Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4798498657CE11ECAB11A6B05A40D577.roa
File: 4798498657CE11ECAB11A6B05A40D577.roa (raw, json)
Hash identifier: w11ewpsXwtSmu+4RLFg1p+qLQ7iRW+C5r/oPaPJzO50=
Subject key identifier: C6:2C:66:6F:07:5D:09:12:68:2B:05:CC:B0:2B:E0:AA:0D:37:12:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1313
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4798498657CE11ECAB11A6B05A40D577.roa
Signing time: Wed 08 Dec 2021 02:26:42 +0000
ROA not before: Wed 08 Dec 2021 02:26:39 +0000
ROA not after: Fri 30 Dec 2022 02:26:39 +0000
asID: 9009
IP address blocks: 154.95.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4883 (0x1313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 8 02:26:39 2021 GMT
Not After : Dec 30 02:26:39 2022 GMT
Subject: CN=61b017e2-653c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:dd:fd:2b:9f:67:18:5a:59:60:6d:eb:e6:
ed:a3:51:31:bb:96:5d:f8:1e:33:e0:93:11:84:0f:
b2:0c:54:06:50:a1:80:62:f5:3f:a3:85:55:d5:e6:
43:36:aa:cd:62:54:a7:f6:9c:6c:67:7b:38:e4:c4:
27:fd:1d:ce:c3:da:11:7e:ad:67:6c:d6:7d:8a:70:
5c:c1:b4:02:38:74:ce:7f:16:ed:01:e5:b7:a5:e2:
45:58:61:ee:b6:f9:18:85:19:56:b6:be:4a:d6:44:
8a:fb:69:1c:ed:d4:c1:08:5c:41:fd:ae:f9:63:70:
cd:b7:79:18:29:47:e5:f7:ce:87:15:d6:8c:c8:d2:
7b:62:ea:d4:df:65:c1:a7:e4:4f:be:37:4f:36:17:
bc:50:9d:e7:38:30:20:8a:60:47:2b:4b:fc:33:80:
62:84:26:75:33:26:c0:29:d9:db:47:bf:39:65:c7:
52:d1:5a:66:a3:34:a9:65:60:b4:f0:1e:78:a7:54:
44:8e:e5:23:f2:eb:72:11:2e:b7:a3:81:cd:a6:a6:
54:a7:b4:ff:ba:7d:18:0e:60:47:b3:8c:45:ad:db:
b0:72:94:42:98:a3:9a:5b:7f:18:ed:62:5b:6e:79:
eb:6f:e7:5c:ba:5d:5b:77:e0:5b:36:31:f6:49:b4:
ad:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2C:66:6F:07:5D:09:12:68:2B:05:CC:B0:2B:E0:AA:0D:37:12:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4798498657CE11ECAB11A6B05A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.38.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:12:dd:4f:a1:e3:46:3c:58:fc:fe:ac:29:1d:4c:2a:4d:e5:
e6:14:75:f4:8e:ac:e2:cb:28:38:15:47:83:cb:7e:82:97:17:
be:25:63:2e:8d:54:26:34:d6:0f:eb:79:cb:b9:eb:22:d3:06:
74:3b:ae:8f:68:cc:37:56:95:1a:64:82:ca:82:58:62:35:88:
1f:68:7a:f5:cf:81:46:91:a5:d3:9e:16:d6:e6:f6:96:1c:3d:
bd:26:d0:89:40:59:a9:fc:5a:29:49:76:b9:d4:a5:2e:49:31:
d6:3b:e2:98:59:0e:7c:0b:c9:5b:88:dd:59:7e:a1:53:ef:7e:
fa:02:da:f8:95:6f:36:47:c5:48:d0:33:3e:0e:8a:c2:0f:01:
d0:d4:4b:9f:a3:57:a4:5e:29:ec:80:ec:77:bb:07:6d:2d:00:
ce:59:1b:da:48:3f:89:29:31:ed:50:4f:94:04:38:dd:81:f6:
61:e4:e0:39:55:8e:78:79:46:ee:11:87:16:0b:f9:13:f1:65:
d6:53:28:22:2d:c9:ae:7a:70:cd:8e:dd:63:57:1e:dd:c5:d8:
a7:ab:4c:24:2d:ce:92:fc:f8:dc:e7:f8:91:e9:ff:4a:14:f7:
a7:5d:93:e6:69:90:4f:3a:6b:34:d1:5b:55:73:9b:5c:7a:b0:
13:11:2c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-fra.rpki-client.org