Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1726A70E7D611EC99C244E4F1222468.roa
File: F1726A70E7D611EC99C244E4F1222468.roa (raw, json)
Hash identifier: kl8JL4saCwzOkvApmVcDVrX/S6iCCoBF89QurVkFObw=
Subject key identifier: 0D:29:C2:30:84:BF:DB:87:57:CB:E9:24:E1:7C:C2:76:98:71:DA:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 16C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1726A70E7D611EC99C244E4F1222468.roa
Signing time: Thu 09 Jun 2022 09:31:30 +0000
ROA not before: Thu 09 Jun 2022 09:31:26 +0000
ROA not after: Wed 30 Aug 2023 09:31:26 +0000
asID: 133199
IP address blocks: 154.204.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5824 (0x16c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 09:31:26 2022 GMT
Not After : Aug 30 09:31:26 2023 GMT
Subject: CN=62a1bdf2-6aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:06:4f:1e:0e:80:52:25:03:92:cf:e2:1c:
14:11:86:da:82:22:72:a4:fb:1f:b0:b4:c4:e5:33:
5c:af:c8:25:30:ab:c7:d2:af:59:b8:3a:fd:8f:5d:
92:ab:70:b1:55:74:f3:cc:8c:68:58:69:b3:ad:b5:
98:9b:e7:40:54:9c:52:72:eb:3c:c2:8b:f2:92:1e:
36:3e:69:b7:dd:13:43:3c:ca:c4:1a:d3:fa:da:d7:
fd:93:47:39:05:0a:57:f8:5d:ba:eb:03:55:11:ab:
62:95:4b:36:1b:ae:9a:44:02:96:3d:b2:7e:bc:d1:
25:e7:5c:45:41:1b:30:0f:04:2e:8a:68:47:fd:9b:
60:f3:81:6d:fe:75:cf:d1:6a:3a:f8:a8:31:62:1e:
3f:7d:43:b0:80:e2:3c:43:7a:47:83:1a:b0:1c:6a:
e5:58:d0:50:6b:d8:c2:d6:40:c3:00:cd:83:81:b7:
6a:13:9f:45:5e:a5:47:bf:c2:c3:56:97:c3:9e:6e:
7f:ea:b5:2d:64:c7:2f:c8:23:98:de:fd:eb:66:4c:
ff:96:99:7c:d9:e6:ea:62:49:fa:cd:0c:c1:e8:56:
50:c8:38:6c:48:ce:f8:db:1b:b5:57:0f:e4:b2:03:
13:97:77:af:69:93:c0:8a:0d:57:f8:e7:0b:2d:08:
46:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:29:C2:30:84:BF:DB:87:57:CB:E9:24:E1:7C:C2:76:98:71:DA:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1726A70E7D611EC99C244E4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.45.0/24
Signature Algorithm: sha256WithRSAEncryption
43:5b:fc:e7:56:4e:0a:4f:3e:39:7b:0e:78:bc:4e:b4:39:c2:
9e:b2:62:64:fc:b0:a7:24:36:4c:29:34:8c:59:7b:85:7e:aa:
5c:b9:f5:1d:21:0a:c3:f1:b9:31:c6:d8:7b:d8:68:ab:cd:23:
4a:83:51:a5:b8:ff:08:5b:1a:98:1d:18:6e:a1:04:1c:48:cb:
eb:25:d9:2e:4c:4a:62:24:47:6e:35:f5:a4:a7:1d:f8:9d:f2:
fb:37:ca:cb:f5:e3:31:67:d7:e5:ab:01:01:92:3e:17:f4:fb:
2c:9d:29:70:55:7c:42:d5:1b:de:63:6d:59:95:4e:a7:63:0d:
72:1d:ec:0e:c0:7a:57:c3:ef:8f:df:f1:83:39:2c:c0:45:b3:
8d:79:fc:62:78:51:28:9e:9b:26:da:0f:9c:e6:80:e8:3c:d6:
7b:9c:f2:30:33:58:eb:c8:b0:32:a4:47:29:ee:22:65:4a:53:
74:16:6b:89:4f:d8:a0:16:1f:83:1e:ec:81:00:ed:53:54:49:
a6:1b:da:75:f0:03:8f:34:05:bf:17:04:6c:97:ee:a6:4a:ef:
01:7e:15:96:21:16:f0:da:2a:33:fd:28:ae:79:4b:b3:63:01:
5b:c8:f3:f2:5b:d1:89:86:f5:af:a0:7c:f8:bd:19:76:00:0f:
cb:85:4d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 13:18:04 2023 by rpki-client on console-fra.rpki-client.org