Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F2C1CCA125511ED9DE206E9F1222468.roa
File: 5F2C1CCA125511ED9DE206E9F1222468.roa (raw, json)
Hash identifier: hvgLy0DHCnXuTp7X+gXU9G0i2pYVyodtV9eluvMQswQ=
Subject key identifier: 60:8E:A9:A9:37:6E:EE:49:A2:54:1A:34:AD:80:0B:0F:E4:92:79:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 17FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F2C1CCA125511ED9DE206E9F1222468.roa
Signing time: Tue 02 Aug 2022 11:22:20 +0000
ROA not before: Tue 02 Aug 2022 11:22:16 +0000
ROA not after: Thu 10 Aug 2023 11:22:16 +0000
asID: 133861
IP address blocks: 154.204.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6142 (0x17fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 11:22:16 2022 GMT
Not After : Aug 10 11:22:16 2023 GMT
Subject: CN=62e908ec-4036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:de:6b:c7:08:3b:0b:d1:07:50:7c:21:28:75:
0e:4c:8b:62:62:7c:66:6d:af:bd:0d:70:97:c8:be:
f8:fc:54:04:9d:54:b6:b8:4c:79:af:44:34:f8:45:
c8:32:c0:02:dc:0b:6d:99:c9:ed:ce:82:c0:1e:ed:
56:01:24:09:fe:5a:be:a9:92:3c:a4:23:52:51:c1:
9a:e6:d5:a1:05:cd:0c:c7:98:54:4f:a3:5c:e2:ee:
31:cd:fd:1e:8b:b4:cc:f6:0e:6c:da:bf:2e:79:9d:
a7:7d:19:5c:fc:90:17:b4:2e:b2:d0:22:5e:2c:fe:
3b:8b:f1:84:7c:04:68:c2:bf:73:2d:bb:22:59:87:
de:60:f7:54:82:a3:97:56:b0:ad:2c:81:07:42:16:
eb:89:8f:3a:6a:7a:04:18:2f:dc:63:31:f0:45:28:
52:1f:ca:91:3c:b6:3a:ed:d0:99:b6:3a:cc:b1:fe:
5a:2b:fb:41:ec:03:29:25:02:73:72:1d:94:6d:b5:
4c:0d:5a:06:83:7b:ab:45:7f:21:49:cf:1e:6d:6a:
92:b0:93:1a:b7:99:ef:2d:2e:31:55:96:36:16:a5:
d2:c1:1e:e5:92:86:92:88:3e:9f:76:0f:34:28:2d:
15:80:57:9b:44:bc:64:46:1f:5d:7c:53:e2:52:a8:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8E:A9:A9:37:6E:EE:49:A2:54:1A:34:AD:80:0B:0F:E4:92:79:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F2C1CCA125511ED9DE206E9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.49.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:da:33:1d:86:40:5b:37:02:20:25:ae:72:e8:c1:df:17:10:
4b:fa:dc:67:68:1a:0a:fd:03:f9:f0:71:5a:a8:a1:7f:b6:72:
10:80:13:ae:39:67:e9:04:34:cf:7e:2c:d7:ba:cc:99:d0:68:
d2:56:68:42:2d:5d:19:e5:16:1c:07:69:36:ff:bf:ee:6a:63:
66:0f:bb:3e:9d:68:75:5e:94:2c:b1:eb:ca:66:93:56:98:6c:
05:94:8e:d5:6d:dd:02:ff:07:51:d2:bc:c1:5e:da:a7:78:89:
06:37:fb:57:6d:fe:de:6e:d3:e8:de:6d:b1:a9:3b:37:ce:26:
cb:e2:17:fa:c3:e9:78:a1:9f:f0:66:6b:15:e5:36:bd:d3:91:
38:22:e2:03:c5:eb:c8:fa:1a:56:2f:51:a7:d1:04:29:85:64:
75:fd:ab:f3:a0:27:d1:49:c0:f2:85:20:01:74:11:89:ea:0f:
9b:36:2c:e8:22:b7:d8:f6:23:45:91:0d:52:e2:2b:df:a8:32:
26:63:c6:b2:d7:f1:40:76:d0:c7:de:67:19:99:22:6b:90:42:
ef:8d:d0:41:53:e8:9d:eb:5e:17:2a:6a:e0:37:6c:40:a1:55:
f2:4d:66:11:e7:ae:18:c0:e0:88:52:25:63:4a:26:ef:5d:08:
e6:7d:81:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 11 01:22:42 2023 by rpki-client on console-fra.rpki-client.org