Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF587AE0D1D711EC9BD5448BF1222468.roa
File: AF587AE0D1D711EC9BD5448BF1222468.roa (raw, json)
Hash identifier: eGMH9/TOs4VsKmqyozf8TDclkyabrdHxYSqrA8g/HRY=
Subject key identifier: 38:92:82:5B:E9:90:0E:1D:54:57:48:F4:F8:33:B6:41:C3:F4:8D:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 164C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF587AE0D1D711EC9BD5448BF1222468.roa
Signing time: Thu 12 May 2022 09:41:23 +0000
ROA not before: Thu 12 May 2022 09:41:19 +0000
ROA not after: Sat 31 Dec 2022 09:41:19 +0000
asID: 35916
IP address blocks: 154.86.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5708 (0x164c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 09:41:19 2022 GMT
Not After : Dec 31 09:41:19 2022 GMT
Subject: CN=627cd643-8e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:e2:ab:91:34:0a:38:e7:81:1d:98:23:d7:
2b:4c:af:f1:7e:c9:50:6b:4e:6d:71:3c:d5:09:7a:
cf:1c:50:d8:4a:06:82:3a:03:2a:c2:f5:9c:4a:b5:
f9:1e:c0:ca:fd:03:f2:13:cd:46:ee:d0:69:65:e7:
19:d8:c8:82:7b:54:79:bc:cf:7a:47:8f:35:bc:4b:
d4:33:f1:7e:b6:19:cd:1a:0c:05:df:77:09:0e:64:
a1:55:92:24:26:f8:bf:52:51:f4:63:81:b3:b2:00:
5a:23:26:dd:0c:ea:64:e1:a8:6d:46:c5:55:07:09:
84:ff:3c:36:b7:34:56:ff:ff:57:ff:3e:4b:e9:6d:
71:a9:99:2f:da:84:dc:0c:92:71:00:2b:9a:6d:99:
34:34:22:ee:62:15:80:d5:49:de:01:1b:46:3e:97:
9e:35:b6:61:5c:5f:2c:62:97:27:73:2f:2f:ff:4d:
6e:93:55:e1:ff:78:8f:9f:cb:22:57:5e:db:25:ec:
08:db:da:b2:80:5d:69:96:78:c1:1a:f0:d7:b9:9b:
9b:a7:c9:d2:91:ec:21:44:05:2e:7f:56:6d:f5:15:
a1:b5:50:b2:6a:1d:bd:6c:76:7b:a5:ba:08:4f:30:
be:bb:49:29:f5:c6:fb:86:22:13:bb:f6:a6:ac:5a:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:92:82:5B:E9:90:0E:1D:54:57:48:F4:F8:33:B6:41:C3:F4:8D:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF587AE0D1D711EC9BD5448BF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.2.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e0:8d:32:45:a1:8d:e5:fd:fe:83:18:e9:73:90:23:9e:19:
0a:1e:1b:53:c5:c6:ca:82:49:2e:78:63:03:4b:e7:06:82:a3:
63:db:fe:22:60:6a:88:9a:0e:f8:49:5f:21:3f:67:bd:1b:33:
65:4f:af:ac:fb:61:d1:c0:f1:ff:cb:aa:67:81:0b:78:59:10:
0f:ce:15:b7:fe:92:e5:72:37:6b:ce:af:48:f6:64:fb:07:2a:
97:9f:fc:dd:96:19:32:54:9e:d7:9f:71:a6:ed:a3:bb:e0:4e:
6a:71:f9:19:fd:4c:9c:88:8d:15:a3:e0:9c:13:82:f2:06:cc:
81:fe:62:0c:46:5d:58:12:3e:a4:01:05:96:5e:74:e6:fb:01:
33:aa:1b:84:21:00:75:79:e4:8f:3a:81:5c:25:2f:ad:91:64:
36:f0:be:4c:0c:a6:c2:a0:8c:79:87:7c:ee:0b:aa:91:34:f1:
61:e8:d6:5b:c4:6f:ac:54:57:fd:d2:27:56:b5:85:03:68:4a:
c2:e8:98:d5:49:fd:6b:7a:e5:85:65:54:e5:ef:dc:91:75:e9:
3e:b9:9f:1a:95:a9:ba:70:92:80:56:bf:fa:e5:1e:78:ce:6a:
64:c9:ab:88:28:95:f5:be:b6:cf:da:7c:c9:9a:8f:91:7e:b5:
77:7e:6a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-ams.rpki-client.org