Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9B46B3C380711ED8B314C96F1222468.roa
File: D9B46B3C380711ED8B314C96F1222468.roa (raw, json)
Hash identifier: buelaO0dCvKiz709uxGbvTfKvPY8bLlGmUxc8rlRK38=
Subject key identifier: E0:1F:CB:12:A5:AE:77:BA:F9:58:E1:28:37:4F:2C:FF:FD:1B:92:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 18E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9B46B3C380711ED8B314C96F1222468.roa
Signing time: Mon 19 Sep 2022 10:43:09 +0000
ROA not before: Mon 19 Sep 2022 10:43:05 +0000
ROA not after: Fri 30 Dec 2022 10:43:05 +0000
asID: 328608
IP address blocks: 154.205.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6373 (0x18e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 10:43:05 2022 GMT
Not After : Dec 30 10:43:05 2022 GMT
Subject: CN=632847bd-5c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:2b:ca:c0:4c:10:23:ed:11:44:75:74:52:
aa:b0:b1:dc:a2:73:91:cb:18:46:3a:dd:3e:d2:4e:
c8:43:11:81:d8:b2:21:26:8b:3e:5a:72:63:0d:2a:
fd:23:15:44:71:af:7c:0b:a3:ff:18:5b:3b:c0:ea:
63:15:c9:75:1f:cf:70:92:ae:56:ed:03:78:c5:03:
a6:f8:ba:b9:ed:f8:68:93:27:63:5c:70:12:ad:ca:
72:02:c8:f7:5d:3b:66:67:14:af:ad:be:b7:c1:1d:
0e:9f:b8:74:df:3f:c6:27:17:bf:0a:65:99:02:cc:
e3:91:4e:e0:21:e5:f2:e1:56:b3:75:32:52:95:c5:
a3:45:15:97:ab:71:27:e3:e1:18:f6:7e:61:b3:66:
7b:52:b0:ae:bc:d1:4c:83:13:23:46:12:a2:bc:63:
34:63:69:a8:09:d9:08:f0:47:48:ea:b6:3a:ab:ae:
2c:a1:1a:64:2d:7d:e4:f3:53:3e:5a:af:30:87:f1:
34:2e:76:b6:ce:2a:c3:bc:70:6b:a4:ce:36:66:b2:
ab:c8:85:29:68:a8:b6:fb:02:d4:0e:5b:bd:82:43:
5e:95:1f:52:3c:3a:db:f9:69:45:58:90:8f:fd:1e:
83:e1:a7:e8:9a:64:6a:e5:65:81:42:07:1d:a4:8c:
e5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1F:CB:12:A5:AE:77:BA:F9:58:E1:28:37:4F:2C:FF:FD:1B:92:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9B46B3C380711ED8B314C96F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.0.0/24
Signature Algorithm: sha256WithRSAEncryption
89:95:c6:f0:27:12:6b:ce:15:2d:24:00:c1:f1:04:26:11:ce:
82:e1:62:33:79:4d:fa:53:62:31:ea:fd:7d:ae:e1:69:3d:bd:
a9:48:5a:cf:11:8e:ff:7f:cf:99:e2:15:9b:03:7f:3f:bb:e4:
80:19:8b:89:e0:90:0f:72:12:6c:26:a3:d4:9b:33:23:18:e9:
f9:69:15:84:82:8a:1f:22:7d:47:6a:0c:56:51:f7:f5:89:5b:
13:7b:8d:5f:4d:ce:ee:b3:ff:a0:f6:c3:18:b7:5e:3b:5e:84:
d3:31:8f:b2:a9:a8:52:88:ed:7a:c8:5d:65:29:f8:12:b5:a7:
34:fb:ba:e3:ea:7d:84:7c:75:f9:fe:82:6f:09:bd:61:fc:8b:
e4:92:28:f8:98:51:56:c7:ce:77:f7:be:7a:4d:e2:61:8f:2e:
fe:dc:5a:b5:bf:9b:33:a8:8b:a1:b2:fe:1a:1f:05:0a:02:c7:
93:63:4f:92:09:68:50:e1:87:dc:1b:1b:9b:c6:12:fe:1b:bc:
5b:ca:8c:f1:28:bd:98:17:50:b4:28:83:96:41:ef:5e:f6:0e:
4c:f6:6b:d3:68:8e:7e:1f:f4:18:cb:c0:9d:d2:8a:1a:f7:c8:
2c:63:6f:af:61:7e:a4:f0:3c:f8:0a:64:0b:04:ae:78:3b:3e:
a9:bd:63:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-fra.rpki-client.org