Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/722AA51816C411ECBE6E6670D8A014CE.roa
File: 722AA51816C411ECBE6E6670D8A014CE.roa (raw, json)
Hash identifier: 6Svsqby3jVGAfYXI88w+Fy5rnxZD9v1+Z2H9u17E5j0=
Subject key identifier: 7D:06:85:A9:33:FD:54:5C:72:1F:98:D1:FC:45:86:E2:6E:30:4D:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0C55
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/722AA51816C411ECBE6E6670D8A014CE.roa
Signing time: Thu 16 Sep 2021 08:02:33 +0000
ROA not before: Thu 16 Sep 2021 08:02:29 +0000
ROA not after: Wed 16 Nov 2022 08:02:29 +0000
asID: 135097
IP address blocks: 154.89.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3157 (0xc55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 16 08:02:29 2021 GMT
Not After : Nov 16 08:02:29 2022 GMT
Subject: CN=6142fa19-db25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b2:d6:f8:55:66:45:77:28:f4:df:77:73:77:
95:33:1f:ac:e1:3d:2d:5e:af:a1:f2:1d:7d:a0:b2:
94:76:03:35:0a:e8:9a:47:f6:3f:2a:64:ea:5b:74:
71:ba:36:af:3c:e1:71:e4:a1:d5:4e:73:77:e7:7d:
ea:b5:34:d9:ce:7d:96:1f:cf:47:2f:da:e5:4f:09:
6e:6d:df:6b:c4:c7:09:4b:5c:7a:82:79:45:9c:a9:
ce:54:a8:53:5d:7f:9a:b7:fd:64:07:11:ef:a2:f2:
d2:c9:a9:30:e0:18:75:31:d8:d8:73:d0:2b:f6:c0:
bd:43:e7:09:4a:91:f7:8a:fd:7e:41:4d:fa:3c:5d:
51:28:9c:db:98:31:e5:50:8a:01:17:aa:b1:56:3b:
14:53:4f:b6:5e:da:01:97:b9:d2:87:ac:b9:b9:3b:
15:a4:c6:28:13:42:3c:05:ac:d9:88:51:dd:4c:9e:
48:d2:2c:1b:74:7f:c7:b4:c2:c6:51:82:6e:cf:31:
29:0b:6b:a3:89:68:2a:c0:ca:af:ca:2e:68:0e:2b:
ac:ca:c7:d2:93:63:64:22:e9:b3:93:ba:e0:f4:a3:
1d:0b:ba:f6:0d:01:b7:9c:97:cc:79:a5:76:ee:f3:
56:e4:17:c8:72:7b:0a:e8:f5:89:7d:45:d8:e8:04:
f7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:06:85:A9:33:FD:54:5C:72:1F:98:D1:FC:45:86:E2:6E:30:4D:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/722AA51816C411ECBE6E6670D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.64.0/18
Signature Algorithm: sha256WithRSAEncryption
57:fb:81:90:e9:b8:2e:e6:b7:d1:af:93:8d:cb:62:b9:d8:ba:
4e:d4:40:1d:e0:7a:57:4c:08:83:a8:75:f3:57:1f:67:87:1c:
ed:e3:0e:08:e0:83:01:3f:bd:59:b4:2a:a9:65:d0:c3:12:d3:
e8:92:5e:4a:d8:13:47:9e:d5:50:9e:bb:bc:14:64:ca:39:f9:
aa:e0:2f:4a:d5:79:3e:e0:b0:87:37:6c:72:5f:0e:76:20:8e:
85:88:2f:b4:e9:69:b5:3f:78:24:3f:a0:8c:d1:42:bf:70:82:
e2:db:59:ef:a2:f1:19:6c:81:32:ad:24:2a:40:76:48:b6:60:
09:01:d7:d0:0c:6b:e3:80:7e:b4:c0:a2:ad:86:60:e9:94:3a:
94:2a:32:ac:6c:25:53:87:6f:42:45:3d:9a:44:f8:48:fc:7d:
03:d5:e1:9c:f7:50:be:dc:81:05:41:2b:84:aa:c5:64:c4:a1:
eb:74:50:3c:e5:96:ac:6a:6d:54:dd:e8:5f:ec:7f:03:75:42:
fc:83:9d:60:d7:4a:28:63:4d:4f:c8:39:2a:00:09:bf:be:12:
78:7a:82:09:7c:5e:87:1f:2f:b1:f1:43:b3:93:43:77:67:90:
0d:10:b4:19:d7:9c:67:9c:d1:a5:c4:7e:68:99:84:7b:97:a9:
13:88:f0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-fra.rpki-client.org