Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1752E572C04E11EC9BAFFACD5A40D577.roa
File: 1752E572C04E11EC9BAFFACD5A40D577.roa (raw, json)
Hash identifier: rBpw60ll54oAdu+EVYzhrs6UmF3UyK4TevJhAK2K8Kw=
Subject key identifier: 59:4C:05:13:AF:6D:29:A8:11:A9:B1:56:2E:59:D7:8E:3A:87:90:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 15D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1752E572C04E11EC9BAFFACD5A40D577.roa
Signing time: Wed 20 Apr 2022 02:03:37 +0000
ROA not before: Wed 20 Apr 2022 02:03:32 +0000
ROA not after: Sat 31 Dec 2022 02:03:32 +0000
asID: 35916
IP address blocks: 154.198.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5593 (0x15d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 02:03:32 2022 GMT
Not After : Dec 31 02:03:32 2022 GMT
Subject: CN=625f69f9-406a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:49:7d:ba:98:cc:c0:4b:8d:80:9d:3c:3a:
3a:f7:03:c2:04:2f:83:5a:77:09:43:4f:6f:bc:55:
12:c4:81:78:ae:2a:f3:26:4d:35:36:ac:f1:c3:09:
3b:a2:e1:45:1f:02:31:a8:05:1c:29:ef:89:6d:71:
1c:a2:bd:af:12:46:e9:f3:2a:3c:61:0e:7a:fe:a8:
34:d9:c8:e9:be:e4:17:65:c9:c9:a3:33:16:99:2e:
1e:8e:3a:53:dd:db:e1:0d:8d:00:fa:39:c2:3b:0a:
16:25:a7:9a:f2:90:b8:1f:9e:8a:b8:a3:be:9a:74:
5d:39:71:03:25:a7:ec:d5:73:10:8f:87:74:4b:85:
90:45:6a:1d:52:c7:63:c5:a8:99:1e:b7:31:40:99:
d4:5d:e2:3f:8e:de:cb:a7:e5:a1:35:b6:83:68:7f:
fe:6a:7b:e0:36:8f:55:8e:dc:99:ca:78:56:af:0a:
fb:20:72:ca:07:71:04:80:de:af:82:80:4b:88:eb:
ab:19:b4:c1:d7:f2:10:c3:bd:39:f7:15:59:ef:38:
b0:4c:15:c4:f9:a1:fa:09:df:50:4c:c5:d1:49:16:
be:9b:27:50:4d:26:7e:74:74:7c:57:99:50:56:18:
32:37:51:51:0e:06:e8:7e:5f:5a:57:7d:af:6a:dc:
a4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4C:05:13:AF:6D:29:A8:11:A9:B1:56:2E:59:D7:8E:3A:87:90:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1752E572C04E11EC9BAFFACD5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.64.0/18
Signature Algorithm: sha256WithRSAEncryption
49:83:4a:0b:65:bb:08:df:64:80:74:f2:b0:8a:63:93:ae:fe:
76:be:e0:23:68:3e:d7:87:83:0a:75:a3:e8:03:be:04:6b:02:
6c:4a:78:9f:49:16:d7:38:56:77:83:5b:c9:7d:33:53:f9:d6:
25:90:6b:33:29:76:d7:67:e6:25:d3:ff:75:a7:91:f1:0a:3c:
de:13:db:ff:32:ee:b1:59:27:fc:83:c9:61:3a:89:0f:cb:76:
68:de:86:92:94:a1:70:d8:f6:64:10:81:1b:71:90:e8:52:74:
71:67:24:c0:5f:c2:fe:9e:ee:c0:fc:bc:a1:79:ed:c8:49:89:
c6:9a:e3:eb:56:13:7d:6f:96:64:6c:f5:d1:2b:96:1e:6f:0f:
74:6f:96:19:c1:87:65:f0:4a:04:2c:74:e3:63:7d:35:d3:f8:
be:6a:f8:f2:7b:15:d0:74:47:61:9c:dd:d6:5a:6b:ab:e9:a3:
64:af:fc:0f:7d:fc:7e:c5:a0:3a:40:82:04:ce:a5:2d:a5:ff:
b0:f3:e8:0f:ab:fa:f4:b1:26:22:29:87:5c:ac:fc:57:0d:9f:
fd:41:70:de:b7:1b:33:c1:fe:1d:b1:10:a2:23:b8:0b:82:6f:
60:ce:0b:57:b1:02:c6:94:c7:98:46:b3:8a:60:94:0b:d5:0e:
94:9d:e5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:04 2023 by rpki-client on console-ams.rpki-client.org