Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68271148A19D11EF8473464D762E951A.roa
File: 68271148A19D11EF8473464D762E951A.roa (raw, json)
Hash identifier: v6EK5ks1R2+hPREPrzpaXSG3AaMJ9VmFhCiPeBABReY=
Subject key identifier: 6B:1B:33:2F:3C:83:92:03:C4:82:2E:28:D7:02:77:BA:24:B7:4A:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CCD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68271148A19D11EF8473464D762E951A.roa
Signing time: Wed 13 Nov 2024 08:58:10 +0000
ROA not before: Wed 13 Nov 2024 08:58:07 +0000
ROA not after: Sat 23 Nov 2024 08:58:07 +0000
asID: 7018
IP address blocks: 154.95.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68813 (0x10ccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 08:58:07 2024 GMT
Not After : Nov 23 08:58:07 2024 GMT
Subject: CN=67346a22-b7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3e:e7:b2:7e:80:b2:5d:d9:86:6d:59:64:b6:
1f:f2:48:fa:ae:7a:bf:0a:ef:08:b2:59:9e:27:db:
2b:c9:41:2d:37:19:dc:7b:29:f1:41:a3:06:f0:7b:
5e:92:9a:18:52:4f:61:c6:00:7b:9b:28:f9:db:f1:
89:54:7e:40:0c:2e:87:b5:5a:77:f4:5d:56:92:7e:
95:c5:f2:25:09:40:e0:3c:28:af:bb:f6:e0:7e:1d:
5b:0f:f0:cb:7c:10:74:63:56:fb:71:64:7b:96:c7:
8d:97:ca:0c:5b:f8:22:1c:41:37:ef:b2:1e:59:49:
f8:3c:27:a5:2a:32:6f:85:dd:bc:af:99:38:08:eb:
14:84:4b:86:6b:4b:69:ab:1b:05:de:ef:f8:de:39:
67:6f:21:df:28:5a:27:aa:d7:4d:ea:3e:01:37:4d:
2a:71:86:c0:d0:37:1a:38:da:0c:37:26:be:20:55:
ce:7a:84:e0:7f:eb:21:a6:a0:b1:dd:a2:af:23:1c:
19:a4:95:2f:2f:01:02:ae:57:1a:a7:06:72:67:8d:
c3:2b:f0:33:44:ad:b8:d4:ea:df:bc:85:e1:f1:9e:
8d:b7:93:8a:19:c6:00:f2:88:25:69:1d:99:23:86:
93:e3:22:76:60:0f:a0:ff:80:17:ae:37:fc:b2:ac:
15:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1B:33:2F:3C:83:92:03:C4:82:2E:28:D7:02:77:BA:24:B7:4A:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68271148A19D11EF8473464D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.8.0/21
Signature Algorithm: sha256WithRSAEncryption
81:fc:fb:60:eb:26:20:7e:d5:a0:7f:6d:ba:00:24:13:61:ea:
5c:27:8e:18:72:31:51:92:af:3b:b6:c9:bd:4d:e8:45:01:f5:
f8:d8:b7:db:d4:0f:ae:ae:3c:99:f0:8f:86:62:0f:5f:95:ca:
73:03:56:a5:3a:20:3f:db:7e:c4:77:96:ae:88:53:5a:ac:7f:
a2:03:06:5d:6c:b1:4c:26:bd:21:b6:27:d7:fe:08:5e:0b:08:
d6:93:7b:15:c7:4e:63:6e:c7:a8:93:77:b1:f5:53:6f:e8:48:
1c:4e:ce:de:dc:00:b6:01:0d:4c:1c:f6:e9:15:29:49:39:8d:
18:33:1e:a8:03:21:92:ef:89:fe:54:f2:91:df:1c:68:6a:63:
c7:0f:d1:4a:0b:ed:64:e0:71:a2:8f:5b:a1:82:a7:d0:67:91:
bc:78:d9:54:28:b2:f7:ef:33:e4:00:3c:b6:96:fb:35:96:e3:
82:06:3a:7a:ef:62:bc:d1:00:82:a4:e0:93:9d:de:ed:19:9d:
7b:7d:3f:64:60:d4:3c:f6:01:fa:5d:a5:15:93:c5:17:2b:49:
e1:a4:3e:70:65:f1:86:be:f7:5c:74:8d:84:47:7d:f3:7e:01:
eb:68:ea:54:c5:82:d4:57:4c:b5:0a:f1:2e:88:dd:6e:2d:67:
d6:84:20:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:19:11 2024 by rpki-client on console-ams.rpki-client.org