Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48A0DBFCE57F11EBA693C82CF8AEA228.roa
File: 48A0DBFCE57F11EBA693C82CF8AEA228.roa (raw, json)
Hash identifier: 4dOxWIm8WvscFv/kxVyDaaahR0Vkxy9iQpTKeTAi+7E=
Subject key identifier: EE:C4:EA:F3:0D:BB:F1:11:55:AC:35:94:EA:E7:62:9F:B5:B4:D7:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 07DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48A0DBFCE57F11EBA693C82CF8AEA228.roa
Signing time: Thu 15 Jul 2021 15:14:01 +0000
ROA not before: Thu 15 Jul 2021 15:13:56 +0000
ROA not after: Sat 09 Jul 2022 15:13:56 +0000
asID: 397630
IP address blocks: 154.202.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2010 (0x7da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:13:56 2021 GMT
Not After : Jul 9 15:13:56 2022 GMT
Subject: CN=60f050b9-6bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:a2:2e:c7:09:99:91:f7:0b:01:b9:d8:98:
e4:f2:80:7b:58:60:30:26:4a:6d:5a:2e:77:67:3f:
5a:ad:8b:92:a4:14:51:35:85:5c:f5:fe:3a:e3:6f:
cc:52:af:42:86:f9:ec:9d:48:f0:b0:ac:ea:ab:d1:
b9:32:11:1e:34:a4:1e:6f:fe:78:40:7a:d9:6e:2a:
32:18:49:55:7c:0e:81:1a:2e:88:45:08:0f:c5:55:
0d:2f:81:5d:75:34:66:a2:2f:d5:c1:34:84:de:c8:
26:48:61:43:4d:b1:26:32:38:44:43:70:c1:9f:3d:
90:6b:93:9c:70:cc:f2:ae:c2:54:91:bf:ad:cb:d9:
8b:74:f7:a4:05:42:30:71:80:6e:7e:41:c7:47:41:
03:a8:7f:ec:7d:de:bf:10:39:1a:f8:37:be:eb:a6:
5a:5d:ba:18:d4:4f:50:d2:4a:df:5c:61:35:50:ec:
ac:d3:e8:d4:d7:73:99:c6:ef:82:ac:68:52:97:69:
a7:dd:b8:6b:29:3c:88:2f:0e:8b:b5:f1:f5:81:13:
10:24:6e:6a:39:e9:a4:90:02:00:71:b1:fe:e2:c4:
a2:bf:16:08:2e:84:cb:14:a8:b2:35:ce:c3:1a:73:
a9:21:20:cf:12:dc:d6:8e:70:2e:ae:84:9b:a6:ad:
a3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C4:EA:F3:0D:BB:F1:11:55:AC:35:94:EA:E7:62:9F:B5:B4:D7:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48A0DBFCE57F11EBA693C82CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.109.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:e9:cc:c5:4d:d8:82:24:d7:2b:04:6c:df:a9:a6:0a:d9:ff:
97:b7:85:6a:1c:b5:df:2e:86:00:75:5f:2a:3b:f3:79:ba:12:
7d:5e:cc:73:6f:2a:92:10:be:e2:b4:d7:42:c3:54:d0:22:8e:
48:06:8b:57:4f:60:2f:6e:5d:59:08:97:fc:d0:87:c7:a7:cb:
e8:a1:90:5c:8b:b4:e3:35:6d:d0:a2:3b:d2:8b:e9:01:af:f9:
11:ab:a8:e9:66:ab:db:4c:6f:a2:cc:80:6c:c8:b9:32:24:12:
9c:72:54:a5:bf:6f:1b:0b:fa:b2:ef:76:6f:63:46:56:cb:c6:
1d:45:8e:12:90:fd:a6:8d:9e:e9:20:27:08:ae:1e:6d:34:da:
08:48:a2:5e:f9:bb:e9:59:5a:22:c2:39:61:be:1b:91:08:e5:
11:85:6c:b1:bd:a0:b9:da:3a:f0:f2:c0:65:eb:24:35:b5:49:
69:a5:b0:00:fc:94:43:f1:37:39:2e:a7:19:be:46:b7:c3:78:
ca:47:e6:dc:97:c9:da:3c:be:19:f7:27:9b:21:65:3f:7e:aa:
dc:be:36:35:82:b5:92:95:06:73:f5:cb:2c:c4:0e:50:4a:da:
8d:a0:3b:88:0c:51:46:77:2f:92:54:49:a0:44:1e:e8:67:da:
c8:cb:ff:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-fra.rpki-client.org