Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/643DCDA2301A11EDB6481D8DF1222468.roa
File: 643DCDA2301A11EDB6481D8DF1222468.roa (raw, json)
Hash identifier: m8cGooeSLIb6snfxDKuIl4gV7gB7gowblZKLJicn73s=
Subject key identifier: 56:5A:95:D7:69:71:E2:AD:95:46:78:85:EB:1A:59:74:5C:09:BF:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 189F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/643DCDA2301A11EDB6481D8DF1222468.roa
Signing time: Fri 09 Sep 2022 08:35:43 +0000
ROA not before: Fri 09 Sep 2022 08:35:39 +0000
ROA not after: Fri 30 Dec 2022 08:35:39 +0000
asID: 35916
IP address blocks: 154.95.56.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6303 (0x189f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 9 08:35:39 2022 GMT
Not After : Dec 30 08:35:39 2022 GMT
Subject: CN=631afadf-5f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:81:a6:d7:90:00:6a:08:75:2e:b9:33:ec:
35:2c:d0:0c:90:7e:3a:c7:ad:db:ff:88:e2:40:0a:
72:b3:f4:4b:5b:59:ba:6b:93:13:9d:48:a0:63:47:
4b:30:26:a0:f6:ef:7a:93:65:67:04:03:f5:97:cf:
05:66:64:c1:a9:21:c1:b3:31:b0:11:48:30:90:15:
e6:fa:ab:ec:06:6e:3d:69:51:07:37:e1:55:51:37:
6a:f7:79:c5:88:92:50:ad:24:90:07:5a:9c:c2:66:
d2:02:b0:0f:33:92:6c:c7:49:fa:02:ea:ef:bb:59:
ab:e0:01:66:22:c4:cb:dd:88:32:46:5e:fc:67:59:
b3:2c:15:52:bc:5f:46:52:7c:88:54:99:18:1b:59:
3e:4e:d1:73:b8:a7:74:43:5f:32:4c:3c:43:c2:de:
b2:a9:9d:b0:7d:71:b0:01:92:eb:6a:a6:9b:d4:66:
af:6e:f3:6e:f8:0e:fa:c3:d4:c3:71:da:14:69:3a:
e7:af:4f:03:48:22:7b:e6:6b:e5:49:f0:12:cc:73:
62:a9:4a:c3:4c:8c:9f:6b:b0:22:60:2f:5c:91:6d:
09:9f:4d:28:33:95:0d:3c:56:d8:d3:53:ae:db:43:
3b:86:5c:9b:09:02:aa:29:1f:5d:f2:c3:7c:27:81:
31:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5A:95:D7:69:71:E2:AD:95:46:78:85:EB:1A:59:74:5C:09:BF:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/643DCDA2301A11EDB6481D8DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.56.0/21
Signature Algorithm: sha256WithRSAEncryption
d5:7b:47:73:c6:de:aa:4a:a4:45:0e:cd:0f:42:39:58:88:55:
07:4d:7b:0e:eb:2b:c7:ed:b0:a4:79:c2:52:f0:75:cf:85:48:
0c:36:1b:48:42:6e:27:f4:2b:04:32:88:04:43:e7:e5:9e:ed:
13:24:e9:c6:46:4a:27:c9:b1:98:82:3d:51:1a:84:94:01:da:
bb:a9:6a:8b:e8:db:c1:94:52:bd:19:28:f5:7c:7e:6f:49:cd:
40:75:8a:8a:9c:7d:6c:e7:4e:a3:bb:eb:28:fb:dc:0e:79:41:
84:5c:fd:95:95:96:42:63:cb:ff:c7:48:60:b0:95:46:65:52:
af:e5:08:46:2b:fc:80:2e:6b:2e:7a:95:68:6c:a3:59:5a:5a:
0d:80:89:7d:b0:ac:30:01:34:42:b5:ef:fd:37:c1:a1:62:27:
a2:09:05:dd:0e:39:a5:0d:48:57:eb:1f:c1:7a:86:15:d0:ee:
51:68:e5:5c:d6:3e:56:5e:5e:8c:b4:38:cf:db:cd:c2:94:8f:
ec:62:67:0c:5f:e1:a2:9b:b0:0b:8d:7d:11:24:73:11:ae:5f:
55:a0:52:8d:6b:c6:3a:3a:32:06:c3:36:c4:e2:dc:a8:12:8e:
a8:d9:29:93:6a:2e:e6:38:38:84:8c:7d:9c:d1:8b:45:da:54:
4d:07:7e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-fra.rpki-client.org