Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AD35EAC5BBF11ECB8DD94DC5A40D577.roa
File: 4AD35EAC5BBF11ECB8DD94DC5A40D577.roa (raw, json)
Hash identifier: ZwJXwzTueRl/2NXGzlseyCFqgybN4Q0FO1UkLaoOuyQ=
Subject key identifier: 6F:E9:76:A8:0B:17:89:5C:C2:6D:CF:3C:6E:95:56:40:8D:C6:40:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 13D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AD35EAC5BBF11ECB8DD94DC5A40D577.roa
Signing time: Mon 13 Dec 2021 02:49:29 +0000
ROA not before: Mon 13 Dec 2021 02:49:26 +0000
ROA not after: Fri 30 Dec 2022 02:49:26 +0000
asID: 135097
IP address blocks: 154.204.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5073 (0x13d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 02:49:26 2021 GMT
Not After : Dec 30 02:49:26 2022 GMT
Subject: CN=61b6b4b9-5569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:70:31:42:0d:7b:19:f6:5d:b7:4c:bd:bc:8e:
20:40:db:ba:b8:0a:89:77:65:39:37:5d:35:fe:9c:
05:ca:4d:d9:29:43:df:60:83:5e:44:71:cc:39:af:
38:b6:28:3c:08:e9:dc:8c:99:c1:f4:f8:e5:5c:0a:
f3:d9:06:db:28:1f:4b:94:5b:e5:a8:b5:e5:1e:51:
24:f7:1b:47:ef:5f:59:94:6c:98:f6:31:40:02:12:
09:3d:73:c8:c5:dd:92:34:36:ae:0b:90:31:45:09:
92:bc:d8:6d:21:34:0d:ed:63:ce:99:a2:76:bf:61:
f9:d7:e5:3f:a6:ec:17:78:7d:50:e4:68:3c:f4:7d:
2a:4c:ec:3e:7e:70:f8:4f:e9:9a:7a:b5:44:c3:1d:
5d:31:e7:af:62:e4:37:36:07:53:1e:bb:5a:99:37:
e6:ff:d9:b9:d4:7e:37:62:cb:1e:5e:e6:8e:fa:74:
1f:65:c5:b7:f8:ea:81:d4:78:f5:86:d2:04:ae:bb:
b8:db:f1:84:17:e1:06:ab:f0:25:68:ff:d8:95:19:
08:bf:d2:6b:83:24:71:9e:2e:d0:d9:c3:d0:93:0b:
34:fd:0b:68:f2:d8:60:eb:bc:7e:7b:e2:73:8b:1b:
75:0f:c0:d0:07:05:80:7e:0c:d5:18:c7:cd:7a:b8:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E9:76:A8:0B:17:89:5C:C2:6D:CF:3C:6E:95:56:40:8D:C6:40:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AD35EAC5BBF11ECB8DD94DC5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.79.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f6:ba:13:d1:d5:80:57:a5:3c:ea:8d:07:17:f7:6b:f2:31:
82:3b:c1:ab:f9:7d:33:1b:ed:f9:8c:73:cd:c6:f7:4e:7e:45:
f7:77:51:71:f1:b9:b9:e2:55:0d:c9:03:cf:9b:79:f3:20:6c:
0f:09:86:e6:25:4b:78:cd:f1:88:86:ff:78:dc:6a:39:41:9a:
74:3f:48:cd:14:a3:03:f6:88:5f:0a:02:96:34:4e:a7:94:d3:
27:c2:4c:b6:d5:50:9f:03:c7:00:37:38:24:dd:5f:71:18:2b:
5d:5b:00:62:5a:2b:03:29:89:b2:35:94:46:5f:ad:33:da:ef:
fd:62:02:a5:97:aa:53:a4:93:aa:8a:44:50:2a:43:36:da:1c:
81:6d:7a:68:d9:41:29:25:33:0a:b5:b3:fe:2c:be:48:4f:87:
21:27:9f:e2:df:ad:05:7a:7d:f8:b2:cb:cd:30:e7:21:a6:c5:
8a:5b:bb:6b:98:b6:8b:8f:4b:1b:8f:76:3e:54:a3:73:1d:57:
32:ac:b0:28:d0:fb:3c:64:79:23:b1:0b:9b:1a:e9:5c:d9:4f:
31:09:86:a5:a0:79:83:25:57:9a:9d:6e:97:73:a2:33:09:2b:
3e:b8:6a:7c:1b:49:fc:4e:54:48:37:63:9c:51:7e:bf:30:37:
c3:38:8c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:06 2023 by rpki-client on console-ams.rpki-client.org