Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A5BD9DC0F1411EDB755AA95F1222468.roa
File: 9A5BD9DC0F1411EDB755AA95F1222468.roa (raw, json)
Hash identifier: rWEwXYD7SSKJz21A3+MBXnPPqLlCHYnA4kJe5jnx4+k=
Subject key identifier: E1:E6:42:C6:D5:B2:E5:46:46:B2:C3:17:46:0C:1F:44:1A:76:14:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 17D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A5BD9DC0F1411EDB755AA95F1222468.roa
Signing time: Fri 29 Jul 2022 08:01:08 +0000
ROA not before: Fri 29 Jul 2022 08:01:04 +0000
ROA not after: Sat 03 Sep 2022 08:01:04 +0000
asID: 23470
IP address blocks: 154.91.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6102 (0x17d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 29 08:01:04 2022 GMT
Not After : Sep 3 08:01:04 2022 GMT
Subject: CN=62e393c4-9b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:62:b3:1b:26:ec:fa:75:45:ce:91:0f:46:de:
7c:e3:a7:3e:a9:d9:9e:8b:46:62:8c:d4:7f:03:8a:
98:2c:41:de:a9:dc:03:2a:a0:c2:27:23:21:28:cc:
aa:61:00:67:6c:82:5f:00:d7:3d:38:0f:5f:63:e0:
b0:b4:f9:0e:12:ad:bb:49:af:d0:49:a8:f8:c0:ba:
c7:f3:78:87:eb:6f:8c:06:3f:8b:d9:4d:1d:3b:a4:
77:ad:e5:c9:2f:a9:e1:80:c3:63:82:de:6d:c7:92:
bb:7b:28:a6:fc:f9:1d:fd:30:03:b3:51:22:f3:27:
bc:1f:b6:7f:73:a9:36:de:21:f8:42:43:0c:ef:a6:
bc:0f:ac:4f:d5:88:72:11:67:be:9a:2d:87:3b:2f:
59:71:93:ad:fd:07:ac:e3:fd:0d:09:d4:00:bd:d1:
a8:5f:af:ef:35:d5:c2:e8:46:d4:44:ef:78:c1:5b:
5d:0a:09:12:b7:51:ec:45:eb:a6:07:ed:16:92:83:
3c:e3:e2:52:c9:16:24:4e:26:08:43:60:8e:dd:d5:
1e:9c:d5:65:49:58:99:3a:65:23:55:39:98:b8:9c:
81:b3:04:8a:8e:6f:4a:d3:2e:06:8e:48:26:db:93:
ba:e2:ed:16:dc:dc:01:22:3a:2f:a9:c0:90:36:2c:
c0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E6:42:C6:D5:B2:E5:46:46:B2:C3:17:46:0C:1F:44:1A:76:14:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A5BD9DC0F1411EDB755AA95F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.138.0/24
Signature Algorithm: sha256WithRSAEncryption
14:1a:1d:b5:6b:a2:6e:b8:f3:f5:12:e2:11:b6:a4:79:b7:88:
e0:ce:15:3a:98:cb:2f:d0:1f:b8:ac:e3:a3:84:08:3a:e3:52:
8a:3b:69:aa:05:43:75:1f:9a:a5:7d:1d:44:86:83:e5:73:92:
ba:13:2b:72:02:a6:12:e1:be:94:29:ee:4b:28:10:d1:3a:89:
19:9a:85:bb:2c:d3:a9:5d:e7:99:78:52:01:1e:89:70:41:74:
24:a4:48:15:c3:07:02:0e:cd:39:a3:ae:a4:7a:7f:fc:51:a1:
8a:0f:fc:3e:12:54:52:69:40:0e:b3:59:b6:df:65:29:95:7b:
38:db:3d:61:54:4a:6b:88:21:25:72:5a:f3:ee:65:98:ac:09:
28:2f:32:40:f3:2c:41:36:ae:80:a9:36:0a:6b:f5:73:c6:54:
2b:1b:ed:b9:9b:85:2a:b2:e7:6e:0a:6a:39:3a:0e:9b:85:47:
a9:f5:98:da:fe:b5:4f:b6:a8:b5:58:94:4b:be:c7:e8:ed:2c:
0c:37:ea:56:52:e0:ad:48:fa:d6:98:2c:69:e9:97:0d:b6:2f:
59:ef:9d:25:6f:d3:b1:e9:86:9c:8a:36:2e:1a:61:e6:81:ac:
f9:ed:dd:74:c0:c3:8d:5f:83:25:dc:c6:72:cd:60:97:ff:c2:
7e:99:55:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-fra.rpki-client.org