Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E26060EE7D711ECB799AFE4F1222468.roa
File: 0E26060EE7D711ECB799AFE4F1222468.roa (raw, json)
Hash identifier: TEkE0q2hhJjXiXqMtrEayAWuiwQGMGXQ1M67IejSULM=
Subject key identifier: 9B:AA:52:5E:6C:54:6D:45:59:8E:BB:9C:E7:83:B7:39:79:75:91:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 16C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E26060EE7D711ECB799AFE4F1222468.roa
Signing time: Thu 09 Jun 2022 09:32:18 +0000
ROA not before: Thu 09 Jun 2022 09:32:15 +0000
ROA not after: Wed 30 Aug 2023 09:32:15 +0000
asID: 133199
IP address blocks: 154.204.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5828 (0x16c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 09:32:15 2022 GMT
Not After : Aug 30 09:32:15 2023 GMT
Subject: CN=62a1be22-70ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:b4:d6:02:15:08:a4:3f:38:e3:af:94:ab:
c7:4c:88:0d:4c:14:ee:83:28:04:b7:7d:a0:e9:00:
48:99:59:76:75:eb:17:f2:0f:16:fc:26:76:37:9c:
44:60:20:78:7b:f4:00:7b:a5:4c:a2:f7:80:4a:3d:
0b:c5:69:2f:e8:d6:62:fb:b2:90:b4:b5:f9:62:ed:
5d:a3:57:28:d8:2e:29:3e:a9:c5:87:03:0c:a5:9d:
79:f2:54:f1:dd:4b:a1:93:dd:e0:dc:05:83:92:c9:
64:ce:21:57:a6:0d:25:ef:b9:cc:f7:86:e6:0d:b5:
f8:b0:d2:fb:1e:b9:bf:70:ed:51:5c:01:10:c3:fd:
0c:d4:de:eb:2a:65:81:09:06:48:79:fa:b4:d5:75:
c0:e7:82:ca:52:70:b7:eb:68:9e:fe:08:fd:f6:9f:
78:4d:2e:68:1b:f1:18:28:69:56:dd:7e:c2:9d:9f:
77:0f:1d:fd:df:5c:a8:ef:ea:ed:f6:d8:39:e7:21:
e8:ee:1a:e2:f4:a9:08:86:4f:e0:ae:d9:25:de:c3:
8b:60:07:50:82:df:16:a9:69:f8:47:5d:31:c5:13:
8b:33:5a:aa:6d:8d:01:b4:55:9f:4f:f9:cf:41:15:
1b:22:0b:f9:bd:18:dc:48:52:64:1e:6a:27:c0:7d:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AA:52:5E:6C:54:6D:45:59:8E:BB:9C:E7:83:B7:39:79:75:91:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E26060EE7D711ECB799AFE4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.49.0/24
Signature Algorithm: sha256WithRSAEncryption
88:d2:02:4e:d1:be:cf:f2:76:20:61:43:63:5d:99:ec:30:96:
07:3b:88:5e:35:56:6b:bf:6c:5b:9d:6b:5f:d3:58:7d:18:7c:
a5:84:2e:47:18:e0:92:34:d1:14:7c:52:b7:18:2f:9b:32:11:
cb:e1:30:91:89:d4:34:72:be:1d:88:76:b9:ec:7c:85:12:00:
dd:1a:71:53:c3:8a:36:af:bd:d3:cf:11:f1:1f:b8:28:70:65:
58:38:c8:0b:37:ae:66:31:47:94:80:b9:72:1f:e2:af:cc:7f:
03:48:21:9f:bc:4d:39:dd:5b:26:20:f2:55:21:d1:c2:c8:40:
fb:20:e2:cc:00:32:df:6d:1f:b9:6d:94:c2:29:46:55:9c:5f:
23:b6:8d:5d:4f:80:32:bc:18:e7:cd:81:16:5d:18:52:0f:8b:
8c:35:7c:34:ff:4c:2a:17:44:63:65:12:42:41:39:4d:28:8c:
63:e8:91:c9:d2:9d:7b:27:26:7d:e0:76:66:46:b3:cc:ea:7c:
55:a8:4f:42:db:93:82:05:29:4f:c2:eb:1a:06:ef:13:1d:76:
8e:bf:99:55:a2:4d:b6:c2:f0:32:2b:09:12:38:5d:7d:f8:99:
5a:38:d7:e8:4a:29:b8:8b:d0:7e:29:ac:e5:48:ee:a0:50:60:
64:33:ad:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 13:18:04 2023 by rpki-client on console-fra.rpki-client.org