Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/6AF336DC822A11E5A3415D24F8AEA228.roa
File: 6AF336DC822A11E5A3415D24F8AEA228.roa (raw, json)
Hash identifier: SOZtc5NjnYk4jWUNN5YXHLbChCK4UmsVs8cQjLl0m/A=
Subject key identifier: D5:DA:04:3B:90:E6:AA:BC:94:8A:E8:96:01:EB:78:9C:31:53:14:BE
Certificate issuer: /CN=F36374C9AF/serialNumber=25F0B10CA2E4DFB3ABE8016B8319E15511C33A1C
Certificate serial: 0E
Authority key identifier: 25:F0:B1:0C:A2:E4:DF:B3:AB:E8:01:6B:83:19:E1:55:11:C3:3A:1C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JfCxDKLk37Or6AFrgxnhVRHDOhw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/6AF336DC822A11E5A3415D24F8AEA228.roa
Signing time: Tue 03 Nov 2015 12:57:57 +0000
ROA not before: Tue 03 Nov 2015 12:58:04 +0000
ROA not after: Sun 31 Dec 2023 12:58:04 +0000
asID: 37640
IP address blocks: 154.66.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36374C9AF/serialNumber=25F0B10CA2E4DFB3ABE8016B8319E15511C33A1C
Validity
Not Before: Nov 3 12:58:04 2015 GMT
Not After : Dec 31 12:58:04 2023 GMT
Subject: CN=5638af55-f395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:26:8f:e6:07:6b:d3:e9:cd:17:7f:22:f7:e3:
85:37:d7:6d:86:56:df:e7:2f:b4:da:1c:4f:94:a0:
57:5b:4f:19:7f:f8:44:c3:2d:c6:67:13:11:6e:c0:
5d:4c:02:82:5a:96:52:70:04:24:dd:f4:87:6d:50:
f9:dd:d8:02:ea:60:af:d8:7b:f7:9e:35:e3:a9:ef:
a9:6e:db:ef:25:a0:3e:7b:ff:c6:34:9a:06:7a:e0:
c0:61:b8:1a:57:40:50:b8:0a:bf:7e:51:cf:80:b5:
5f:5d:3b:b8:c0:b0:7a:c3:cb:ce:db:24:96:48:c5:
ff:28:30:20:da:43:f2:a3:11:d0:2b:7c:4c:9e:b0:
c6:1f:96:28:a4:8d:b5:00:7f:7b:33:6d:75:e5:9d:
9a:35:90:ab:a7:8b:50:8b:f1:cd:23:66:c6:56:c5:
80:0c:48:f2:0e:b9:c2:8a:88:e3:a0:c2:87:b5:a2:
af:cb:da:48:81:9d:b6:95:f8:1a:0c:90:c9:9f:6d:
db:49:5c:3c:f4:5a:31:3d:10:30:93:88:79:4a:65:
5a:0f:53:4d:da:dc:ba:2b:2e:e4:42:90:95:19:5b:
37:16:c4:7b:be:0b:6f:76:b6:75:8a:78:8d:17:80:
be:fd:02:38:8a:95:d0:61:33:4d:04:6c:17:a8:86:
4f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DA:04:3B:90:E6:AA:BC:94:8A:E8:96:01:EB:78:9C:31:53:14:BE
X509v3 Authority Key Identifier:
keyid:25:F0:B1:0C:A2:E4:DF:B3:AB:E8:01:6B:83:19:E1:55:11:C3:3A:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JfCxDKLk37Or6AFrgxnhVRHDOhw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/6AF336DC822A11E5A3415D24F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
154.66.88.0/21
Signature Algorithm: sha256WithRSAEncryption
07:d5:3c:87:2d:a7:a5:e5:a4:38:25:70:72:c8:3e:ec:aa:96:
ee:db:9e:55:15:8d:06:d5:86:52:be:29:c1:d8:a6:99:e4:e8:
48:62:7c:2c:2d:b1:74:d9:db:10:1c:a9:65:95:65:2a:25:62:
14:80:7e:e0:a5:23:9d:83:07:d9:8f:82:d1:c9:9b:28:9f:19:
00:ad:2f:b4:4b:e1:54:39:96:b7:f7:0b:a1:55:bc:21:b3:d0:
a2:ce:46:88:17:3c:3a:05:fc:88:93:bf:51:30:e9:f9:55:39:
c0:55:c2:1e:9e:ef:66:99:7b:57:a0:75:43:e1:05:34:b8:89:
b4:81:06:99:0a:98:fa:87:ad:ae:18:52:47:e1:99:13:cc:bf:
f5:9d:53:8a:48:1b:bc:95:65:a1:e4:49:12:e3:60:f6:0a:e5:
97:15:2a:bd:04:61:03:5a:cb:d9:e6:bf:6d:8b:d6:a8:c7:ff:
fd:fa:b9:bc:08:e6:28:bc:2a:c6:d4:73:0e:25:69:71:a1:8b:
41:bb:64:c7:4b:07:46:ec:e0:79:61:48:9b:ba:ea:d9:0d:b8:
d4:f1:ce:25:87:4b:a7:99:17:ac:61:1a:ff:f0:43:28:50:2c:
43:4f:e1:ce:44:a4:fc:95:80:1c:7a:a9:c2:f9:c2:0f:3a:41:
b3:d4:6a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:38 2024 by rpki-client on console-ams.rpki-client.org