Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06F71840E58111EBB0EEE92FF8AEA228.roa
File: 06F71840E58111EBB0EEE92FF8AEA228.roa (raw, json)
Hash identifier: mNrKaKs+C37SVvKt2ZvvoE4qPi/AoSa0DGo3oM7tno8=
Subject key identifier: 5B:70:EF:9C:75:5D:80:C1:B4:DF:E3:B9:DB:2B:95:F6:4D:15:3D:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0812
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06F71840E58111EBB0EEE92FF8AEA228.roa
Signing time: Thu 15 Jul 2021 15:26:29 +0000
ROA not before: Thu 15 Jul 2021 15:26:26 +0000
ROA not after: Sat 09 Jul 2022 15:26:26 +0000
asID: 397630
IP address blocks: 154.83.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2066 (0x812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:26:26 2021 GMT
Not After : Jul 9 15:26:26 2022 GMT
Subject: CN=60f053a5-e372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:15:c5:7f:03:91:72:3d:e9:cd:95:5e:16:5c:
bd:ac:5f:38:9e:93:e1:29:83:bb:c4:db:47:fe:48:
54:e6:e6:5b:c2:e8:97:21:5c:01:2b:d0:4d:47:3b:
16:40:41:9c:37:2c:c9:95:53:fa:60:46:ce:70:c8:
f4:9f:9c:ed:65:37:a4:61:81:b9:55:6e:ee:f1:58:
75:1a:65:c7:b4:78:0b:bb:42:28:2b:de:02:18:62:
19:84:e2:64:f7:6b:f0:a0:f8:58:49:83:c0:46:d3:
40:cb:72:d8:c3:a6:31:0c:5d:16:35:90:c8:90:70:
3b:4c:5a:11:9b:c6:91:0a:87:69:8d:2d:34:91:95:
91:86:d6:b7:97:a2:73:10:76:ef:bf:9c:f6:ab:77:
57:a2:91:81:f3:fa:49:d2:c4:a9:ee:fd:49:a6:0b:
88:b2:5d:da:43:57:13:66:f0:43:45:04:c9:90:4f:
a9:8e:7f:ed:21:d4:a9:8c:80:8f:ae:36:2c:5d:54:
ab:11:a9:4f:be:8a:c6:b6:28:b7:0d:59:f5:f8:ed:
c0:38:c6:55:f2:4a:c6:dc:db:74:de:1e:73:2e:65:
a9:0d:7c:24:6b:63:0d:8e:19:da:41:4d:ca:4f:be:
0f:17:5f:84:82:6f:0a:73:a9:a7:03:a5:b6:71:88:
88:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:70:EF:9C:75:5D:80:C1:B4:DF:E3:B9:DB:2B:95:F6:4D:15:3D:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06F71840E58111EBB0EEE92FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.42.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:a7:b6:9e:91:5b:fe:61:8e:b4:c1:eb:8e:19:42:75:1f:71:
be:d6:51:a8:c6:a6:3f:e1:37:7e:f7:12:43:be:d8:2d:ff:d5:
d0:67:e8:09:ed:24:54:7b:74:92:d4:33:79:a5:f4:39:83:f8:
69:6c:c0:b5:01:7d:d1:b8:76:9d:26:eb:b6:ae:65:b1:bf:55:
34:02:ba:0f:6f:48:09:75:34:46:53:76:02:a6:50:4a:84:5d:
4c:b9:3e:c9:4c:bb:f1:85:3c:04:f7:8c:f2:87:9e:ce:bc:78:
50:19:a7:e7:ea:ec:84:60:b4:79:f1:22:7e:d6:9e:a2:f0:9e:
f2:95:31:70:81:4e:5f:fd:66:49:1b:68:e1:4e:d4:8d:48:7f:
1a:27:72:69:17:d3:58:36:dc:b9:e2:81:85:aa:e2:b4:23:fc:
58:75:1c:1d:67:cb:47:76:f8:1b:9e:62:66:c7:1f:e9:1e:f1:
ee:20:e5:b9:aa:0d:6e:c8:8e:71:59:6c:6c:f7:8e:c4:0f:1e:
7f:62:7e:84:87:13:3a:e0:ce:9e:0c:84:b0:1e:c4:8e:28:64:
51:ad:f1:eb:3d:3f:b1:76:8a:6a:1c:24:8f:81:ab:ce:49:6c:
d1:eb:7c:0c:2b:d3:0e:66:31:f9:2c:90:91:3d:3a:db:4a:9f:
73:7d:d2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:04 2023 by rpki-client on console-ams.rpki-client.org