Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72C9BFC40BD211ECA26A353CD8A014CE.roa
File: 72C9BFC40BD211ECA26A353CD8A014CE.roa (raw, json)
Hash identifier: Op1Y5n0+MqHjIG8QD2NualalnSOihGNudSy6T5mInbQ=
Subject key identifier: 2E:FB:A9:49:5C:6E:BF:61:DD:6F:00:5C:B5:F6:D3:43:E2:13:7F:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0C15
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72C9BFC40BD211ECA26A353CD8A014CE.roa
Signing time: Thu 02 Sep 2021 09:45:04 +0000
ROA not before: Thu 02 Sep 2021 09:45:00 +0000
ROA not after: Wed 02 Nov 2022 09:45:00 +0000
asID: 140595
IP address blocks: 154.92.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3093 (0xc15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 2 09:45:00 2021 GMT
Not After : Nov 2 09:45:00 2022 GMT
Subject: CN=61309d20-a87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:89:e5:7d:cd:fb:a6:06:fa:6b:ec:14:0a:
09:37:24:9e:79:9e:d5:b5:f0:f5:e1:c1:d0:fd:72:
f5:fd:3b:12:7e:ed:cd:8f:86:16:d5:c4:64:f8:4b:
10:8d:fb:3f:1a:0e:5e:7f:02:ee:f5:02:3e:8a:9a:
0c:49:41:e1:73:8f:7a:d4:51:fc:b9:b9:5c:b6:70:
23:b3:e7:e8:ed:b9:18:2f:13:2b:d2:78:48:72:b2:
d5:55:61:25:70:36:bd:2e:5d:dd:04:67:c7:42:f7:
d0:03:d8:cd:32:80:9f:a6:3d:f3:c4:aa:59:91:9e:
15:99:a9:30:af:67:75:70:ae:1f:6f:47:d9:b9:01:
bd:20:24:f3:3b:bc:c8:4e:48:c9:04:62:50:9d:09:
7e:b2:5a:ab:d2:1b:67:a2:c1:2c:3c:3e:ba:b1:88:
20:21:97:67:68:ac:4e:e4:f3:a0:9c:2c:38:fd:7a:
88:c5:8c:ee:a9:a4:a7:50:14:87:32:3a:33:4e:5a:
48:0a:f2:57:eb:52:24:8d:69:0f:7e:da:a3:b0:ed:
45:ac:87:1e:b1:9c:22:4f:15:11:f0:4d:fb:dd:c1:
81:62:9a:7f:44:e9:0d:c9:a8:57:f5:90:ea:a2:d0:
ca:c9:47:de:b5:28:ba:bf:4f:eb:16:98:37:af:00:
44:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FB:A9:49:5C:6E:BF:61:DD:6F:00:5C:B5:F6:D3:43:E2:13:7F:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72C9BFC40BD211ECA26A353CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.104.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:cc:5c:f8:25:a4:97:d9:b7:f8:38:b4:36:d8:c0:b2:dd:f9:
f2:40:b1:58:06:3f:3c:39:27:26:1d:5c:1d:75:c8:2d:0f:5c:
23:1f:d4:ab:91:bb:da:36:fe:d5:cc:bd:b3:50:2b:69:e5:05:
f9:ba:d2:78:2f:56:de:be:68:55:09:45:ad:59:2f:75:3f:e2:
d6:c5:fc:28:83:bd:be:11:c9:a5:d6:f2:f2:ab:a9:02:53:0b:
2b:d0:a6:4f:fd:aa:73:cc:1d:b0:06:02:26:37:38:2e:24:31:
df:71:b9:9d:74:c8:03:a9:84:d2:5a:fa:12:bc:14:2c:14:6a:
4d:97:29:0e:fd:67:33:58:63:96:ae:e9:8e:7c:b9:10:e2:43:
d8:02:fd:0d:f9:a2:11:af:4c:d5:1d:f7:17:6c:e1:dd:da:a9:
cc:3d:05:2e:98:fe:fb:b2:ed:5f:00:7a:9d:0a:19:65:75:48:
84:77:7e:43:28:57:6b:97:8c:e2:0b:2c:ae:85:a7:7b:68:e4:
2d:1d:fd:e6:fc:a3:7f:92:a6:5c:32:f8:33:67:86:05:e5:e7:
e8:3c:1a:51:f7:f7:64:21:6e:af:7c:ce:1c:86:b1:92:89:f4:
33:e8:05:28:e0:fc:d2:79:8a:96:48:a5:49:81:05:10:96:15:
26:59:17:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-ams.rpki-client.org