Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B81AF944B9111EC8B24180DD8A014CE.roa
File: 0B81AF944B9111EC8B24180DD8A014CE.roa (raw, json)
Hash identifier: RRXCvY6mGNgDOUE7H5EpG/teyZtuqqQ031Qqkn9szI0=
Subject key identifier: 29:9A:2F:AD:67:F3:F8:C9:84:21:5D:1E:F8:86:9A:45:6E:65:EC:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 120C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B81AF944B9111EC8B24180DD8A014CE.roa
Signing time: Mon 22 Nov 2021 12:38:08 +0000
ROA not before: Mon 22 Nov 2021 12:38:04 +0000
ROA not after: Sat 19 Nov 2022 12:38:04 +0000
asID: 9009
IP address blocks: 154.85.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4620 (0x120c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 12:38:04 2021 GMT
Not After : Nov 19 12:38:04 2022 GMT
Subject: CN=619b8f30-25e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:4f:dc:01:09:03:f5:88:3d:34:0b:5e:75:
35:b9:3e:5a:43:06:7d:29:a8:cf:7c:36:9b:f9:66:
f7:8f:e1:92:53:89:63:11:73:c9:6c:17:51:c8:a4:
cd:b1:b1:c3:84:59:79:73:20:7f:2d:f4:a1:6f:21:
1f:e6:50:b5:0d:db:9c:cf:ce:11:d7:76:56:eb:22:
8a:16:b1:66:a1:22:09:3d:78:0a:31:6d:01:04:c7:
fa:9b:cd:bb:42:b2:48:a0:7a:5b:af:92:8e:ff:03:
e0:e6:77:e8:6e:21:eb:04:13:e0:3a:a7:8e:bb:ad:
5a:a5:f9:75:85:0d:28:ac:7d:3d:4e:e9:b4:22:37:
19:66:0d:78:f7:eb:4b:ed:8b:40:8d:37:28:76:71:
31:73:e8:ab:52:e5:9e:37:ef:7c:65:59:64:7a:5f:
f8:e7:c1:4f:1d:0e:ef:bb:13:1b:25:8c:6c:f0:62:
6f:b2:48:2c:b1:18:98:08:4a:ec:e2:b1:e3:08:1a:
31:2c:7c:c2:c0:37:21:48:5b:61:02:d8:e9:e7:47:
f0:e7:b6:ba:88:36:c0:eb:73:67:af:3a:be:95:e5:
d1:60:f5:69:a4:e8:ab:66:77:e5:75:25:32:28:15:
ce:98:95:c5:ac:ed:ce:c7:27:41:f3:c9:1f:0f:00:
4c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9A:2F:AD:67:F3:F8:C9:84:21:5D:1E:F8:86:9A:45:6E:65:EC:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B81AF944B9111EC8B24180DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.124.0/24
Signature Algorithm: sha256WithRSAEncryption
86:7b:00:33:1d:67:82:8f:b0:af:a8:f8:40:09:cc:5f:0f:6f:
cd:10:8f:00:75:3e:5f:62:89:ac:5d:10:87:03:54:4b:9c:a8:
90:ce:8d:29:d4:2d:89:0e:19:4a:34:5d:5d:dd:35:ef:57:f0:
9c:93:49:e7:59:e5:00:91:46:86:e5:31:82:b3:f2:76:f2:02:
c8:b1:6a:ff:23:2f:2a:6c:a9:f3:70:3c:bc:00:09:b2:34:82:
a4:fb:fa:30:d0:d9:78:ae:b8:ac:61:3f:eb:b1:7e:b8:7a:15:
e6:34:20:88:db:63:99:35:ae:64:31:e5:3a:05:ad:9f:cb:25:
9a:b8:27:28:c8:63:17:24:32:2a:e5:04:36:b5:f3:47:53:e7:
b0:43:89:1b:1b:17:7e:d1:e5:20:c2:4a:a0:cc:08:1f:93:f8:
4f:c7:ca:af:a5:52:fb:20:17:b6:9c:bd:16:62:2a:7f:11:4c:
df:92:48:93:6d:14:8a:d6:55:ac:85:9e:4b:a6:e6:2e:d6:dc:
17:01:b4:28:cf:75:60:de:a0:c3:d1:41:9e:3e:12:0c:b2:61:
df:83:5f:1d:90:b2:a0:07:89:ce:e8:5e:6d:24:58:8e:8d:26:
d2:78:08:25:8d:f4:37:6d:5c:43:4e:90:04:c2:2f:6d:2e:45:
a7:ae:8c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:04 2023 by rpki-client on console-ams.rpki-client.org