Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/034F9EB60E5111ED94C3C8A7F1222468.roa
File: 034F9EB60E5111ED94C3C8A7F1222468.roa (raw, json)
Hash identifier: ob1nvOg1Lv1fMa3u1L+vUZjoCpMaDWOU+OkpfupYh3U=
Subject key identifier: CA:A6:E6:20:87:4D:25:AC:69:A0:EC:13:AF:F2:CC:E5:E7:2B:06:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 17B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/034F9EB60E5111ED94C3C8A7F1222468.roa
Signing time: Thu 28 Jul 2022 08:41:03 +0000
ROA not before: Thu 28 Jul 2022 08:40:59 +0000
ROA not after: Mon 15 May 2023 08:40:59 +0000
asID: 397630
IP address blocks: 154.201.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6064 (0x17b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 28 08:40:59 2022 GMT
Not After : May 15 08:40:59 2023 GMT
Subject: CN=62e24b9f-8e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:8b:93:09:d0:8c:26:28:2a:b7:fa:fc:10:
ad:fc:ca:5d:fe:c8:a4:03:94:2a:49:8a:41:45:0e:
6d:bb:41:db:96:c8:de:05:b0:ab:be:be:14:62:ce:
28:19:b1:47:d7:6c:e0:d7:b1:b1:17:b2:8c:3d:9e:
76:2b:51:a6:c8:28:ae:c5:73:4e:b6:aa:00:ce:0c:
d2:ef:e4:f2:2f:15:59:b6:8b:57:36:e8:c6:8e:c1:
b2:9f:0c:1f:ca:e2:86:da:56:5c:e2:1d:d6:cf:28:
d5:73:b4:17:bd:5f:29:9d:bd:0b:54:ad:58:35:26:
33:d0:88:c7:63:98:66:41:f9:6d:37:ec:96:79:c8:
2a:97:b4:c2:8b:35:40:5c:6b:a0:75:47:44:b0:60:
44:9c:9a:24:e7:6e:16:12:12:ab:e0:bd:bb:bc:f7:
86:fa:04:13:9e:4d:a3:3f:db:81:7a:0d:93:20:33:
11:42:39:da:b6:7b:d5:0a:31:3e:de:8c:71:69:f5:
99:59:d5:a5:16:aa:5f:d1:9b:a7:cc:f4:d1:41:36:
ed:c8:c5:15:eb:94:1b:0a:bd:58:6c:0f:bf:c1:ee:
b8:bb:e2:1d:6e:b2:16:8f:4d:da:7d:61:24:ff:5c:
a9:c2:8e:b3:39:43:e0:ce:1c:41:a9:00:0a:17:6b:
4d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A6:E6:20:87:4D:25:AC:69:A0:EC:13:AF:F2:CC:E5:E7:2B:06:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/034F9EB60E5111ED94C3C8A7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.44.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:39:9f:22:82:9e:0b:33:57:03:54:da:93:f2:ea:43:2c:18:
81:55:7c:75:5b:3c:24:20:70:48:11:83:59:50:be:8f:96:53:
6e:58:73:ac:c9:9d:55:a4:43:b2:26:51:ba:d6:0c:cb:b6:f1:
69:dc:dd:1c:90:40:6c:f2:7f:bf:b4:63:02:80:ce:f4:ff:4b:
37:57:f7:3c:08:0f:a7:57:4a:a9:e3:f4:67:10:9b:78:98:b0:
e3:8f:ae:ab:42:bf:98:96:00:f9:b6:88:48:dd:73:54:93:71:
df:83:de:fe:79:1e:2f:67:d5:81:2d:1e:df:59:40:0e:ce:c2:
0c:d7:4b:cd:3a:02:c1:3c:44:0f:fe:f8:8c:0c:26:ce:c9:c9:
19:d4:28:b9:b7:0b:26:c8:2f:95:d0:82:51:cc:c5:5c:e8:eb:
56:fe:bf:ae:93:8e:20:d0:f0:8c:92:c2:05:7d:05:7c:5a:19:
38:b5:f5:4c:c8:e8:59:ed:69:b0:20:b7:a2:de:fb:b2:1b:96:
81:a1:07:8d:7b:81:b2:9a:d0:58:a6:b3:73:d7:ec:99:bb:4a:
2e:c7:79:02:30:15:c7:03:b2:f4:f8:39:d6:75:6b:30:91:32:
ba:c7:a2:ec:5d:bb:97:3e:c9:72:c3:f9:89:67:8d:f3:7c:66:
a7:d8:5d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----