Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/A2EA8E8A529611ECA04CBF57D8A014CE.roa
File: A2EA8E8A529611ECA04CBF57D8A014CE.roa (raw, json)
Hash identifier: d/h5GUU6g3uzhWCbCl63bGdzxru9MfsbnLGDbrsGr1s=
Subject key identifier: F6:5D:28:14:EC:25:75:BB:DF:1C:A7:EC:1F:FC:3E:41:8E:E9:10:EF
Certificate issuer: /CN=F367F26DAF/serialNumber=AB19964619FF85343CC091180673A8AC528610F4
Certificate serial: 03E2
Authority key identifier: AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/A2EA8E8A529611ECA04CBF57D8A014CE.roa
Signing time: Wed 01 Dec 2021 11:05:47 +0000
ROA not before: Wed 01 Dec 2021 11:05:44 +0000
ROA not after: Fri 01 Dec 2023 11:05:44 +0000
asID: 328366
IP address blocks: 154.118.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 994 (0x3e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367F26DAF/serialNumber=AB19964619FF85343CC091180673A8AC528610F4
Validity
Not Before: Dec 1 11:05:44 2021 GMT
Not After : Dec 1 11:05:44 2023 GMT
Subject: CN=61a7570b-7448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:2d:e0:68:8a:03:ae:e9:06:cc:94:e3:f2:
76:18:f4:e2:53:b9:64:68:8a:40:63:27:76:ad:16:
ac:3e:ce:6a:9d:17:70:90:37:58:fc:44:3c:a0:1c:
5b:9b:71:43:35:da:98:fe:49:df:80:9b:f1:bc:0b:
1d:43:42:59:d2:fe:4f:df:62:bc:06:7e:8d:88:0f:
a8:6b:d8:e0:b7:0d:c0:f1:e8:a6:7f:96:9f:82:ab:
2e:dd:33:1e:b1:fe:98:94:cc:81:fd:30:ae:3c:50:
28:f5:8a:60:06:79:5d:2c:63:5c:a9:e0:9e:7f:f5:
03:a0:7a:08:45:94:d6:57:13:ed:92:03:75:9b:2d:
df:59:0b:8e:bc:10:0c:6e:62:a8:46:a6:c1:10:84:
a1:84:b5:88:f0:18:24:79:ae:0c:73:fe:41:b4:8a:
57:84:88:fb:7d:68:bd:75:1f:f1:85:eb:39:b7:f4:
62:8e:0b:31:e5:bf:47:0b:85:f9:e4:9f:68:8d:3f:
f2:dc:3a:bf:33:93:48:e5:6d:56:96:21:bf:23:fe:
5d:bb:96:f2:ac:c7:2d:43:52:a7:9d:ef:25:ac:4f:
83:56:c4:42:f0:f7:e9:76:39:75:ed:02:d2:ac:ad:
8e:10:b1:2b:8d:cf:6a:ae:ce:48:ec:43:a4:c0:f1:
2b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5D:28:14:EC:25:75:BB:DF:1C:A7:EC:1F:FC:3E:41:8E:E9:10:EF
X509v3 Authority Key Identifier:
keyid:AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/A2EA8E8A529611ECA04CBF57D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.118.244.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:8a:43:e1:f3:af:3f:0a:c0:eb:84:f4:3b:7b:de:34:38:82:
94:be:94:8f:71:c3:1e:88:3e:f2:04:84:62:ae:67:dd:95:33:
d6:27:31:d0:82:9f:62:38:d3:6a:1d:34:c2:62:fc:fb:b1:7f:
10:da:e1:76:0f:dd:d6:f4:9c:3a:15:db:8e:bb:d7:b3:2e:84:
43:ea:f1:30:a4:f1:93:3c:fe:7a:ab:60:99:5f:66:7c:cd:70:
cf:a0:30:ff:cc:bf:ec:5b:16:b3:c0:c2:39:27:b7:a0:d6:42:
65:92:62:0a:41:03:68:45:cd:ce:4a:58:d9:44:ca:5e:5d:4b:
4d:76:16:07:e4:ea:be:23:a0:44:f0:b5:29:37:29:e2:37:cf:
65:9a:0e:67:9a:52:69:81:61:b7:57:3f:0c:a9:0c:ad:9b:27:
28:49:16:06:c7:b2:cf:5b:a2:11:1c:7a:9c:34:05:2d:41:7d:
c5:39:97:8e:0e:5a:78:82:ac:95:7d:6c:57:9f:85:5d:37:9e:
7b:3b:aa:23:0f:f7:79:17:cc:b1:b0:4f:5a:3e:3e:4c:ff:9c:
d3:37:b0:bc:bf:2e:bb:ee:4b:5e:7c:f7:a3:a6:9b:32:84:c8:
63:74:2a:43:c2:dd:15:66:4d:c2:d0:95:3e:50:02:2e:51:fd:
d7:dd:2d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 2 01:22:08 2023 by rpki-client on console-ams.rpki-client.org