3a:3d:24:0e:f2:4d:b9:76:
29:e6:1d:30:44:84:0e:d0:c5:b8:42:0c:d8:03:95:
6f:af:c7:39:2a:3a:76:30:83:4d:79:d0:ce:6a:ba:
b0:c1:a7:e6:b2:7d:aa:ac:20:e6:0c:ae:0c:70:14:
24:9c:3b:36:72:3b:02:0b:4d:f0:ff:89:5b:3a:e1:
52:71:b1:f0:09:6d:a8:0a:36:eb:da:e2:60:c5:38:
23:43:b4:e5:78:59:d0:91:d6:21:04:5e:37:ef:9b:
25:41:0d:c2:03:28:ef:d6:73:68:a5:75:d7:83:9e:
18:f2:1b:e3:22:e9:15:f0:ac:7c:4b:03:77:d1:f6:
5d:a3:f1:ce:7c:d6:0c:e2:9d:8a:5c:52:9c:17:db:
bf:b8:00:0f:90:d1:fe:d2:db:48:ba:32:7a:c2:31:
10:b8:ba:99:d8:81:73:f9:30:48:98:6a:6b:7a:32:
36:3c:9d:ad:26:55:da:71:3d:72:30:81:68:a1:52:
89:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:53:82:E1:E5:1C:20:9F:8E:CD:9F:46:8A:EE:5F:ED:43:AB:AD:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4092BACC360911EC82A02C16D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.104.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:08:69:e5:27:2a:2e:85:61:f9:e2:53:f0:aa:7a:57:1b:0d:
28:d1:fd:1e:5d:dc:ad:88:66:a9:d9:ae:3d:7d:f6:a4:36:d4:
da:a3:55:d2:d9:e8:f4:22:35:0a:0d:ae:6c:a6:3f:6d:08:64:
f3:e9:76:76:51:84:81:cd:83:47:b7:10:de:04:ed:b6:ba:e2:
e6:06:be:29:3e:0a:dd:8d:9f:9e:be:74:fd:e8:b3:6d:bb:8d:
29:95:7a:e2:fa:d4:f9:95:5f:20:24:62:b7:3a:a2:66:79:4d:
7b:e3:8a:23:9a:4a:a9:78:7f:3f:b2:20:dd:48:44:ba:bc:5c:
84:30:7c:e6:a4:03:e2:e6:c1:82:86:10:67:f5:f8:a0:6f:9b:
6c:00:aa:67:60:85:b5:16:d5:d9:12:2f:eb:ca:1f:67:56:80:
9b:4e:d0:69:91:1b:87:bc:bf:ab:8c:d6:ef:cd:0a:33:87:44:
d9:62:60:55:25:f9:73:8a:92:be:8e:54:73:08:81:a3:c2:09:
60:36:21:09:46:85:00:f7:84:60:f4:39:dd:32:8a:03:21:0a:
eb:f3:8e:71:ae:fd:cc:26:bc:cb:37:37:95:a2:3d:7c:d1:27:
6d:71:f0:3a:ad:ad:aa:7d:ad:67:f0:b7:06:60:20:bf:42:40:
04:55:07:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:06 2023 by rpki-client on console-ams.rpki-client.org