Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AA3B1B4FFEF11EBB3968714D8A014CE.roa
File: 5AA3B1B4FFEF11EBB3968714D8A014CE.roa (raw, json)
Hash identifier: aYyeeb6HJTOd4CAfOgYAMCRrip230+muSvNYIAiDeOs=
Subject key identifier: 86:89:AA:74:88:B0:1C:AA:A2:25:05:08:2B:2A:29:48:DB:AE:11:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 08E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AA3B1B4FFEF11EBB3968714D8A014CE.roa
Signing time: Wed 18 Aug 2021 06:42:36 +0000
ROA not before: Wed 18 Aug 2021 06:42:28 +0000
ROA not after: Tue 18 Oct 2022 06:42:28 +0000
asID: 9009
IP address blocks: 154.194.10.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2275 (0x8e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 18 06:42:28 2021 GMT
Not After : Oct 18 06:42:28 2022 GMT
Subject: CN=611cabdc-d90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9f:03:43:84:24:33:ba:88:b2:04:f1:4a:3d:
a8:47:d8:d7:bc:f4:35:47:b9:95:96:16:02:94:47:
ce:7f:13:03:b6:08:e2:dc:5e:af:23:d8:c2:28:78:
dc:d3:12:52:02:59:7c:4c:57:a6:8f:79:66:09:df:
d8:2f:1b:4b:bd:44:1e:b3:8d:be:9b:da:ad:90:4f:
ea:69:3e:99:bd:84:b6:87:b6:e6:03:cc:f7:99:b9:
77:7b:6b:08:f1:c9:16:08:95:f1:42:e7:fe:33:2f:
e9:66:45:e8:51:7a:a4:d3:ce:22:a3:7a:66:1c:a6:
2d:6a:d9:7d:cf:7b:02:b6:f0:f9:22:4f:38:e1:b8:
64:72:a0:ad:05:28:4a:ee:85:a0:f3:af:03:02:2c:
6e:e0:ba:42:eb:c1:c4:54:59:b4:99:1b:3b:69:ac:
97:f9:71:bd:d9:08:30:cb:8f:8f:ea:40:39:7e:b3:
88:d4:fc:25:b0:cb:c4:fd:3a:49:88:ff:b4:73:08:
6a:fa:d3:3f:ea:21:e1:d8:93:25:82:24:3f:be:78:
d8:84:ac:8f:53:44:1d:13:01:82:6c:e4:f1:e0:d4:
4f:b5:cc:2d:f4:8a:7d:24:55:ca:55:e1:b0:6e:52:
f4:73:e8:7f:62:94:06:bd:b9:20:0c:87:b9:0d:bf:
53:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:89:AA:74:88:B0:1C:AA:A2:25:05:08:2B:2A:29:48:DB:AE:11:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AA3B1B4FFEF11EBB3968714D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.10.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:84:ab:13:0b:79:c3:ed:6b:ca:32:43:04:8f:38:64:cf:d7:
da:4c:10:d1:0a:db:1a:14:41:c1:51:1b:97:e8:58:71:be:5f:
6a:ef:f3:6b:9e:32:60:de:ce:e6:83:5e:81:77:64:a3:57:ec:
7a:8f:b2:d6:d8:28:14:0f:b5:d4:de:fd:34:28:57:20:cd:26:
5f:64:9b:67:6a:68:a6:e2:8c:45:5f:08:4c:87:28:e2:b0:d5:
9b:92:25:a3:e9:76:ec:a8:bf:0a:ea:cc:b5:c4:2a:5a:49:ae:
3c:fc:38:d9:fd:7a:4c:ea:b8:9d:12:7b:3d:d1:c1:8a:9f:a6:
00:f4:1c:d2:88:68:13:c9:e2:e2:f9:2f:ed:9a:8b:1b:d7:9e:
cf:21:aa:16:ee:8d:8b:06:f0:93:a8:39:2c:c3:cc:52:7c:40:
a2:e6:6c:01:07:eb:86:f9:9f:43:66:c8:8e:12:d3:4e:80:8b:
73:14:e1:d7:c1:bc:fc:fe:b3:02:a2:64:9c:ca:92:b5:97:46:
07:fe:1c:0b:8e:4a:37:ae:0a:39:2c:aa:d8:70:30:84:17:b8:
78:20:40:6f:8e:78:ce:a2:01:ca:ec:44:1a:c6:5f:6e:55:d1:
97:51:ff:4b:f7:ac:8f:c9:5b:c5:95:e5:25:18:da:72:f7:d2:
97:38:46:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-ams.rpki-client.org