Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C80AAB68C5B11EB9A664943F8AEA228.roa
File: 6C80AAB68C5B11EB9A664943F8AEA228.roa (raw, json)
Hash identifier: slDYaZHjQbHG7q8dBbLWza5fb/kvTfJ7xK7eXq7iH14=
Subject key identifier: 53:5C:28:99:CB:3B:16:5A:93:4A:0E:F2:9E:8A:45:0E:C2:44:E1:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0554
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C80AAB68C5B11EB9A664943F8AEA228.roa
Signing time: Wed 24 Mar 2021 04:43:05 +0000
ROA not before: Wed 24 Mar 2021 04:43:01 +0000
ROA not after: Mon 26 Sep 2022 04:43:01 +0000
asID: 133199
IP address blocks: 154.197.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1364 (0x554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 04:43:01 2021 GMT
Not After : Sep 26 04:43:01 2022 GMT
Subject: CN=605ac359-2312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:78:07:f2:e4:d4:20:e7:16:b0:ab:42:67:03:
6a:b8:ba:42:31:20:60:0a:ba:b7:b2:41:97:f3:0a:
7e:0e:32:53:29:e7:83:d5:ab:d3:76:af:bc:0a:06:
9f:89:e7:b0:f5:31:cf:01:55:6a:86:4b:d2:69:b6:
6f:09:a0:62:f0:64:1b:4f:22:32:a6:84:88:78:e4:
07:e2:4d:05:22:fd:3b:7f:56:a2:5e:d8:5d:a0:09:
dd:36:b3:c8:44:10:77:4e:00:09:9c:b5:9a:1c:65:
08:a9:3f:f3:cf:fe:e4:6e:29:18:19:da:ba:a1:70:
7b:32:fe:97:53:dc:9c:6d:8e:f4:cc:c3:2d:2b:a1:
17:7c:c7:c0:79:c9:c2:bf:20:85:54:e1:2d:1e:be:
5f:f9:3e:03:94:af:81:13:0a:35:b7:fb:0f:f3:1d:
18:f1:19:66:33:70:65:bb:13:0b:a1:ae:32:74:dd:
2e:6c:13:8c:ba:df:99:00:0e:b8:e9:ce:43:31:9f:
58:8d:8b:1a:09:b1:63:72:e7:85:49:f0:f5:25:ca:
9c:c1:ce:09:97:e0:27:3c:f2:6a:3d:9f:b5:82:12:
02:79:23:09:8d:7f:c3:9c:ae:f6:74:46:e9:09:79:
74:68:bf:b7:a4:5a:12:e1:e0:25:67:00:cc:ee:ee:
6b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5C:28:99:CB:3B:16:5A:93:4A:0E:F2:9E:8A:45:0E:C2:44:E1:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C80AAB68C5B11EB9A664943F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.24.0/24
Signature Algorithm: sha256WithRSAEncryption
03:4a:6e:40:89:f3:b9:0e:c8:e7:d9:f1:bd:01:50:47:b9:77:
b8:a0:39:02:d2:3a:59:15:31:96:a0:8f:ba:f1:6b:d7:56:ea:
0d:8d:ae:00:f9:ba:ca:14:31:1c:8d:a1:06:0f:37:33:6e:30:
d6:a5:e4:45:b0:b8:9d:ef:fc:dc:3f:71:0c:0e:81:dc:48:19:
75:74:02:4e:3e:f6:98:8e:08:77:6a:b0:41:50:f7:85:1f:53:
f4:51:21:8a:a2:b6:86:e1:b2:d1:dd:66:32:1c:69:c9:b0:8a:
f1:88:a8:44:f9:dd:51:fd:5f:11:fc:5f:f5:9a:e2:67:f6:61:
c0:bc:04:b5:23:cb:23:50:b3:c4:0b:56:b2:97:e1:50:20:ec:
f5:0f:99:85:8f:d4:b1:8a:d1:f9:d4:d2:59:01:16:e6:09:9b:
98:21:b3:e0:ac:82:b3:3b:8a:3d:66:d6:2c:74:36:52:c1:7e:
00:5d:9e:77:9c:5b:bd:0f:34:57:01:0c:db:37:dc:91:1a:fd:
cb:a4:3c:58:5c:64:51:fa:cc:7e:59:68:c4:b9:97:62:bb:6a:
19:25:67:c1:bc:74:37:af:60:7b:17:17:8f:91:2a:bd:f8:ae:
93:e7:d0:cc:22:57:e8:5f:45:e1:f8:7b:1a:6b:d5:f0:59:0c:
55:f7:23:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-ams.rpki-client.org