Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B79C32F65BB611ECAAC7EDC35A40D577.roa
File: B79C32F65BB611ECAAC7EDC35A40D577.roa (raw, json)
Hash identifier: pmMjBTJgn9g4FYI0HxC/jfyNHgdCCTq6Jsj9Uv8Vrfw=
Subject key identifier: 9C:2F:24:34:4C:69:BF:60:A4:5D:9E:3C:DC:A8:62:AF:41:63:5D:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 13B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B79C32F65BB611ECAAC7EDC35A40D577.roa
Signing time: Mon 13 Dec 2021 01:48:06 +0000
ROA not before: Mon 13 Dec 2021 01:48:03 +0000
ROA not after: Fri 30 Dec 2022 01:48:03 +0000
asID: 135097
IP address blocks: 154.204.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5045 (0x13b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 01:48:03 2021 GMT
Not After : Dec 30 01:48:03 2022 GMT
Subject: CN=61b6a656-6c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:a7:70:8e:78:02:c6:85:a4:f3:0f:a0:83:
6b:d8:bd:76:f0:44:60:cf:1b:53:b0:6c:23:c5:bd:
93:ab:86:60:0f:5b:5a:14:8a:88:45:1b:37:8f:5d:
1c:32:cb:47:68:bb:d5:1f:eb:90:6e:b2:1d:e0:82:
f6:a2:6c:f0:77:73:c5:00:ae:99:46:04:c7:27:1d:
8c:5e:54:d4:2a:90:03:e9:35:12:09:16:8e:f3:5b:
20:b8:bd:e3:95:41:88:1b:92:3f:7b:f0:74:9e:9f:
0f:e5:b1:7a:6b:60:27:2c:f8:30:6d:fd:83:6f:9c:
5a:54:21:1d:50:6c:33:a8:e5:0b:58:73:13:f1:bd:
98:15:82:f7:32:9b:7a:cb:ef:66:e2:9f:7f:c4:3a:
87:e0:d5:b0:9b:e3:d3:f0:4f:5c:b9:40:32:9c:d1:
ee:6a:eb:99:4f:ee:f3:f3:32:0f:db:91:8d:25:3d:
d3:c4:71:cd:03:0f:49:f8:2e:bb:bf:f6:0d:f6:07:
42:fb:f4:89:90:68:e6:78:71:22:33:e1:28:e3:10:
b5:da:7a:40:51:3a:fd:6c:55:a8:de:a1:64:54:59:
d9:16:b4:ab:37:1a:ea:d6:aa:ba:3f:10:a4:54:37:
c1:a5:2f:13:b2:0b:e3:2e:62:0b:c6:ef:2f:03:c0:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2F:24:34:4C:69:BF:60:A4:5D:9E:3C:DC:A8:62:AF:41:63:5D:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B79C32F65BB611ECAAC7EDC35A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.72.0/24
Signature Algorithm: sha256WithRSAEncryption
75:15:6e:c1:bc:dc:c6:19:a5:8d:e8:14:28:77:84:50:64:dc:
25:4d:ee:82:24:05:07:c4:95:41:38:df:33:1d:8b:53:72:f4:
e0:c1:ca:f4:b1:7a:7a:50:8e:5b:ea:0d:45:17:d7:9d:96:95:
bc:59:74:5b:9e:47:07:33:fd:8c:9d:ca:03:68:bc:f5:7c:87:
06:6b:6e:39:c0:e3:68:60:32:3e:b7:e5:f1:8b:e4:eb:55:63:
44:c0:b7:0b:e0:f2:49:c3:28:db:0d:c1:cc:68:25:8a:01:f0:
94:0e:94:65:f7:84:d3:5b:a0:66:96:60:bd:22:cd:ca:b3:84:
f3:b1:39:64:3b:41:90:c4:c4:ad:02:26:9d:bb:a6:f6:20:d5:
43:5e:ab:c9:db:07:98:a1:93:e3:8a:35:17:bf:3a:89:66:f7:
21:ce:cb:77:b7:0a:85:ef:84:be:14:dd:ab:6d:72:a2:83:31:
b3:50:43:cd:58:d9:ec:36:16:d3:44:46:21:69:12:b4:7c:14:
24:2c:97:df:f0:cc:68:9b:16:eb:cb:b0:88:39:19:64:5a:64:
6d:d6:6b:79:be:ad:ac:f7:5b:0d:33:41:8f:8b:6b:57:90:a5:
e0:75:a1:77:d7:06:b5:fa:64:db:76:0e:7b:7a:97:6f:90:f7:
02:e6:01:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-ams.rpki-client.org