Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A0BB88090AB11EC9CD754BA5A40D577.roa
File: 0A0BB88090AB11EC9CD754BA5A40D577.roa (raw, json)
Hash identifier: iZ8mdjfVouOCqDyfzsJzVpqtqngcgHDGjSOi4npetCY=
Subject key identifier: 08:4E:98:B2:65:CC:8E:A9:54:DA:FD:D9:59:80:62:C2:F0:0D:9D:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 14DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A0BB88090AB11EC9CD754BA5A40D577.roa
Signing time: Fri 18 Feb 2022 11:08:02 +0000
ROA not before: Fri 18 Feb 2022 11:07:59 +0000
ROA not after: Fri 30 Dec 2022 11:07:59 +0000
asID: 137951
IP address blocks: 154.209.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5340 (0x14dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 18 11:07:59 2022 GMT
Not After : Dec 30 11:07:59 2022 GMT
Subject: CN=620f7e12-654f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:42:e5:04:71:82:90:60:6c:15:94:cd:47:c1:
53:53:04:44:ef:aa:bd:9e:35:1a:9d:9d:37:7c:cf:
25:fb:44:66:c6:b9:e7:fb:f2:7f:f1:98:78:1d:86:
ac:62:41:1c:6f:c2:41:ac:a5:1b:c6:2b:5e:57:c5:
d2:ca:ab:d9:f6:d9:58:07:cb:da:56:13:dd:34:f0:
a1:61:13:be:f1:bb:48:65:0b:10:4a:e9:aa:a7:ba:
cf:aa:a2:b9:92:91:fd:17:6e:54:50:e1:47:ea:59:
52:b4:ca:47:98:1c:fa:9a:c7:9d:b6:02:1c:a1:9a:
9b:bb:a3:b4:a2:50:19:25:39:28:69:6e:cf:c8:7a:
87:4c:11:e1:64:bb:73:bd:c0:0e:7b:e1:7f:6a:36:
5a:78:4f:1e:be:8a:5d:cb:8e:e9:bd:6f:9a:b2:0b:
fe:c9:58:31:e2:1e:36:11:32:c4:bd:99:af:7a:c4:
9f:75:f1:de:01:f7:0b:38:4c:ee:50:d7:47:97:30:
6a:5c:b0:8d:51:c0:11:1b:80:e1:98:36:18:ce:d1:
c5:de:92:ff:54:1d:1c:c7:9a:90:38:76:a3:1c:f4:
9e:1d:fe:07:c9:96:91:d1:31:e1:2d:e7:cf:b3:3d:
a9:d3:7a:a3:2a:72:4c:ac:07:d9:db:f5:21:51:10:
cc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4E:98:B2:65:CC:8E:A9:54:DA:FD:D9:59:80:62:C2:F0:0D:9D:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A0BB88090AB11EC9CD754BA5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.189.0/24
Signature Algorithm: sha256WithRSAEncryption
16:73:53:f6:6b:36:ee:17:c3:e4:65:f3:b2:8d:11:e4:08:03:
bb:8e:30:df:fb:50:d8:07:db:a5:f3:7a:69:3d:e6:73:17:38:
47:5e:73:7f:c2:fb:6f:00:67:65:e4:19:69:01:34:34:92:fd:
c4:1b:21:65:02:aa:05:85:ee:88:69:94:a7:ac:24:db:46:48:
4a:4b:83:1e:32:3e:af:b1:6b:87:0c:2d:0f:30:74:22:d1:ae:
23:04:9d:88:be:56:c7:50:9e:d0:52:1f:7f:ac:c1:7c:f0:4a:
f4:06:fb:8f:b2:2d:69:74:f6:1b:e0:0e:70:81:30:be:c9:c2:
41:c3:8d:ca:e2:bc:b1:5d:e9:71:ac:af:15:a6:de:4b:73:ab:
65:b0:29:25:7e:a2:77:44:20:f3:81:94:b4:5f:65:cc:13:ca:
f4:33:8b:fc:cb:a8:d6:23:12:33:2d:e8:37:b2:09:bf:e0:88:
e4:7e:55:82:ef:9a:12:30:f7:bd:1b:fa:6d:5c:63:e3:30:a8:
db:4f:91:ad:f1:67:fc:65:2b:88:0e:a6:97:57:ea:c4:eb:af:
9d:81:0e:56:97:d4:a4:a7:f3:12:a1:96:9f:ac:86:c6:25:b3:
78:b6:86:c3:a3:10:00:13:cc:3d:05:a1:b7:45:53:fd:a7:6b:
80:8f:f7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:06 2023 by rpki-client on console-fra.rpki-client.org