Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11A429A8E7C011ECACC2F89CF1222468.roa
File: 11A429A8E7C011ECACC2F89CF1222468.roa (raw, json)
Hash identifier: ExMui7LAVdmA3dwm38NR1vf1oBnPfVjQidr7sYjK+E8=
Subject key identifier: 0E:2E:07:29:76:3B:FA:EB:D8:40:C7:BD:16:CE:D1:D9:C6:20:BC:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 16A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11A429A8E7C011ECACC2F89CF1222468.roa
Signing time: Thu 09 Jun 2022 06:47:46 +0000
ROA not before: Sun 25 Sep 2022 06:47:42 +0000
ROA not after: Sun 30 Jul 2023 06:47:42 +0000
asID: 133199
IP address blocks: 154.197.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5800 (0x16a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 06:47:42 2022 GMT
Not After : Jul 30 06:47:42 2023 GMT
Subject: CN=62a19792-1ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:00:b2:c3:ae:8c:63:a1:a3:9b:98:f7:44:66:
40:12:64:0b:7f:26:d5:ae:9a:ce:6e:ca:3e:42:29:
30:23:67:9a:d2:f4:03:34:1a:ad:fd:72:5a:05:ec:
85:ea:91:18:5a:52:81:e9:cc:2b:f4:f0:7c:c9:ee:
7d:a6:01:f4:a4:98:fd:16:3d:98:91:e1:fb:66:42:
cb:45:8b:f6:54:4b:0c:e4:26:fe:6f:b7:22:ac:f1:
94:10:95:b7:fa:69:03:23:ba:1b:85:46:ac:44:c9:
06:c5:40:81:e6:39:eb:ad:63:fe:05:72:cd:2c:79:
70:8a:ef:c9:2b:10:20:e3:86:f4:73:7b:8a:9a:d1:
32:02:fd:39:da:5e:8d:c4:78:07:4e:1d:77:e6:df:
4e:42:74:51:e0:c9:44:56:5c:c9:66:4a:1d:bc:31:
db:dc:38:a1:68:d1:8f:80:5f:cf:66:7a:3f:3a:1d:
0e:80:0a:e7:d9:c4:bb:97:f6:3b:c6:3b:f2:8d:9a:
93:82:0c:a4:a0:5a:09:33:e0:29:f3:97:25:39:a0:
3e:b5:8a:3a:17:aa:5b:4a:3b:c4:57:26:4c:fb:0f:
95:34:8e:a0:a1:fb:08:05:8c:f7:54:f2:06:ae:cd:
01:74:fc:be:96:2c:ea:e8:f6:5e:74:1c:f8:11:32:
52:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2E:07:29:76:3B:FA:EB:D8:40:C7:BD:16:CE:D1:D9:C6:20:BC:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11A429A8E7C011ECACC2F89CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.48.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:00:fd:11:a8:4a:d6:3a:72:6c:2b:3f:d1:7f:6f:d1:dd:e1:
4b:b4:b7:e5:f8:c8:b7:1c:ee:a4:d7:b2:24:db:eb:6b:81:90:
ef:2b:ab:2f:58:18:53:dc:80:1e:7b:34:3f:b5:1d:af:0b:71:
be:58:f8:80:4c:0c:a0:46:80:c5:c0:e4:4f:f5:99:10:c4:e4:
cf:4b:19:63:52:a2:91:42:50:88:66:77:2a:32:df:ab:67:7f:
28:2d:cf:20:0f:7c:9a:80:d7:0d:6b:a1:4c:65:50:c6:b3:f3:
1c:e9:b2:14:75:cb:0f:0b:b3:8c:51:ea:22:52:a7:75:95:df:
e3:d9:9a:2f:97:51:66:50:62:9c:a6:a0:8d:77:2e:1e:7f:08:
4a:f7:69:6b:e9:24:ec:c7:49:7d:cc:c8:2f:ed:f9:e9:ef:4e:
ba:8a:84:44:f4:68:9a:d7:80:7a:2e:d4:57:2c:ce:97:3e:1c:
70:9b:3f:45:d4:81:8e:a7:d2:2e:82:57:f6:8f:33:7f:6d:b5:
11:8e:43:df:26:88:27:54:84:13:c5:c9:9c:35:98:de:5b:92:
fe:0f:3c:3c:b6:b9:9d:10:10:d2:f2:f2:6d:15:2f:3e:f8:d4:
51:fc:2b:4b:e1:c9:65:8e:c9:ae:2e:29:54:ec:75:ec:7a:9c:
f4:63:28:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 01:14:45 2023 by rpki-client on console-fra.rpki-client.org