Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5AA0DE05BB411ECBAA092BE5A40D577.roa
File: F5AA0DE05BB411ECBAA092BE5A40D577.roa (raw, json)
Hash identifier: PwoAUjwihOF+e2uqCEbrvJlnIoBsQ6XW62jLXshiWdo=
Subject key identifier: 03:E5:48:ED:97:36:48:A5:82:58:77:FF:E6:8A:B6:EC:E5:A9:02:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1395
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5AA0DE05BB411ECBAA092BE5A40D577.roa
Signing time: Mon 13 Dec 2021 01:35:32 +0000
ROA not before: Mon 13 Dec 2021 01:35:28 +0000
ROA not after: Fri 30 Dec 2022 01:35:28 +0000
asID: 135097
IP address blocks: 154.204.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5013 (0x1395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 01:35:28 2021 GMT
Not After : Dec 30 01:35:28 2022 GMT
Subject: CN=61b6a363-186f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c5:92:11:0e:8a:07:1c:cd:e9:3c:10:ad:5c:
2a:22:ec:c1:a6:cb:8d:9b:44:9b:83:8d:ac:6c:e0:
85:88:74:ec:49:26:09:a0:fb:e3:73:17:c4:0f:e8:
bb:2e:4a:b7:8d:f5:7b:b6:57:b2:46:a4:ab:6a:ba:
e0:63:18:1d:99:49:0e:19:5f:cc:04:2e:37:07:4f:
9d:0d:20:a9:ab:46:89:4c:dc:11:cc:a1:00:29:72:
be:87:78:10:ca:31:b0:32:0b:f1:4c:cd:2c:bd:24:
f9:27:68:51:4a:92:8c:b9:69:cf:50:cb:95:b1:c3:
52:93:0b:ba:70:3d:d3:4e:ea:d9:64:c5:0a:4d:cf:
e4:73:f2:fe:c8:4f:b7:dd:ba:4d:3c:60:dc:ad:6e:
a3:ff:bd:93:f7:a2:9d:26:71:11:05:36:a8:55:7a:
0d:7d:8f:de:c3:5b:d1:ac:65:06:8b:ee:ab:8d:6a:
6b:a6:62:96:c7:96:b8:a5:1c:88:0e:de:46:fc:64:
dc:3a:22:8e:85:bf:77:1a:fd:bf:a9:22:8e:b3:0e:
ad:5b:cb:be:e2:88:9a:cd:bb:80:10:54:1f:50:20:
7e:04:5b:ae:0c:6b:5c:47:7e:1c:e5:61:c1:75:aa:
af:06:d8:ff:26:4d:1a:27:98:05:e2:02:dd:d9:b3:
ad:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E5:48:ED:97:36:48:A5:82:58:77:FF:E6:8A:B6:EC:E5:A9:02:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5AA0DE05BB411ECBAA092BE5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.64.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:b3:9d:dc:fe:6a:29:bd:f6:67:23:16:fd:25:37:ba:8c:12:
41:e9:83:88:92:4e:6a:e0:2b:0c:de:dc:46:73:6a:d3:3b:49:
96:a9:98:62:53:4f:5c:f7:e6:de:e4:09:a4:20:e0:56:66:7f:
74:c2:49:0f:41:ef:2c:42:6e:e0:7c:83:d8:35:dd:a8:a0:17:
59:12:46:02:44:e1:95:50:46:35:f4:5e:e5:75:ce:60:d9:64:
83:7a:64:15:d6:ec:00:9e:5e:bd:5a:05:21:29:90:ce:d5:a7:
c5:76:84:de:57:39:51:82:58:aa:09:d8:6f:81:5c:06:51:cc:
73:f5:7d:be:f5:0b:5c:90:1f:19:12:92:85:9d:54:3b:75:8f:
26:45:41:fd:d3:fd:ea:80:0f:87:9f:3b:67:22:4d:7f:1a:19:
0b:71:13:9d:38:b4:3e:e3:f7:b7:1b:53:d9:2e:fb:d4:07:8b:
a4:16:27:e5:a0:61:bb:49:bf:7e:13:bf:02:dd:8e:e1:32:43:
3b:b0:4d:db:d8:67:a2:ab:8f:82:0d:12:ae:27:76:9f:b3:80:
a3:85:c9:dd:34:fe:ae:8c:07:be:83:59:85:90:e0:8f:46:fd:
42:b5:34:e6:99:a5:0b:44:fe:5a:63:95:44:37:dd:d6:33:16:
0e:bf:79:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:13 2023 by rpki-client on console-ams.rpki-client.org