Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D65FF9C657D711ECB53ABCCC5A40D577.roa
File: D65FF9C657D711ECB53ABCCC5A40D577.roa (raw, json)
Hash identifier: h1EmTU1C/GwQHjZPyOK5ypf6WE8/MFW0ZuzrpZcDhR4=
Subject key identifier: 5A:4E:94:EE:F1:5E:1A:90:A6:A7:2D:FC:CD:D8:02:EC:A9:78:5F:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1359
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D65FF9C657D711ECB53ABCCC5A40D577.roa
Signing time: Wed 08 Dec 2021 03:35:07 +0000
ROA not before: Wed 08 Dec 2021 03:35:03 +0000
ROA not after: Fri 30 Dec 2022 03:35:03 +0000
asID: 54600
IP address blocks: 154.88.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4953 (0x1359)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 8 03:35:03 2021 GMT
Not After : Dec 30 03:35:03 2022 GMT
Subject: CN=61b027eb-dc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:e6:80:79:e5:ef:3f:8a:6a:3b:ce:78:65:
8a:76:66:14:5b:fe:80:86:c8:f0:30:40:0a:73:1a:
27:6b:ea:01:aa:79:d2:db:38:44:75:9b:28:b8:e3:
4a:7b:81:9d:9b:9f:76:de:f0:43:fd:e5:3a:32:5e:
8a:3f:08:08:fe:4d:74:c9:3a:2e:56:43:9f:20:d5:
07:2e:08:05:2a:1f:cb:4b:b3:6a:bc:f8:ec:6a:58:
fc:21:fb:ec:8f:d0:7c:3a:9b:06:0d:8e:21:30:3d:
61:93:52:0b:4a:80:c9:ae:25:79:14:35:41:ed:32:
20:fa:a6:0e:c5:46:fe:cd:0f:00:e3:1d:61:29:57:
a1:54:65:2d:32:27:52:0b:ef:5b:9b:ea:12:02:f2:
4c:a3:a5:d5:33:34:05:39:21:93:21:09:fe:e6:8a:
39:e0:aa:4c:56:05:71:86:da:8e:a9:aa:fd:89:62:
00:8f:12:72:df:09:14:cb:13:37:c8:b2:c9:86:13:
e4:6a:33:b5:8a:88:3e:a7:04:cb:89:f9:1c:9a:8a:
7f:de:16:3a:47:ef:06:50:d0:e9:66:0d:3b:a0:4a:
74:d6:76:b5:1c:49:37:5f:91:21:0e:00:7e:fc:03:
d9:4e:25:18:60:87:09:fe:2c:99:7c:6c:7e:ec:5f:
cd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4E:94:EE:F1:5E:1A:90:A6:A7:2D:FC:CD:D8:02:EC:A9:78:5F:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D65FF9C657D711ECB53ABCCC5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.78.0/24
Signature Algorithm: sha256WithRSAEncryption
be:09:28:2a:7a:b7:31:43:19:61:80:85:5d:af:5c:e5:a1:0b:
47:78:0c:c9:f5:28:e1:15:eb:13:4b:2a:bb:0a:18:07:05:f0:
fd:fc:b7:ec:a7:1e:4d:87:bd:b0:26:e4:f4:96:b9:18:46:9e:
b8:17:7b:ce:2b:f4:10:94:9f:24:3b:d5:6d:13:41:b7:eb:f7:
32:84:66:c7:b0:ae:d8:c5:d2:16:1a:ef:05:41:2c:73:11:58:
15:69:f5:7d:66:e6:df:5f:df:13:97:32:dc:2c:6d:dc:62:9a:
11:a8:ca:98:e5:28:9c:6a:4b:ed:ad:99:04:d8:9c:9c:ff:04:
97:cc:74:ba:00:5b:b2:ef:40:30:6b:24:08:61:75:db:fc:f4:
4a:63:ab:a4:30:f1:49:6f:22:be:68:e6:6d:66:67:72:ba:26:
38:0b:8e:44:24:b9:18:22:a3:da:4c:ef:33:0e:e3:5b:15:ff:
a2:84:a2:fd:81:4f:b5:ca:a5:e8:cb:6f:3c:fd:1d:83:10:00:
5f:be:4d:3e:f0:f8:e7:bd:2f:55:80:ea:c8:f4:12:ad:46:24:
97:fb:33:e8:e1:dc:f3:37:08:82:11:42:84:41:97:cb:c5:9f:
17:0a:9c:1c:33:40:b8:77:f5:56:2a:a7:e1:da:d9:e8:9a:e6:
58:3d:92:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-fra.rpki-client.org