Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F5C42205BB611ECBCE1D6C15A40D577.roa
File: 0F5C42205BB611ECBCE1D6C15A40D577.roa (raw, json)
Hash identifier: 0nwjPo7Ip1++BgcfpG/Pr0NdmxPic8deSFNHsTSPXK8=
Subject key identifier: 60:B0:AD:1C:C7:8D:B5:AD:70:0B:6F:F1:FC:D5:1B:BD:78:71:1E:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 13A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F5C42205BB611ECBCE1D6C15A40D577.roa
Signing time: Mon 13 Dec 2021 01:43:24 +0000
ROA not before: Mon 13 Dec 2021 01:43:21 +0000
ROA not after: Fri 30 Dec 2022 01:43:21 +0000
asID: 133201
IP address blocks: 154.204.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5027 (0x13a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 01:43:21 2021 GMT
Not After : Dec 30 01:43:21 2022 GMT
Subject: CN=61b6a53c-3e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2b:cc:2b:65:91:0f:1e:32:1a:a3:63:ea:5b:
19:61:a7:19:e5:a5:7b:e4:bd:ae:03:f7:08:75:30:
e4:ec:10:29:ab:58:46:aa:44:fb:b9:1a:0b:36:77:
4f:60:20:a7:1f:f3:c9:de:b9:cd:d8:7d:fb:39:a3:
14:99:4d:14:f4:a8:fa:56:3d:b3:06:0c:a9:33:33:
90:e4:f3:b4:5d:2c:ed:4d:15:76:ba:ec:f7:d0:f5:
32:af:30:df:a0:59:3a:6a:06:63:05:ce:a3:21:a5:
e1:04:da:e4:60:d7:f6:1c:86:58:22:d5:6d:be:32:
3f:31:91:14:48:14:05:e1:6e:95:4f:85:11:98:fb:
39:7a:a5:11:0e:fc:a4:d4:0a:ac:52:3a:49:9f:2f:
54:d9:91:e1:ff:b9:84:e7:89:1d:74:92:b8:6e:02:
6b:cb:54:52:e4:8a:f3:86:28:5d:50:8a:e8:66:d5:
56:7e:3b:e8:0e:60:1a:ec:e3:36:c1:2c:83:cb:1f:
19:6e:4c:54:3a:30:fc:f6:d9:9c:a9:ca:79:23:85:
d6:ed:6f:8c:ae:b0:4c:f0:e5:f4:56:d5:cd:df:db:
11:3c:a2:c0:31:03:91:6f:5b:43:f2:5b:04:10:a1:
eb:36:57:34:19:b7:73:c0:60:ec:64:c4:1c:70:06:
fc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B0:AD:1C:C7:8D:B5:AD:70:0B:6F:F1:FC:D5:1B:BD:78:71:1E:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F5C42205BB611ECBCE1D6C15A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.68.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b5:e7:f7:0a:23:aa:3c:69:a8:ec:cc:a3:1f:23:6d:74:06:
eb:21:f8:f8:4a:de:54:c7:f4:d2:80:5a:a2:fb:6c:6f:cf:55:
2e:7b:e3:b2:04:e1:e0:78:af:9e:df:40:0a:2a:33:5b:1f:ed:
9e:4e:22:2e:64:56:ae:65:d7:10:b1:3e:98:40:da:67:8d:ff:
c3:c7:06:08:5f:8e:01:bb:fa:f3:6c:c8:0d:27:9b:50:37:b3:
65:22:69:08:d8:7b:fd:9e:fe:90:bf:e7:45:da:83:04:cb:d2:
8b:e8:5f:6b:0b:2b:70:0c:2d:ac:ff:97:94:0b:d6:ec:f6:3d:
63:d7:92:76:5a:72:e9:af:65:bd:ba:2b:e7:c0:64:ce:32:26:
15:b9:29:a4:cf:49:51:be:1d:39:eb:e9:ec:28:1b:17:6b:f7:
7a:20:b6:53:ec:0b:78:09:55:d9:03:33:1b:04:b9:d0:0a:95:
55:b7:cd:ef:c0:9b:04:3d:b0:01:a8:af:ea:97:35:62:3e:26:
61:c2:78:8c:e5:9f:76:fc:c1:cb:39:c0:da:44:ce:4c:b1:3a:
85:58:15:07:da:e8:fe:8f:cc:51:ce:8b:5f:df:b2:9f:fe:7a:
e7:ad:27:f3:ef:bb:d0:4e:d0:38:e3:46:a2:00:9f:e3:9b:9c:
dd:a5:02:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-fra.rpki-client.org