Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCE7AFD0E57F11EB8AD8BB2DF8AEA228.roa
File: CCE7AFD0E57F11EB8AD8BB2DF8AEA228.roa (raw, json)
Hash identifier: r3yWcHNFRVahuIvkMineoZUTssQ7sg241Hb0d0rx8zM=
Subject key identifier: 5F:95:C6:00:DC:FF:E2:84:B2:31:79:55:80:0E:A4:90:A3:AE:27:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 07EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCE7AFD0E57F11EB8AD8BB2DF8AEA228.roa
Signing time: Thu 15 Jul 2021 15:17:43 +0000
ROA not before: Thu 15 Jul 2021 15:17:39 +0000
ROA not after: Sat 09 Jul 2022 15:17:39 +0000
asID: 397630
IP address blocks: 154.202.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2028 (0x7ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:17:39 2021 GMT
Not After : Jul 9 15:17:39 2022 GMT
Subject: CN=60f05196-5531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:73:00:b1:f4:e2:a3:96:0f:b5:99:34:b8:
e6:5a:f7:96:d7:3b:13:60:07:c9:77:d7:16:94:a3:
73:bb:b2:2f:fb:f4:41:d8:59:81:3c:af:61:48:a0:
f1:86:7c:61:e2:fe:f0:a2:92:67:41:f2:5d:f9:3d:
20:6c:89:e0:64:20:dd:e8:a1:5e:00:e7:bd:b5:5b:
39:ac:3c:e7:c8:fa:52:c7:49:9d:34:dc:36:29:36:
90:f8:58:80:6f:d1:20:bb:51:a9:57:37:44:f4:d3:
79:ca:53:b6:1f:25:2e:2d:9f:da:74:c9:e2:6b:99:
dd:97:87:92:3b:fe:f3:4a:2a:d8:d7:48:a3:83:6e:
07:ca:b1:b2:51:f9:a0:4a:09:a7:55:34:1a:ab:07:
ef:17:70:00:13:c8:b1:67:d0:d9:0b:0c:ce:29:61:
f2:b3:66:ce:6d:0f:7f:5d:a1:9a:c2:95:ad:65:a7:
67:49:5d:64:34:cf:b5:20:d9:85:14:a2:58:24:79:
45:83:2c:2f:97:6b:c6:3d:12:af:e6:7a:b1:16:0e:
a6:4f:b2:4f:9e:31:d5:d5:d5:07:54:b1:da:0b:e0:
c5:d4:60:90:a2:3e:8d:e2:a4:91:bf:f6:3c:75:c0:
7f:3f:f5:e9:b5:f4:b3:ce:9a:6e:d1:df:4a:a6:a3:
5f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:95:C6:00:DC:FF:E2:84:B2:31:79:55:80:0E:A4:90:A3:AE:27:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCE7AFD0E57F11EB8AD8BB2DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.119.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:6e:58:52:2e:e7:fd:a1:69:72:d2:a2:94:67:e5:bd:da:81:
97:a0:09:5e:84:95:ff:e4:f4:ab:e1:c3:86:66:82:fe:9e:ed:
f9:ae:c1:8c:91:bd:71:ad:b2:3d:e5:31:bc:b0:d1:6d:86:6a:
5d:a3:dc:5e:a2:59:0f:b0:83:fd:a2:d4:8b:b2:de:9e:f0:1e:
bc:7a:0a:43:0e:06:0f:24:36:df:b4:a2:11:4d:d0:98:f2:be:
e0:a6:24:fe:55:b4:1a:27:ba:50:7e:9b:ba:a8:ee:06:20:77:
21:84:1a:85:c2:1a:2d:f4:d6:b0:30:f3:40:25:66:37:b8:e9:
12:8f:53:34:bd:44:aa:53:75:3e:f7:cb:e1:9f:47:f1:16:e9:
ff:89:e6:6b:a2:30:86:f5:1f:25:3f:90:bd:6c:f3:63:fa:e6:
6f:f8:83:58:8b:24:3e:79:5b:cb:4f:2b:5e:7e:84:cd:3f:41:
cd:eb:7a:20:4e:f8:b4:1e:3a:a4:12:6f:67:51:d2:24:4a:5a:
e8:ab:bf:82:b3:0d:9c:28:6b:62:fe:55:55:c6:d0:f4:be:d1:
37:bf:5b:e9:3b:2e:3f:bc:8e:b8:24:23:63:d9:10:32:56:e4:
09:68:6f:a8:70:db:88:7d:11:d3:d0:61:73:17:c7:99:3a:3a:
41:99:5a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-ams.rpki-client.org