Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4358F9544C3B11ECA19C5F1BD8A014CE.roa
File: 4358F9544C3B11ECA19C5F1BD8A014CE.roa (raw, json)
Hash identifier: xsHDqqo879uZSj1GDscGdlBpRGNvcPA1RkDC6mHB6xk=
Subject key identifier: 33:76:6B:EB:AA:9A:30:92:63:3D:48:76:46:B8:27:34:9F:BE:EC:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1258
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4358F9544C3B11ECA19C5F1BD8A014CE.roa
Signing time: Tue 23 Nov 2021 08:56:36 +0000
ROA not before: Tue 23 Nov 2021 08:56:32 +0000
ROA not after: Wed 23 Nov 2022 08:56:32 +0000
asID: 54600
IP address blocks: 154.210.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4696 (0x1258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 08:56:32 2021 GMT
Not After : Nov 23 08:56:32 2022 GMT
Subject: CN=619cacc4-428d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:78:45:55:67:86:db:c2:1c:2c:cc:b5:13:
fa:c7:dc:a0:ef:72:85:69:e1:52:db:e2:92:ab:ff:
4d:85:c8:10:3a:cd:b9:1b:04:db:96:da:6a:70:df:
6b:61:ab:22:2f:c3:59:32:fc:06:f4:1a:7c:3e:25:
e3:08:c8:29:14:5b:14:f8:50:64:64:a5:46:7c:ac:
0a:bd:28:8f:2d:1a:db:76:51:10:f7:30:04:9f:2e:
8d:19:4c:f6:0b:71:74:a3:6f:db:a8:ea:4c:b5:6a:
5f:74:c2:a2:91:da:83:58:28:da:1f:06:17:f9:d5:
54:d2:2c:9c:60:43:f6:62:53:63:f3:9f:f0:25:e4:
73:8e:4b:2f:b4:26:d8:a3:4c:9a:43:1f:c8:2b:2e:
32:68:64:1a:01:2a:c6:ce:41:d3:51:b5:5e:56:bd:
37:5d:4a:a1:d0:ea:a4:4b:ed:30:d1:15:5b:af:ec:
18:fb:9e:51:32:87:22:76:75:df:08:f9:74:db:4a:
8a:6d:a2:90:87:bd:f4:13:8b:1c:f9:f1:03:5f:e1:
61:36:48:63:69:f3:91:19:6d:bd:9d:91:41:a4:ea:
74:5b:e3:ee:92:4f:e3:df:0d:9d:3e:9f:9c:36:21:
54:5c:9b:cd:cc:db:1e:9c:38:9b:03:ec:95:f5:fa:
b7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:76:6B:EB:AA:9A:30:92:63:3D:48:76:46:B8:27:34:9F:BE:EC:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4358F9544C3B11ECA19C5F1BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.84.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:30:3d:c6:fe:4d:66:e6:7d:8e:19:14:e6:8d:b0:c5:16:14:
0a:15:1b:ab:db:e9:91:d9:71:3e:5e:64:bc:1f:7d:1d:38:46:
16:b6:d0:e1:ca:98:59:d5:b7:7e:80:dc:bc:40:af:e1:05:8c:
99:88:08:55:3d:33:6d:a9:ae:85:43:3a:46:b0:e2:4e:36:73:
f9:bf:c1:dd:a8:25:90:f7:d0:8a:a0:d2:81:e7:94:48:e8:b4:
c3:03:70:1a:83:2a:e7:86:cc:0d:24:12:d8:23:d6:45:31:16:
2d:15:87:f6:87:4c:46:21:24:77:a1:6a:14:a8:b3:48:48:0c:
0b:64:60:21:a9:7c:aa:9e:b8:03:aa:db:51:d4:c8:44:bd:4a:
2e:7c:e3:a2:71:35:5e:e9:ad:4b:e4:54:f1:27:47:56:58:c9:
75:40:bb:60:11:6c:29:f1:f9:f6:3a:bf:a5:e7:b8:10:a7:0a:
22:5f:e9:fa:4a:62:fd:10:9d:98:8b:52:f2:ff:02:6b:a9:12:
ca:8a:b6:07:b2:33:f2:09:30:b8:6c:69:f4:1d:8c:d3:89:65:
91:8a:95:65:90:a4:fb:55:30:4e:3d:9c:af:b2:36:80:e8:fb:
ce:e1:e0:8a:b6:87:9f:8f:6a:15:0c:6a:a9:ca:1a:44:d0:f4:
7c:f7:54:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:06 2023 by rpki-client on console-ams.rpki-client.org