Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E248FE857D011EC89BB80B75A40D577.roa
File: 8E248FE857D011EC89BB80B75A40D577.roa (raw, json)
Hash identifier: K9+jm6hSMZSTvlgnFYf8N3yY9OkKnSzf5Vj9hR4XaoU=
Subject key identifier: B0:61:7A:89:BA:B1:FF:4F:18:81:3D:4C:B6:13:39:26:74:E0:9B:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1327
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E248FE857D011EC89BB80B75A40D577.roa
Signing time: Wed 08 Dec 2021 02:42:59 +0000
ROA not before: Wed 08 Dec 2021 02:42:56 +0000
ROA not after: Fri 30 Dec 2022 02:42:56 +0000
asID: 9009
IP address blocks: 154.95.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4903 (0x1327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 8 02:42:56 2021 GMT
Not After : Dec 30 02:42:56 2022 GMT
Subject: CN=61b01bb3-5c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:04:96:6b:c7:05:42:c6:90:be:83:a1:b4:
00:9b:82:a5:d0:cf:28:de:f4:89:58:09:64:29:fb:
b2:58:cf:0a:07:25:b9:41:f8:38:9d:8b:86:6f:01:
a1:41:da:7e:70:7c:75:c2:cf:7b:b8:87:9b:9f:f1:
3d:f5:31:f4:99:82:cc:cc:c1:9a:b7:62:f7:af:f8:
43:c6:5b:18:54:39:95:11:91:14:7b:44:fb:14:f4:
25:0a:10:e7:21:ed:ea:a0:76:bb:e1:55:af:8d:29:
29:4a:1f:95:d6:09:eb:c7:1a:2c:8b:9a:7e:9c:98:
21:09:da:5a:6d:cb:06:c4:3d:08:af:e3:70:44:cf:
da:9a:3b:97:5d:ba:67:5e:b9:c9:b8:c0:95:18:d2:
4d:d4:4b:51:22:f3:08:be:5b:d8:62:ac:c1:75:5e:
51:0b:ba:cd:f8:28:a3:43:be:49:a9:58:39:70:b8:
ee:45:2b:81:91:5d:3a:cb:6d:5d:a1:1b:68:ca:8c:
da:a7:1a:b3:58:18:d6:69:37:ec:b6:42:b0:85:f8:
fa:f3:8f:b4:f5:dc:09:64:43:f7:79:4d:5d:6a:1c:
4d:be:1d:6d:6a:70:27:51:b5:6b:0b:07:a0:6b:ca:
f2:d9:96:5e:80:15:50:97:55:16:85:33:b7:d0:4c:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:61:7A:89:BA:B1:FF:4F:18:81:3D:4C:B6:13:39:26:74:E0:9B:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E248FE857D011EC89BB80B75A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.39.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:0f:91:98:fa:f7:7a:24:6b:c4:37:77:e7:a8:c5:6a:a2:0b:
16:65:d3:d2:3f:f1:ef:fc:3a:2f:5a:db:93:5a:d6:c4:ef:9e:
39:95:33:8e:e4:fe:9e:76:f6:f0:7c:75:29:00:00:eb:f5:57:
d4:6b:1e:80:de:de:5a:8a:e1:80:45:f0:be:8f:20:94:88:83:
43:59:65:6c:82:10:c8:f2:fc:51:00:46:e6:3b:24:c8:96:cf:
cb:8d:ad:ba:1a:d9:2b:56:cd:32:33:8d:c1:a7:1a:3f:50:74:
63:ab:60:4f:7f:e5:a2:5c:a5:ba:d9:50:6b:eb:93:49:ba:bf:
19:8d:67:1d:5d:b5:dc:a3:2a:29:33:e9:5b:40:00:d1:18:6b:
97:e4:33:48:7a:c9:c6:ef:e5:f4:e2:81:57:5e:50:c6:ea:6d:
c2:a6:67:9d:11:e4:c3:b4:57:a7:0b:15:9a:6c:40:0d:0b:db:
79:4c:98:fb:ed:30:63:f2:9f:72:55:e2:47:04:db:b6:f1:b1:
02:88:ff:56:3e:7e:8a:27:b6:e4:57:b0:8d:30:35:d4:ff:d1:
e1:8e:93:0c:ad:bc:38:cb:d4:81:12:ad:35:71:dd:94:ec:54:
e0:00:32:ea:3b:b3:44:6f:ba:f8:e8:8f:c3:de:a2:b2:09:43:
fa:84:c9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-ams.rpki-client.org