Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02F42F3E6D0E11EC8EA5A2C75A40D577.roa
File: 02F42F3E6D0E11EC8EA5A2C75A40D577.roa (raw, json)
Hash identifier: clRT/nsvTyrRuwkz1Ud4CGDXVgldAVtBJrBiMFWGotQ=
Subject key identifier: 75:A6:23:F8:91:34:86:DC:E9:06:15:13:18:3F:F3:F5:66:92:8E:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 142E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02F42F3E6D0E11EC8EA5A2C75A40D577.roa
Signing time: Tue 04 Jan 2022 03:25:49 +0000
ROA not before: Tue 04 Jan 2022 03:25:44 +0000
ROA not after: Tue 31 Jan 2023 03:25:44 +0000
asID: 138965
IP address blocks: 154.222.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5166 (0x142e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 4 03:25:44 2022 GMT
Not After : Jan 31 03:25:44 2023 GMT
Subject: CN=61d3be3d-4979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:51:b9:a6:d6:3e:ec:35:cc:29:53:36:f1:2d:
f4:34:21:c8:79:ef:9d:11:46:74:97:9d:e5:5e:34:
6c:9e:12:86:0d:16:55:5d:cb:8c:1e:e3:a5:b3:60:
b0:47:1d:c9:6a:73:a6:8e:93:88:f2:74:f2:d3:64:
f1:2e:14:e2:a4:d8:b5:85:e0:7d:2e:9c:ef:92:d8:
a1:2e:16:ec:0f:3c:92:f3:39:9a:46:d4:94:3b:da:
02:05:4b:c2:db:c3:94:da:38:0e:86:06:5a:4b:02:
87:b6:e3:58:9b:df:a6:fb:9c:f2:af:41:df:13:3e:
70:0e:a2:6e:b4:73:17:08:02:a5:f5:74:73:82:14:
2d:9a:6b:8b:df:eb:48:c0:a4:56:22:40:17:68:2f:
86:4b:8a:96:7f:0b:3d:26:29:23:39:ff:d4:eb:97:
3f:90:7d:f7:f9:91:4f:8f:75:bd:e5:8b:2b:12:c7:
a4:ad:c5:ff:79:fb:2e:d2:43:1a:ed:14:01:19:bf:
92:14:7e:4b:2d:b4:a0:1c:3e:ad:fc:0b:4b:2d:cb:
83:f6:48:69:9d:e7:2d:10:5b:61:27:6e:de:dd:75:
69:b3:a5:45:6a:89:a4:0a:d6:de:31:c0:52:89:b0:
9b:5a:ce:f5:86:5f:de:59:eb:54:92:85:fd:52:74:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A6:23:F8:91:34:86:DC:E9:06:15:13:18:3F:F3:F5:66:92:8E:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02F42F3E6D0E11EC8EA5A2C75A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.48.0/20
Signature Algorithm: sha256WithRSAEncryption
52:97:45:a9:10:19:52:ee:4b:da:5e:31:90:8f:21:2a:4c:06:
9c:1a:48:a5:12:c6:9f:3d:7e:ab:ea:8b:49:e0:98:2c:ac:78:
55:0f:33:40:a2:5c:ea:39:2c:be:8b:a5:a2:9c:8c:7f:43:e7:
ae:99:05:9d:9a:a7:28:c2:0f:77:f2:5e:3c:f4:ef:fe:7c:28:
52:38:e0:42:b1:8a:2a:37:73:c6:a4:6d:e0:cd:50:cd:ff:e6:
a4:f3:f4:fc:03:78:b3:1f:71:c1:4d:c2:04:38:8f:64:ab:14:
46:2a:3e:85:0d:d2:05:c2:b2:f3:12:7e:bf:cf:16:5e:1a:9d:
5e:3f:6a:e3:f7:1d:3b:5d:a5:77:03:a4:fa:ab:a4:f5:d7:5b:
0d:fa:8b:28:31:4d:1e:80:15:df:45:9e:ca:bd:ac:10:6d:74:
72:a4:59:38:94:11:68:c2:07:7a:44:6a:8f:1f:d5:29:74:9a:
dc:84:6d:56:d6:ca:bf:85:4a:91:78:41:73:ca:44:3a:2f:f1:
da:5c:a8:49:2e:b2:73:1b:57:c5:73:b8:34:1c:81:28:d6:5a:
cb:e7:b4:54:32:9f:fb:13:a4:04:46:ff:13:64:42:53:bf:ab:
5c:d1:01:fc:1a:1b:88:56:a5:46:f2:5a:b4:f2:b7:58:c6:94:
eb:e9:cf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-ams.rpki-client.org