Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48482ED4391D11ECAD16326DD8A014CE.roa
File: 48482ED4391D11ECAD16326DD8A014CE.roa (raw, json)
Hash identifier: 85Ur8GWVPutSpaPWgvATT0f0pIEdubSx5u7Ri+qo4Cs=
Subject key identifier: 3F:84:E2:33:C6:C6:A7:4C:07:2D:D1:9C:BC:6A:E3:CE:30:DF:A2:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0CBE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48482ED4391D11ECAD16326DD8A014CE.roa
Signing time: Sat 30 Oct 2021 01:04:07 +0000
ROA not before: Sat 30 Oct 2021 01:04:03 +0000
ROA not after: Sun 30 Oct 2022 01:04:03 +0000
asID: 139879
IP address blocks: 154.198.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3262 (0xcbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 30 01:04:03 2021 GMT
Not After : Oct 30 01:04:03 2022 GMT
Subject: CN=617c9a07-bfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:9f:ba:60:0e:0d:c1:da:8c:0f:04:f4:d1:
be:84:43:7b:39:d8:7d:3d:d6:be:20:22:b7:e3:de:
dc:11:62:e9:8b:28:c4:67:d8:7a:30:51:dc:3a:f2:
45:df:f9:2a:bc:ad:5e:87:39:c5:73:c1:c7:40:ca:
b7:44:e5:e8:98:4f:12:9f:c1:35:8a:47:5c:81:52:
01:21:f6:cc:3d:0a:98:ee:ce:ba:43:05:98:58:ac:
4f:3a:d9:fd:c6:58:58:ad:e3:a5:0c:ef:6b:41:4e:
8b:02:4d:49:40:c8:bc:f9:91:20:d7:fb:2b:04:31:
e9:41:43:be:8c:24:f1:d2:e2:50:27:9c:9c:d9:5e:
fe:80:4c:59:70:4a:9e:63:80:cd:bf:3d:0f:5b:32:
15:a5:2e:28:a4:ea:8c:f8:be:c8:40:cb:7b:fb:7b:
99:2e:c3:f8:47:88:70:24:f1:49:88:6a:9a:ae:f6:
f7:6e:07:67:18:be:44:1b:b4:b0:a5:88:43:c1:50:
4f:1c:93:a8:fd:b1:cc:94:62:14:09:cd:83:ec:13:
a8:23:75:76:97:ce:eb:3e:ab:ce:7c:0b:f5:85:69:
48:48:79:06:50:dc:ab:f6:f2:38:23:63:9d:d4:97:
ce:3f:be:26:62:74:46:61:ae:0a:4a:52:f5:99:14:
4a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:84:E2:33:C6:C6:A7:4C:07:2D:D1:9C:BC:6A:E3:CE:30:DF:A2:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48482ED4391D11ECAD16326DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.64.0/18
Signature Algorithm: sha256WithRSAEncryption
57:0d:51:a6:54:1f:18:18:74:dc:b2:16:96:c0:c1:77:b7:c7:
63:ba:88:42:37:22:19:f4:d1:b2:8a:d5:54:a2:e0:24:32:9e:
57:27:5d:a6:20:ba:e0:d2:83:45:4f:d1:ba:00:94:98:4f:f0:
fb:9d:e7:17:09:35:4b:74:46:44:85:49:d1:d6:16:2e:23:88:
1b:09:cd:a5:6b:05:b2:eb:22:a0:3d:c2:8d:1e:e6:e7:3d:90:
2b:0e:cb:f4:c2:4c:e1:2f:51:31:3c:f1:68:fb:df:6d:87:1c:
c3:6e:fc:05:e2:a4:3d:ba:ba:37:76:cc:b6:27:92:b8:3a:7b:
45:12:dc:8e:56:52:47:c6:ca:d3:f2:7d:8d:b2:4b:25:a5:9c:
ec:44:fa:06:7d:5a:35:db:58:18:46:dc:b5:81:9b:7b:ab:6d:
62:0b:45:b8:4f:ce:2d:79:c1:a6:93:8d:85:ca:80:bd:3d:22:
13:34:a2:05:7b:c4:5f:07:e6:09:c0:22:cc:b6:69:80:66:e6:
2d:7d:e0:08:65:4f:b8:b0:ff:c8:3e:4b:7d:21:8a:50:c9:83:
05:3c:86:5b:29:7f:a2:84:98:17:f6:53:b5:18:b5:6a:ab:c6:
2b:60:6e:eb:3e:39:e7:17:3c:26:6b:7d:c4:df:0c:42:2e:90:
28:7b:5f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:06 2023 by rpki-client on console-ams.rpki-client.org