Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F258E60EE57E11EB9DE4502CF8AEA228.roa
File: F258E60EE57E11EB9DE4502CF8AEA228.roa (raw, json)
Hash identifier: PEOa/i4UCIULxlgNso18fWiErce97GpmwVDpc8reUzM=
Subject key identifier: 07:3A:CA:D8:22:49:18:54:E2:04:B2:8F:A0:EE:73:1B:D8:DF:B0:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 07D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F258E60EE57E11EB9DE4502CF8AEA228.roa
Signing time: Thu 15 Jul 2021 15:11:36 +0000
ROA not before: Thu 15 Jul 2021 15:11:32 +0000
ROA not after: Sat 09 Jul 2022 15:11:32 +0000
asID: 397630
IP address blocks: 154.202.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2002 (0x7d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:11:32 2021 GMT
Not After : Jul 9 15:11:32 2022 GMT
Subject: CN=60f05028-3ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:9b:ec:09:4e:bc:90:66:a1:62:75:5f:3f:
cc:c0:0e:30:63:99:d9:29:e2:31:e2:f6:b1:01:5c:
51:f8:a0:ba:24:98:60:36:cc:14:0e:77:b5:50:80:
94:3d:ad:68:ff:08:32:e3:fd:c4:c0:ba:c4:aa:0b:
49:1c:a4:fa:1c:c0:f0:54:44:39:7f:ba:79:93:00:
41:fe:a6:49:f8:f6:38:e5:3d:33:d5:90:6f:86:1e:
c8:14:bd:d9:0a:1a:f3:a6:81:4a:b4:d2:d2:29:dd:
e0:d5:45:4b:85:90:aa:bb:09:13:23:22:fc:fc:c6:
6d:78:1e:12:13:83:e9:29:0a:41:2a:14:37:c2:3a:
97:16:f1:64:5f:45:c8:25:5f:d5:9b:66:74:af:e8:
8c:88:5d:8e:c5:c0:03:f1:6c:73:99:05:8a:b1:58:
4c:e4:3c:ee:7d:44:79:1d:7b:70:70:3d:ee:b7:dd:
50:9e:06:74:2a:01:67:2c:13:d5:8a:60:b1:f2:47:
01:88:70:cf:20:03:8d:b7:da:48:3d:72:ac:4c:ef:
68:a2:d2:7b:e8:8a:31:99:cd:ce:a0:40:05:54:ae:
6a:42:94:5f:33:b6:a8:3a:8a:da:42:37:0a:fd:8e:
51:8a:46:22:6e:e7:31:cc:00:19:30:a8:30:b5:0b:
b8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3A:CA:D8:22:49:18:54:E2:04:B2:8F:A0:EE:73:1B:D8:DF:B0:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F258E60EE57E11EB9DE4502CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.105.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:86:0a:0b:fb:e6:75:8f:7c:c2:54:70:75:01:f1:fa:f2:54:
5e:45:27:43:a7:f6:1c:67:8f:60:f8:2b:ea:ab:02:58:bc:75:
bc:53:15:aa:45:76:f1:e9:fd:1a:1a:8e:cf:4a:9a:a6:d4:cf:
2f:73:c8:72:ec:94:ca:d0:9b:14:e0:aa:5e:4f:51:b3:c9:40:
32:f2:b2:9d:59:f8:80:ce:d6:f6:bb:a6:20:e1:0e:bb:6e:97:
2a:2b:9e:59:a7:0e:e7:c2:58:00:07:00:3e:79:81:52:75:33:
ea:97:eb:b1:bd:c8:47:b1:ba:bb:9b:ed:bc:b4:d2:94:38:8a:
82:88:cf:14:8c:66:0b:b3:07:56:f6:bf:42:97:66:6a:43:a2:
6a:76:ca:03:f6:30:c3:4c:e6:a9:c5:5c:71:b9:fa:de:56:ea:
a4:a6:ad:3a:8b:1c:69:29:d8:32:fa:df:4a:42:de:8d:3a:1d:
32:ff:d0:41:63:63:d6:af:0b:2c:f8:d5:d9:de:02:11:d6:42:
9b:97:8c:d4:76:7f:dd:c4:32:cf:97:ad:ee:e8:9e:42:0f:69:
f4:61:40:a4:de:31:a1:aa:d8:bd:48:c9:a2:b7:28:c6:94:ff:
08:f3:36:d4:7e:4c:17:70:3a:c9:a1:09:a0:cc:93:8c:55:40:
77:8e:0b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:13 2023 by rpki-client on console-ams.rpki-client.org