Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FEE8BC82A9E11EDB0FE8CE6F1222468.roa
File: 0FEE8BC82A9E11EDB0FE8CE6F1222468.roa (raw, json)
Hash identifier: +mQT1KGDaeAkm7ZNuZyY6esge/BhdtZrHhNroqybc0Q=
Subject key identifier: 6C:85:5D:99:79:EE:DD:EB:29:D8:DB:6E:0C:52:96:6C:CB:3F:A5:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1880
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FEE8BC82A9E11EDB0FE8CE6F1222468.roa
Signing time: Fri 02 Sep 2022 09:03:08 +0000
ROA not before: Fri 02 Sep 2022 09:03:04 +0000
ROA not after: Fri 30 Dec 2022 09:03:04 +0000
asID: 328608
IP address blocks: 154.197.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6272 (0x1880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 2 09:03:04 2022 GMT
Not After : Dec 30 09:03:04 2022 GMT
Subject: CN=6311c6cc-2c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a3:4f:26:f0:f6:0d:b0:24:8b:48:d1:49:a0:
56:b2:08:26:18:66:a3:04:b9:f9:6f:66:a4:43:20:
24:dc:c5:5b:b2:d4:76:ce:1a:7c:e1:87:47:53:5f:
f0:57:f7:1d:1a:68:95:bb:46:e2:cb:32:7d:6c:32:
d0:73:1a:35:98:2f:4f:9c:49:18:e3:69:33:e6:22:
68:9d:fd:d1:ec:56:32:71:d6:c9:5c:66:dd:dd:aa:
d6:5c:2a:54:6a:b0:e6:13:a0:23:0b:da:18:3f:48:
e7:ff:ff:02:35:c8:46:d5:99:6e:63:10:a2:dc:82:
df:ba:93:5c:6a:6c:0f:54:81:a8:af:3f:f6:34:16:
da:15:17:04:68:87:25:a5:e5:55:78:52:c8:17:27:
7a:a9:d7:5f:76:23:5a:3c:dc:02:00:8a:f1:8f:20:
c2:e6:ed:d7:12:fa:b3:0c:59:72:e1:d0:89:de:f3:
19:d6:95:b2:54:4d:1e:b6:9b:b6:03:a8:23:dc:0e:
d9:83:5c:42:c0:ed:76:b5:ed:55:09:51:ea:dc:7e:
3a:6f:25:00:9f:36:25:f0:05:4b:81:aa:8b:c7:71:
5f:32:91:55:10:3d:7c:a1:15:cb:96:db:b2:a3:84:
48:8d:79:45:3e:ab:14:58:a5:bd:c8:1d:9b:34:47:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:85:5D:99:79:EE:DD:EB:29:D8:DB:6E:0C:52:96:6C:CB:3F:A5:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FEE8BC82A9E11EDB0FE8CE6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.34.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:eb:43:ef:a2:5e:f4:c9:ed:8b:30:cd:45:45:3b:b6:b1:a1:
81:db:44:59:0d:dc:90:ce:21:c9:bc:0c:72:7e:69:e6:d0:8d:
7a:b3:65:77:79:ab:71:80:4e:ea:49:1b:d1:ea:ab:bd:e0:04:
ce:f9:9b:71:4a:45:60:53:3a:46:87:d1:a8:e8:f0:d6:9d:ad:
88:27:b2:00:31:d6:67:b6:d3:69:3e:bf:26:90:da:e7:9c:81:
05:b9:78:37:95:31:3e:08:6a:59:58:16:cb:3a:6a:b1:46:18:
fd:47:35:1b:88:79:a3:50:26:2e:8e:e6:bd:75:02:52:40:2b:
8f:4f:d4:84:c0:eb:2b:65:f6:39:b0:72:4e:65:e2:e4:c1:b4:
cb:5b:8a:67:81:e2:9b:62:80:14:0c:42:a1:98:98:fe:bd:71:
15:7e:87:04:83:27:34:eb:3a:52:cf:25:9a:db:fb:51:8a:9a:
2c:47:fb:af:35:f2:e3:50:d8:e9:5d:44:f4:2e:5c:31:18:c2:
c6:de:7d:58:35:d4:51:8d:d9:e8:55:24:aa:22:2e:4e:7f:e7:
80:0a:a6:9f:b8:ef:63:bf:25:49:1a:de:83:93:62:7b:04:de:
16:8b:10:9c:ff:b1:79:2c:b6:f2:37:9f:57:37:a2:4f:52:cb:
a6:e7:21:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:04 2023 by rpki-client on console-ams.rpki-client.org