Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEDC6452C1EB11ECA58C46F6F1222468.roa
File: EEDC6452C1EB11ECA58C46F6F1222468.roa (raw, json)
Hash identifier: pAlT2TdW+cEkFdHWFvGxXIUWoicG6iPdCBXYp/WZLss=
Subject key identifier: BA:83:C6:78:29:B9:50:F8:A5:CB:A9:92:4B:08:76:B6:1C:4B:79:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 15E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEDC6452C1EB11ECA58C46F6F1222468.roa
Signing time: Fri 22 Apr 2022 03:26:01 +0000
ROA not before: Fri 22 Apr 2022 03:25:53 +0000
ROA not after: Fri 30 Dec 2022 03:25:53 +0000
asID: 133201
IP address blocks: 154.205.34.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5605 (0x15e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 03:25:53 2022 GMT
Not After : Dec 30 03:25:53 2022 GMT
Subject: CN=62622049-5c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:e0:9f:a3:4e:dc:20:bb:d8:69:69:52:35:
73:8a:80:fb:7c:a0:ca:fd:5a:b0:6c:27:01:83:01:
11:f7:da:72:c5:33:73:85:bf:0a:53:84:41:5c:8f:
f8:c5:e7:07:2c:b8:70:32:9c:42:c4:f1:bc:a4:d6:
83:dd:48:80:49:a0:11:9f:b7:1b:13:52:68:9c:42:
46:97:75:79:72:c4:24:ab:8e:71:69:e4:c6:67:8c:
40:bf:ac:5d:c2:77:ef:9b:f3:70:33:07:e4:fe:ac:
04:54:75:b6:33:00:1d:bb:c4:99:e6:04:63:52:c8:
d7:81:d4:5a:3b:a9:e8:45:9c:e8:b6:00:04:12:72:
3f:21:3b:b0:68:74:95:fd:6b:94:23:56:ab:46:9c:
ee:64:ef:69:1d:f9:f3:22:3b:3a:00:ac:8b:73:09:
12:70:2b:60:a8:ee:45:03:a8:06:c1:c8:24:24:4f:
f4:23:47:59:a5:62:7d:20:00:6a:d5:5d:bb:b2:f4:
50:20:20:c3:0b:fd:5e:85:ed:7d:f1:fd:31:8f:02:
f9:49:66:a3:8d:dd:ca:6a:21:2a:f3:91:d4:9a:b0:
e9:f4:f2:f1:53:da:83:1d:f6:ff:3f:c1:2b:bb:df:
ba:6b:1d:b0:9b:49:c2:62:a5:6b:61:3b:45:c2:7d:
0c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:83:C6:78:29:B9:50:F8:A5:CB:A9:92:4B:08:76:B6:1C:4B:79:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEDC6452C1EB11ECA58C46F6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.34.0/23
Signature Algorithm: sha256WithRSAEncryption
30:61:33:9b:a0:95:7c:4f:af:3e:82:23:fc:0a:f5:64:62:27:
68:a2:e8:59:de:72:89:72:94:36:05:60:1c:dc:52:62:e5:c2:
99:ec:f1:9c:94:de:78:18:71:3b:eb:db:07:bc:0d:d0:58:ea:
d8:fe:96:1f:7e:b2:bc:81:7c:42:37:ae:16:95:55:ea:28:0d:
eb:86:b4:a4:0d:09:25:1e:98:97:cd:d9:a0:0b:40:8f:ce:2c:
c0:7d:03:ec:a8:68:31:f3:83:86:e2:48:f3:b5:40:a2:49:1f:
b6:32:40:b1:21:39:79:7a:86:35:2a:84:3c:f7:20:cf:c4:7d:
3d:2d:56:1f:b9:09:65:7a:49:09:13:99:08:40:b9:26:d1:de:
ee:c8:b2:cc:4d:83:eb:30:43:d4:80:c6:eb:e2:97:8f:3a:f9:
67:84:6f:18:62:04:50:98:b7:b9:bf:33:1f:e9:86:3e:3b:4a:
3d:2c:37:0f:64:81:54:2b:ac:4e:fb:91:77:95:4f:69:37:e7:
c2:64:ba:e9:a8:5e:72:bd:97:6d:5c:43:34:53:2d:d6:43:02:
81:e3:62:d3:e6:8b:48:0d:2b:71:7d:b9:e5:ce:95:7b:80:44:
e5:80:35:b4:5b:ac:49:07:93:ea:e1:cb:96:3a:20:f6:ea:0f:
d1:1f:da:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-fra.rpki-client.org