Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8A4B4C457D011EC8409D4B75A40D577.roa
File: A8A4B4C457D011EC8409D4B75A40D577.roa (raw, json)
Hash identifier: gHs7I/mFwmthBRaQIxn0ir5O8Owg3giPADp2BP7Td5k=
Subject key identifier: 14:EA:2D:09:27:15:81:54:39:E6:85:3D:42:5D:0C:35:C9:FC:8B:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 132B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8A4B4C457D011EC8409D4B75A40D577.roa
Signing time: Wed 08 Dec 2021 02:43:44 +0000
ROA not before: Wed 08 Dec 2021 02:43:40 +0000
ROA not after: Fri 30 Dec 2022 02:43:40 +0000
asID: 9009
IP address blocks: 154.194.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4907 (0x132b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 8 02:43:40 2021 GMT
Not After : Dec 30 02:43:40 2022 GMT
Subject: CN=61b01bdf-45e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:fb:04:2a:3d:a1:b8:84:8c:33:21:35:1e:
a0:f1:27:cc:0d:d4:ad:51:8d:08:e9:7c:06:32:c0:
41:33:44:45:49:fc:97:e4:d3:bd:9c:82:f2:da:01:
52:c3:01:79:49:34:af:32:eb:fd:6e:ab:38:f4:a4:
e9:f7:15:10:38:d6:f0:01:49:89:7e:62:d6:66:31:
d2:35:4f:4c:67:8e:eb:17:35:89:f8:c8:b4:4a:bf:
06:7d:af:08:a7:55:76:c9:68:a0:6a:76:fa:34:8d:
38:83:03:a6:3e:03:01:eb:32:e9:30:a9:a0:66:b8:
62:4d:15:5c:ff:7e:52:70:cb:28:86:07:9d:a1:17:
75:46:72:2a:f6:de:52:ba:f4:66:5c:0d:17:a9:f5:
d0:66:aa:d4:09:2b:75:d6:f7:ef:c5:e2:cc:27:96:
a8:99:7a:1f:7b:7c:3a:9e:82:cf:ed:c0:75:b4:b6:
86:0e:1b:0c:dc:79:b7:75:d1:f7:ca:f8:8b:5b:ff:
49:d2:f8:a4:26:0b:3d:e6:8e:5d:84:8f:34:fe:d5:
bf:65:63:f0:3b:d4:71:dd:ab:2a:52:1a:3b:e7:f2:
34:14:ea:ac:e0:10:45:a3:0e:00:be:43:64:42:10:
3c:ae:3a:a8:2f:81:76:9a:14:30:46:ee:94:e6:38:
c8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EA:2D:09:27:15:81:54:39:E6:85:3D:42:5D:0C:35:C9:FC:8B:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8A4B4C457D011EC8409D4B75A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:fb:16:ce:ba:af:2b:56:5c:83:83:df:a5:7b:a5:bb:6b:63:
ae:9a:58:c0:0e:9a:6a:55:04:79:83:7a:78:1a:65:da:3c:14:
46:2e:27:a9:46:34:8d:74:d5:aa:5c:93:ef:de:77:b4:cb:0e:
75:b9:8c:2b:6f:8a:e9:ec:ba:45:4e:ac:f5:23:01:2f:7e:36:
3f:f3:06:aa:4e:22:29:43:68:38:c8:1f:55:9c:c3:77:20:b1:
70:5f:71:9d:db:5b:01:1d:2a:40:90:7a:be:98:72:80:a7:74:
9d:1e:7f:97:25:b9:04:a5:14:67:d4:d2:66:8e:23:0a:37:e0:
4b:68:05:db:19:34:f5:ea:46:cc:9e:ea:7b:74:c1:32:3e:15:
89:71:2e:86:5b:3f:8f:ed:61:d9:0f:2f:d3:dd:20:6c:e8:4e:
65:dd:08:69:cc:77:9a:e0:5d:b1:6b:04:7d:13:47:34:23:5d:
57:71:29:fe:21:d6:c9:e3:d6:b0:8f:55:43:f0:2c:a7:b6:65:
84:50:a4:5f:98:69:9b:d5:bb:4a:f5:21:de:44:cf:9b:95:cd:
7d:b9:19:ed:9c:22:b1:00:ac:37:51:a6:09:d6:b1:8e:e1:88:
2d:59:e7:15:52:3c:a2:55:f9:67:f7:6b:88:f1:da:81:34:e4:
fa:20:e4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-ams.rpki-client.org