Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF8F2ADAF81E11EC92AB11A2F1222468.roa
File: CF8F2ADAF81E11EC92AB11A2F1222468.roa (raw, json)
Hash identifier: Eg0NX2VzGV2kFanSVnXUpHa7xLa8pHWyQ5zOsSXFmdk=
Subject key identifier: 12:C9:7B:EF:1C:91:44:A3:D1:97:57:40:4F:B5:83:3F:EB:A3:36:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 170B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF8F2ADAF81E11EC92AB11A2F1222468.roa
Signing time: Thu 30 Jun 2022 02:46:16 +0000
ROA not before: Thu 30 Jun 2022 02:46:12 +0000
ROA not after: Fri 30 Dec 2022 02:46:12 +0000
asID: 328608
IP address blocks: 154.205.176.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5899 (0x170b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 30 02:46:12 2022 GMT
Not After : Dec 30 02:46:12 2022 GMT
Subject: CN=62bd0e78-d0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e9:35:ca:de:8e:ef:53:f2:a8:cb:de:03:0d:
67:00:0a:b3:31:2a:f6:89:cd:51:ac:8c:22:61:56:
4a:6a:d4:b5:05:51:07:7a:e6:59:82:4a:8f:09:a3:
e7:4f:70:5d:cd:3b:24:4b:9c:f6:9e:e9:e2:29:ba:
02:43:95:dc:03:7a:67:8c:cf:24:c2:59:d3:e2:ad:
38:c7:55:a8:85:23:c4:44:27:c4:cd:44:3c:d7:af:
9b:19:10:2c:fd:12:8e:47:b4:9c:61:56:bb:6b:89:
20:af:0e:5e:11:cd:76:95:e9:67:cd:3a:9b:4a:66:
fd:d7:e2:3f:21:6e:e2:08:48:83:9a:c8:cf:27:9c:
4f:5f:52:c9:35:cf:9f:fe:d1:d8:1a:bc:a6:42:0e:
b2:69:92:1d:5c:3a:0a:aa:98:9c:c5:ab:2d:f6:cb:
ab:b9:86:3c:6a:1d:8c:48:e2:91:cf:25:c6:4e:d3:
cd:2f:97:d0:3a:89:a8:85:0d:c1:92:b7:8c:97:5d:
34:24:93:bb:a5:92:2b:62:27:c8:59:d2:bb:74:ae:
56:a4:a3:e3:68:b3:a5:25:bb:28:f4:07:85:24:63:
15:91:cd:a3:d9:bf:f8:32:74:11:af:4d:29:78:e2:
57:47:72:56:c4:68:32:00:84:08:79:c9:64:fc:5b:
84:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C9:7B:EF:1C:91:44:A3:D1:97:57:40:4F:B5:83:3F:EB:A3:36:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF8F2ADAF81E11EC92AB11A2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.176.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:96:8c:c9:37:60:f1:0b:1f:08:21:89:3f:09:53:ea:d4:8f:
86:12:dc:6e:81:4b:e6:a9:e2:07:fa:24:d3:97:c2:03:0f:18:
43:e0:84:4f:f4:bd:8b:6a:88:8e:32:ae:43:05:2d:f7:96:60:
ba:7a:66:76:f4:b0:bc:f7:e8:65:d7:a3:0e:79:ec:79:51:60:
cb:45:5c:f9:8c:10:09:04:d3:18:a4:4d:ce:2b:af:bc:54:86:
a7:36:ed:ee:d2:82:ad:5b:e1:c1:12:86:b9:cd:fe:d5:05:b0:
22:97:87:49:3e:3a:c2:fb:b8:c4:55:5a:b3:dc:e5:61:c6:2f:
d1:8f:27:7f:61:0a:10:4e:df:83:8d:63:33:c6:2d:32:5b:d3:
76:25:58:d1:b4:17:23:41:f6:dc:f0:72:01:64:bb:d6:af:d8:
04:77:c9:e2:53:46:51:d1:37:7f:34:4d:ef:59:84:78:f0:b4:
41:32:45:e9:63:90:8b:01:31:46:1b:23:3b:9f:a7:3c:8e:d7:
6d:18:fa:3d:c0:41:71:e6:d5:30:1a:64:2c:0d:6d:50:36:dd:
6c:8e:83:ab:a0:e9:a1:93:04:d9:9b:35:3d:02:09:ce:11:35:
2e:66:b3:6b:31:aa:38:ad:5c:c4:c8:44:76:52:f3:d9:1a:73:
ef:45:76:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-fra.rpki-client.org