Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B576E70E57C11EBA6CC7F28F8AEA228.roa
File: 6B576E70E57C11EBA6CC7F28F8AEA228.roa (raw, json)
Hash identifier: NdQdgxpZlJeD+sz27sfRCr23yx4cfVP1p6Hs+Hs/V4w=
Subject key identifier: 62:DB:44:8C:8B:6A:90:3B:27:DB:04:DC:DD:59:53:7E:11:4A:79:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 07AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B576E70E57C11EBA6CC7F28F8AEA228.roa
Signing time: Thu 15 Jul 2021 14:53:31 +0000
ROA not before: Thu 15 Jul 2021 14:53:26 +0000
ROA not after: Sat 09 Jul 2022 14:53:26 +0000
asID: 397630
IP address blocks: 154.201.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1966 (0x7ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 14:53:26 2021 GMT
Not After : Jul 9 14:53:26 2022 GMT
Subject: CN=60f04bea-37bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:d7:15:55:32:75:c7:6d:f8:35:cf:3f:e4:
f1:ed:c9:b3:e7:77:3f:bb:06:89:42:a9:db:e2:e5:
28:78:61:56:95:ae:0d:17:22:4f:ad:18:f9:36:d4:
fa:88:b0:4e:75:32:61:0c:53:71:43:11:8e:2e:bb:
05:98:cf:3c:28:f8:2c:6c:90:e1:e7:63:e9:d4:3a:
2e:0c:c2:36:c4:06:1a:48:b7:64:1b:d3:01:f5:e3:
5a:af:88:03:dd:a9:30:51:7f:8e:97:8f:1a:fd:9b:
27:d7:9b:3c:19:6a:e9:89:f5:aa:5b:7e:d4:b5:d3:
14:f6:a8:25:4e:1a:5e:cf:11:b8:78:d6:02:20:59:
13:61:78:18:1f:74:52:c7:0d:96:0e:0f:a5:9c:89:
ec:2c:bd:90:37:70:62:0d:a5:32:d2:a6:59:8e:dc:
54:fe:30:f8:14:33:a5:c9:4d:2f:a9:1f:98:0b:7b:
e4:af:67:4d:e7:d1:69:f2:8e:74:cb:48:f2:15:05:
77:0e:0e:1c:c0:15:a7:0e:58:e6:5b:c4:e6:26:6d:
ff:78:cb:d7:a9:67:38:9b:2b:3b:a8:d4:20:db:f2:
e6:ac:81:35:bd:c9:49:c1:5f:ad:72:c3:b3:47:2a:
73:f1:16:b7:50:47:fb:2f:36:93:2e:72:95:9f:75:
66:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DB:44:8C:8B:6A:90:3B:27:DB:04:DC:DD:59:53:7E:11:4A:79:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B576E70E57C11EBA6CC7F28F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.44.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:d5:50:67:c2:07:24:69:f1:a1:48:cd:16:e8:8f:f5:f7:50:
db:2b:03:bd:a3:e8:50:5e:91:d7:43:ad:6c:e6:cc:13:29:b4:
19:2b:85:43:4d:9d:a8:ac:0f:dc:a1:11:89:81:f3:46:18:e9:
af:61:22:65:4d:96:4b:ac:fa:77:22:a3:c0:ef:34:b3:18:7a:
60:83:04:02:ce:b9:87:66:1d:24:73:5c:41:16:49:03:8b:08:
15:08:ad:54:88:a0:9c:21:b0:b4:3d:fa:15:02:2e:1b:a6:b2:
20:bd:c2:3d:2f:39:1a:18:a7:38:2f:8c:8d:18:09:a5:09:83:
f3:e6:c4:6c:73:11:85:1f:cc:4e:a3:a7:5b:6e:47:b5:cd:2b:
46:e9:fa:aa:59:d1:c2:60:42:3d:8c:b4:6e:5b:aa:36:14:1f:
9a:2f:41:11:12:2b:1b:7e:02:d5:4f:55:c4:99:14:e9:c7:b2:
31:a6:43:ba:08:ef:ae:4e:58:e7:01:47:10:11:d5:d0:69:bd:
77:e1:dc:c7:43:43:21:43:2c:e8:6c:10:dd:4a:70:0a:61:f5:
c3:17:31:7a:85:8c:9c:89:70:e4:6e:bf:9b:38:a8:29:53:16:
a6:24:da:cf:f3:5e:65:54:8a:c0:da:7a:ff:82:c4:d2:3e:97:
ba:74:7c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-fra.rpki-client.org