Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AD437DAF4FC11EBB9031B7BD8A014CE.roa
File: 8AD437DAF4FC11EBB9031B7BD8A014CE.roa (raw, json)
Hash identifier: aORBrhhYlw9MAmDCsnKZvnwaU3bto93xpTA6MCd2Vm4=
Subject key identifier: F0:64:01:AE:07:A1:E6:57:59:95:08:E3:86:A5:9D:14:63:26:77:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 087D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AD437DAF4FC11EBB9031B7BD8A014CE.roa
Signing time: Wed 04 Aug 2021 08:18:56 +0000
ROA not before: Wed 04 Aug 2021 08:18:51 +0000
ROA not after: Sun 04 Sep 2022 08:18:51 +0000
asID: 398823
IP address blocks: 154.81.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2173 (0x87d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 4 08:18:51 2021 GMT
Not After : Sep 4 08:18:51 2022 GMT
Subject: CN=610a4d70-24c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4a:cf:89:18:19:f6:b6:a0:b6:24:db:3d:fd:
9b:26:92:2d:25:aa:61:e1:cc:af:0d:a2:3c:49:fc:
8b:a0:45:55:5d:12:30:d3:47:ce:b1:70:82:a9:70:
78:1a:52:82:00:29:2f:27:bf:9a:30:07:84:64:d9:
36:80:0a:c9:e1:03:fd:a5:d8:cf:d2:87:dc:09:3c:
a8:73:cf:a2:d0:1b:ac:25:e7:c9:87:d5:b3:8b:16:
b0:ae:f2:af:18:11:84:2c:d9:1f:1b:47:5a:3d:b3:
50:53:ba:59:84:b0:61:ea:ff:97:a9:6a:d2:f6:2b:
10:38:8b:a3:4b:93:84:a3:16:06:f6:08:f0:48:42:
d8:02:ad:1b:56:9b:f6:9d:6b:5d:fd:45:79:23:4c:
01:e0:45:98:2a:43:ad:46:ab:d7:3b:8f:8f:98:a2:
26:a5:e3:ec:30:d9:0e:41:ed:29:b5:49:92:0f:64:
04:5a:7f:21:c9:0c:8c:be:1a:3c:ef:33:ec:d5:d7:
8b:6a:a6:c3:c7:f2:67:43:6c:eb:7a:8a:01:54:95:
c8:c5:ed:08:70:98:c0:0f:1a:14:e7:90:bf:9d:e0:
35:8b:ab:4b:45:06:e0:d3:93:2a:17:0a:16:02:06:
46:33:f5:0b:df:a2:87:88:00:42:cc:f1:47:26:c4:
70:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:64:01:AE:07:A1:E6:57:59:95:08:E3:86:A5:9D:14:63:26:77:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AD437DAF4FC11EBB9031B7BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.32.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:bf:32:e6:a2:8a:a9:47:dc:e3:e2:71:f8:47:c4:e4:ac:63:
a7:c8:66:cd:bf:bc:0e:f0:a4:80:ed:79:62:69:ef:91:98:dc:
fb:d0:19:f4:25:85:94:e0:33:d3:7e:4e:88:d3:13:16:03:93:
d9:44:a8:5d:2e:ac:58:5e:0e:4a:0f:6f:b5:dc:b1:2f:4a:d0:
e4:98:26:85:9e:87:4a:e1:02:3e:c2:b3:b2:31:bf:fe:a1:93:
8d:9d:67:76:c3:fb:ea:10:5a:e5:aa:a9:16:cc:02:0a:57:2e:
69:75:53:d4:02:c2:8b:d6:43:96:bb:6d:46:cc:33:7c:24:ce:
8b:c5:f6:ba:bb:fc:ee:2b:1c:41:a2:08:0b:00:64:0a:db:f2:
75:57:e4:74:85:32:c2:d2:a0:63:6c:45:86:52:c4:1a:22:c2:
ff:55:49:06:ce:a1:ae:21:4c:27:c8:2d:5a:16:75:fb:01:3b:
6c:ac:d0:23:5c:dd:89:e5:91:fa:ab:41:e1:6c:41:48:07:a1:
5d:3d:1f:21:ee:2e:f1:22:6c:3c:f5:8d:51:d8:bc:0f:cf:ed:
32:28:09:af:a8:6b:48:75:5b:c9:07:eb:12:a2:c4:e8:79:a5:
e8:5f:24:10:26:a7:c6:39:61:55:f8:4b:00:bf:23:b8:60:ca:
e7:65:f6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-fra.rpki-client.org