Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E60CC102F4D511EB94B37641D8A014CE.roa
File: E60CC102F4D511EB94B37641D8A014CE.roa (raw, json)
Hash identifier: L5y8q4OlO+OpwI1Oqbc6xuEYKatPjr81qAo1CNRW3k4=
Subject key identifier: 4A:83:CF:66:F3:64:D1:7E:FB:E3:4C:CD:92:AB:35:EF:40:74:98:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 087B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E60CC102F4D511EB94B37641D8A014CE.roa
Signing time: Wed 04 Aug 2021 03:42:19 +0000
ROA not before: Wed 04 Aug 2021 03:42:15 +0000
ROA not after: Wed 22 Jun 2022 03:42:15 +0000
asID: 398993
IP address blocks: 154.81.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2171 (0x87b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 4 03:42:15 2021 GMT
Not After : Jun 22 03:42:15 2022 GMT
Subject: CN=610a0c9b-e10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:08:52:03:33:c4:6f:c6:dd:29:ee:4b:d7:b0:
12:f0:11:a9:a4:69:5e:cd:08:a4:4f:35:2b:1b:79:
14:e9:ea:48:39:08:58:f0:0f:8e:c8:59:b6:8b:3a:
f2:f4:a1:5d:1c:a0:36:5f:4d:e4:88:17:6b:b5:3b:
91:f2:36:43:9a:e6:8c:08:1d:a9:9d:33:fb:7f:84:
1f:28:37:63:1e:65:fc:26:1f:13:28:ed:9a:ad:cd:
ca:3d:20:09:09:ef:5d:8d:81:14:98:92:21:43:66:
8e:a5:cc:f2:07:d5:b1:32:46:ae:4e:87:64:29:07:
3f:57:92:f7:99:b1:4c:26:05:28:4c:e8:bb:b1:c1:
ae:32:ce:c2:51:0f:c3:2b:2c:35:6b:db:68:7c:b2:
fd:3a:03:0f:d5:35:ec:66:2e:e5:d4:74:e8:83:4d:
89:29:17:7c:77:09:03:15:fb:b6:04:3d:7f:af:84:
18:ca:ed:d9:99:39:93:ee:fd:28:98:6e:59:c7:51:
47:53:35:22:6a:58:41:05:df:de:ac:12:ca:a1:31:
c7:12:09:25:cf:e6:bd:50:82:fe:58:33:76:03:ed:
1a:13:cd:a9:26:d4:65:6d:d3:35:dd:11:36:86:21:
6f:5a:26:71:79:5c:15:4c:7c:2e:26:10:93:c8:86:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:83:CF:66:F3:64:D1:7E:FB:E3:4C:CD:92:AB:35:EF:40:74:98:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E60CC102F4D511EB94B37641D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.176.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:5b:1c:9d:ff:35:ec:e6:38:70:4b:75:70:f6:fe:52:90:b3:
ea:2c:f0:fe:ff:95:19:86:90:0b:3a:6c:f0:7f:7d:9f:32:f6:
b3:15:69:d4:a3:65:aa:10:64:e5:f8:63:09:a0:9a:22:fa:8a:
df:dc:47:1d:0d:39:de:61:2e:1a:50:82:41:72:74:01:03:22:
b7:0f:d8:05:98:cf:34:f0:ce:68:71:8b:26:30:d3:2a:6c:6a:
d2:c9:af:92:08:6e:f7:8d:22:86:7f:70:f2:cc:dc:fc:0f:47:
9d:cc:6c:55:13:c2:33:a6:4d:b0:0f:f4:e2:f1:31:20:e0:76:
4b:36:f1:8a:d7:f2:c4:53:1c:79:b7:ce:30:00:c8:af:43:83:
45:66:c7:67:f2:7d:4b:13:52:b6:d2:a7:42:14:1c:d4:25:bf:
95:53:29:58:4b:5d:44:4e:b5:78:8d:0a:b3:df:07:c2:17:d9:
6c:34:4b:8c:c6:b6:fd:9c:71:59:a8:01:23:20:0b:d3:9f:77:
db:85:9a:77:fc:33:cd:2a:31:db:51:37:43:8e:08:7d:50:03:
2d:2c:1a:7b:b0:73:25:d8:6b:0f:9e:b2:de:fe:e7:74:46:82:
25:fb:c4:e8:51:11:1c:b0:60:49:97:15:56:1a:a7:3b:6a:90:
3e:54:ce:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-fra.rpki-client.org