Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E87C2F40302F11EDB9B906C5F1222468.roa
File: E87C2F40302F11EDB9B906C5F1222468.roa (raw, json)
Hash identifier: 4+qDXDk2poan/WphrW20VAaAPqnEaYCwZ3jyfJrrlLY=
Subject key identifier: E6:76:57:07:88:FD:1D:4D:C8:2A:52:65:38:65:B1:24:15:7B:32:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 18A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E87C2F40302F11EDB9B906C5F1222468.roa
Signing time: Fri 09 Sep 2022 11:09:44 +0000
ROA not before: Fri 09 Sep 2022 11:09:40 +0000
ROA not after: Fri 30 Dec 2022 11:09:40 +0000
asID: 328608
IP address blocks: 154.214.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6309 (0x18a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 9 11:09:40 2022 GMT
Not After : Dec 30 11:09:40 2022 GMT
Subject: CN=631b1ef8-ef72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:2d:72:9d:b7:e6:c0:da:24:33:f8:a7:8c:
8c:38:25:df:60:b6:4e:1f:12:9f:1d:66:cc:37:7c:
ee:89:35:fd:99:3a:8b:04:c6:69:20:61:52:b0:6a:
37:b1:98:da:c0:09:f8:c9:fe:b0:6b:63:83:c3:2c:
44:60:2f:83:3c:17:c9:f6:96:00:d7:12:30:99:83:
bb:0b:cb:d9:2b:0e:97:14:ec:e4:15:d2:10:ac:7a:
7c:6b:9a:32:62:2f:10:c0:43:34:34:4d:27:49:c2:
cc:5a:6f:11:ba:9c:da:01:8d:94:90:d3:41:72:f4:
cb:64:85:0a:3c:68:63:50:72:9a:49:d1:2d:15:67:
c1:ea:8a:92:54:5b:ef:be:33:77:c5:e5:08:7a:85:
1f:65:d9:26:6a:7d:51:e0:ff:c7:c6:1f:4d:88:d8:
a8:0a:4d:cd:f5:ce:30:6f:a6:78:c3:a1:b8:00:9e:
44:c4:39:7e:ed:0a:65:5b:08:db:f2:67:11:52:fb:
8a:75:76:4a:73:2a:06:38:a4:3f:39:6e:a1:51:b9:
a1:c3:be:6c:cc:1a:53:31:fb:36:13:c8:da:4f:74:
ac:39:54:c0:60:1b:ac:41:db:8f:51:e1:8c:c6:4d:
4e:1a:74:c8:a8:99:30:b5:2d:70:b3:15:b6:d3:9f:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:76:57:07:88:FD:1D:4D:C8:2A:52:65:38:65:B1:24:15:7B:32:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E87C2F40302F11EDB9B906C5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.64.0/18
Signature Algorithm: sha256WithRSAEncryption
31:79:2f:d6:11:72:51:7e:ab:c1:ce:18:1f:ce:39:6e:e6:f6:
fc:45:09:4b:fd:44:ca:92:f0:f5:50:3d:f5:2d:40:42:5b:d4:
b0:09:aa:5f:2a:d8:53:82:6a:c0:55:88:54:e8:68:86:77:92:
3b:03:84:2f:34:89:8f:dc:d0:f5:6f:be:c1:81:e6:a6:43:63:
0a:1f:c7:21:e3:da:0e:5c:7f:e6:b3:5a:62:ed:1d:8c:a0:17:
de:bb:4f:42:54:be:4b:b5:df:82:1f:1c:cd:62:a2:ff:4d:19:
af:5e:63:6c:71:19:a3:0e:c1:8a:d3:0a:02:5b:c6:a3:99:1e:
1a:2c:ef:ec:f0:44:0e:2b:8a:5f:a1:4f:2c:0e:b4:50:b4:f9:
09:7d:ac:3f:a1:4d:6c:75:7d:f7:a6:56:06:8a:14:76:b6:f3:
c1:49:cc:b3:9d:28:5a:14:e0:d1:82:00:71:be:01:97:98:8f:
dd:5d:fb:36:30:45:60:50:cb:3a:62:b1:f3:60:bd:21:de:ac:
8c:ae:b5:d3:5b:3c:ef:1b:45:cb:c5:45:12:fa:db:95:c3:f5:
2d:60:50:7f:7c:bc:ce:4b:c9:ce:ce:51:88:d5:d3:13:c6:ae:
f6:c7:f4:f7:52:fa:22:3d:78:ce:10:0c:5c:b1:9b:c9:43:32:
b3:ff:1f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-fra.rpki-client.org