Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BEDDFF05BB611EC9BE4A4C25A40D577.roa
File: 4BEDDFF05BB611EC9BE4A4C25A40D577.roa (raw, json)
Hash identifier: ljvVaa9ru0rh9BicOoFUZcVAw8LbMnXu61GXdB/AEio=
Subject key identifier: 7E:02:32:98:1A:56:20:0B:9D:5E:6E:44:94:64:EB:57:A8:F6:76:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 13A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BEDDFF05BB611EC9BE4A4C25A40D577.roa
Signing time: Mon 13 Dec 2021 01:45:06 +0000
ROA not before: Mon 13 Dec 2021 01:45:02 +0000
ROA not after: Fri 30 Dec 2022 01:45:02 +0000
asID: 13097
IP address blocks: 154.204.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5033 (0x13a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 01:45:02 2021 GMT
Not After : Dec 30 01:45:02 2022 GMT
Subject: CN=61b6a5a2-af9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:74:af:14:51:1a:18:07:f2:4b:76:16:af:
46:a8:be:2d:bd:e5:a3:33:26:d3:e4:00:5a:d7:31:
07:d4:2e:58:5f:2c:51:08:78:6d:d9:ea:cf:3f:fd:
62:7b:0a:15:ff:de:bf:dd:8a:1f:60:33:9f:d2:48:
04:e3:f4:80:95:2a:55:20:02:45:53:3f:fb:6f:35:
0f:08:93:87:79:4b:5b:86:2e:f9:10:7f:8c:4b:dd:
27:0a:1c:6c:01:3b:17:67:35:93:de:7c:74:85:47:
b8:44:b0:91:64:87:98:c8:dd:39:5c:b1:b2:65:b9:
8e:ea:58:a9:6c:7b:1a:c5:7a:f4:04:97:bf:a7:7e:
1d:0a:75:7b:4e:6f:51:27:f9:11:05:78:78:13:6c:
4d:a6:25:30:8a:12:4a:4b:96:e1:12:26:7d:45:20:
28:0d:b9:d7:94:cb:03:3c:4e:da:84:01:e8:03:85:
0b:a7:c0:39:58:34:7f:8e:ed:b0:b1:55:b1:f3:8d:
23:ad:04:18:1b:93:a5:2e:3f:6a:6f:32:7a:3a:66:
31:90:7a:aa:b8:89:14:b7:e3:ca:a7:93:52:77:05:
3c:2a:5e:db:cd:62:57:38:df:7e:03:a0:43:dc:fc:
08:55:f0:73:d1:ba:2b:69:71:47:66:cc:4f:7a:5f:
e9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:02:32:98:1A:56:20:0B:9D:5E:6E:44:94:64:EB:57:A8:F6:76:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BEDDFF05BB611EC9BE4A4C25A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.69.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:fa:c1:b4:66:d8:ad:67:d3:63:10:c2:eb:3c:7d:34:5f:3d:
c5:f1:f5:20:87:69:ed:30:15:9b:ab:1b:39:a1:97:0a:71:06:
9c:0f:9c:ed:6c:74:a6:b2:6f:0a:12:6f:4d:56:04:34:af:ba:
b9:24:66:97:17:4e:46:0f:03:5a:17:76:9a:d3:66:71:39:ff:
c3:a3:1b:bd:52:ec:41:ae:12:99:14:49:0e:27:96:a7:fe:bb:
ce:d8:43:e0:31:f6:9a:e4:20:c2:a5:5f:58:f6:e5:37:36:71:
ca:d0:79:5d:e9:69:b3:d8:25:cf:8e:18:31:08:44:48:5d:50:
a4:3b:68:69:18:00:59:e8:34:03:93:62:27:ed:db:d1:70:17:
f6:b9:4a:84:30:5b:07:6a:87:6f:e5:65:20:9c:d0:48:4d:34:
f1:75:a5:a6:ee:9b:ef:62:b6:4e:d9:ce:73:57:46:59:c5:f6:
38:fb:a6:0a:d5:3f:8b:c6:53:b4:20:98:69:b5:8f:fa:1c:a0:
c6:ad:0d:f4:c6:f0:8b:ee:a0:43:a3:72:7b:e3:69:fb:b9:6c:
2e:7a:dc:fa:d4:9e:ee:9f:7b:5c:f2:eb:3a:84:4a:c0:87:57:
fd:db:b4:ea:d1:70:8c:20:4e:0b:31:ba:e2:09:e2:7e:74:40:
3f:fc:58:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:06 2023 by rpki-client on console-ams.rpki-client.org