Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18D05D366F6C11ECAF3FE1B95A40D577.roa
File: 18D05D366F6C11ECAF3FE1B95A40D577.roa (raw, json)
Hash identifier: tgY+1pbb+Pm1GH6l26n/hkjyU1nrHTLEXN67FLJ2I64=
Subject key identifier: D0:B5:C9:C4:29:F7:CA:1F:9F:50:ED:6F:40:6B:87:5A:16:E5:7B:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1435
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18D05D366F6C11ECAF3FE1B95A40D577.roa
Signing time: Fri 07 Jan 2022 03:44:21 +0000
ROA not before: Fri 07 Jan 2022 03:44:17 +0000
ROA not after: Fri 30 Dec 2022 03:44:17 +0000
asID: 35916
IP address blocks: 154.84.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5173 (0x1435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 03:44:17 2022 GMT
Not After : Dec 30 03:44:17 2022 GMT
Subject: CN=61d7b714-b8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:7f:59:34:66:b1:b8:6c:c2:8d:46:be:3f:
b3:12:db:b7:10:b4:84:7b:5f:34:d3:70:04:2e:df:
bd:09:33:dc:59:5d:86:1c:b2:9e:42:b7:f2:3f:68:
68:70:63:80:0c:32:7a:94:04:9f:4c:38:bf:08:be:
e6:e6:f2:5a:5c:2a:82:8a:5f:61:ae:19:ef:99:c5:
bd:03:58:0b:ab:53:3c:1f:fb:b3:7e:2b:dd:e1:a4:
61:82:d6:94:d2:bd:6b:68:30:99:d6:25:0b:e2:b0:
5e:90:66:ac:1c:cd:e9:ca:80:04:8e:7a:2e:06:da:
0b:ed:ac:3a:af:cf:83:6e:3d:e6:53:7b:1e:2e:68:
02:4b:9b:d2:85:02:00:50:99:39:96:67:a7:58:8e:
af:86:d6:b0:23:a8:dc:ef:6d:4e:a0:fe:03:08:df:
64:6f:06:4e:d0:d8:80:b5:e8:73:e8:83:20:00:b1:
d6:54:f0:c3:c6:38:65:53:95:70:40:bb:bf:3f:69:
39:08:05:62:13:85:49:5e:b8:fb:f7:c5:4e:83:99:
bd:d2:97:4d:2f:c3:d6:1d:23:38:f4:ea:ab:7c:aa:
ab:0c:f2:ac:37:53:25:86:29:82:6a:16:ba:37:84:
89:21:0b:60:cf:33:7f:a0:3a:81:d1:0e:d9:48:52:
a9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B5:C9:C4:29:F7:CA:1F:9F:50:ED:6F:40:6B:87:5A:16:E5:7B:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18D05D366F6C11ECAF3FE1B95A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.192.0/18
Signature Algorithm: sha256WithRSAEncryption
56:6a:ba:7d:06:55:c5:e4:21:85:5e:c2:86:40:b7:f2:f2:7d:
65:5a:fa:9e:21:b6:c1:1b:1f:24:e4:de:3b:cc:ca:c9:82:df:
f3:f4:87:84:e0:ef:d0:c7:1c:b7:2e:07:98:de:1f:90:a8:ee:
00:6a:5c:1d:ac:60:75:1b:63:af:c8:f9:4d:6c:0e:b8:24:31:
d2:6c:bd:fe:ff:83:07:7e:60:86:39:91:e5:7b:6b:76:6d:b9:
b8:ee:a7:0b:53:cf:bc:a6:93:8b:03:31:30:0c:18:6a:83:55:
17:42:97:ec:ca:96:86:c7:40:cc:ad:9e:78:b1:46:e4:a4:91:
b1:76:6a:55:cb:f2:e7:1c:54:8c:34:9b:aa:c5:76:9a:db:14:
a2:9e:84:51:ea:f6:d1:e2:50:32:84:50:11:64:a0:6c:3c:01:
57:9c:c4:c6:33:fe:04:da:b4:d1:ed:1b:62:11:71:d6:85:f3:
ed:89:ff:33:85:c1:bc:8a:20:05:f8:25:14:a0:10:2b:df:9d:
e2:53:a5:a1:42:6f:53:ee:4d:45:6a:e4:ab:69:0a:db:d6:30:
d6:f7:71:13:f8:07:c9:57:e3:46:04:5a:ed:84:b3:81:f3:7c:
32:ba:33:f7:88:02:8f:b6:1b:59:54:4f:88:b3:f2:03:02:9c:
21:00:b1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:04 2023 by rpki-client on console-ams.rpki-client.org