Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/911D5BAA14B011EE84999A324AD9E6FC.roa
File: 911D5BAA14B011EE84999A324AD9E6FC.roa (raw, json)
Hash identifier: 2qfQxAKLDWgZxvfs6N3xE0wKC/OyM/wNJGGdw/rOh1M=
Subject key identifier: 01:63:57:D3:42:F6:7A:CE:1D:88:1E:E3:F0:40:9C:FE:85:53:6C:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2DB2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/911D5BAA14B011EE84999A324AD9E6FC.roa
Signing time: Tue 27 Jun 2023 06:05:08 +0000
ROA not before: Tue 27 Jun 2023 06:05:04 +0000
ROA not after: Wed 01 May 2024 06:05:04 +0000
asID: 140227
IP address blocks: 154.86.20.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11698 (0x2db2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 06:05:04 2023 GMT
Not After : May 1 06:05:04 2024 GMT
Subject: CN=649a7c14-6f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0f:17:b7:76:6e:09:12:38:c1:81:57:13:c8:
a8:30:7f:c2:f9:e1:94:1b:25:e9:61:cc:82:3e:0b:
f7:61:66:32:ec:54:88:89:85:3c:89:0e:40:b8:93:
72:7d:71:8a:c4:de:e4:b4:c2:ed:54:8c:0b:f4:f6:
d7:0b:19:ca:57:64:e3:d9:5b:d6:92:b5:04:c0:83:
ba:a9:e3:ea:25:d8:9d:24:77:05:4d:e2:f9:13:85:
c6:79:65:a1:7e:24:70:6e:cc:82:6e:42:46:18:5c:
92:f9:83:d5:fd:5d:9e:f9:15:1f:fa:6f:9a:19:b7:
10:80:17:69:fd:17:16:e5:a8:20:a0:1a:80:d8:77:
0e:e7:68:e8:98:f2:88:b1:16:90:c6:f1:a5:7e:4a:
e2:f8:bf:21:6c:0c:a1:ca:34:0a:1f:2e:44:a3:1b:
47:aa:ef:6a:41:2c:71:1b:ba:76:7a:5e:c3:7f:44:
db:56:74:6d:c9:19:cc:93:32:2b:58:5b:41:93:b4:
8e:9f:15:39:f8:a5:9b:a9:7e:51:ca:db:6a:68:3d:
f7:e5:53:12:31:65:cb:8a:1c:2e:87:b5:e0:fb:c1:
ca:9a:2a:05:7b:0f:b6:01:86:f0:81:b7:03:73:59:
46:8a:2f:5f:4f:de:96:25:f5:a2:dd:69:85:3a:9e:
7f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:63:57:D3:42:F6:7A:CE:1D:88:1E:E3:F0:40:9C:FE:85:53:6C:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/911D5BAA14B011EE84999A324AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.20.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:0c:f2:b6:8a:82:ea:87:6e:d9:78:c0:51:d9:67:8e:bd:d3:
32:83:04:54:8b:d1:dd:97:90:a5:c4:3a:f7:3d:f9:c8:bc:05:
55:64:a0:f6:1e:e9:e2:64:93:c8:e2:b5:64:fd:1a:cc:46:1e:
27:32:ac:b3:7d:5d:1d:3f:04:4b:bd:11:8b:f2:eb:31:00:d9:
c6:59:9f:98:a4:c0:a9:fd:99:a0:88:7d:67:19:d4:95:0a:d6:
3e:4d:f7:fb:2e:5d:44:b8:bf:02:20:16:c2:a1:aa:4e:8e:84:
04:a0:fa:eb:38:d3:03:03:b2:b1:6a:67:f7:c2:56:c2:49:02:
00:8a:5d:bf:6e:a9:77:a5:1a:3a:e5:02:bd:9e:07:b8:c1:44:
ae:cf:7c:fd:3d:3b:fb:ff:09:34:2f:8b:97:45:04:2c:c8:9f:
02:55:89:37:df:1f:da:e2:55:a6:8c:2e:22:f7:8d:86:e6:18:
a4:cd:07:d9:bc:41:ad:1f:5e:7b:96:ad:d0:cc:93:07:ab:63:
86:22:6d:80:ed:0b:6b:91:22:3b:6b:96:c1:ea:bd:f0:47:ac:
90:49:94:1f:7b:f2:12:3c:d8:83:f6:01:70:25:68:77:82:88:
25:a6:85:f6:80:c2:a6:fc:c9:09:b2:43:21:e7:5f:e5:bc:f8:
9e:a6:07:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:29:50 2024 by rpki-client on console-fra.rpki-client.org