Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A5DC65A3B1A11ED8F6546C6F1222468.roa
File: 1A5DC65A3B1A11ED8F6546C6F1222468.roa (raw, json)
Hash identifier: BdTVzH3V73AntOQUTB2p4FCt4jyZaIrR0Qv0niyhnjY=
Subject key identifier: B8:E4:EA:B4:2B:6E:85:9D:A3:26:73:3D:9B:E6:24:5C:79:3F:B5:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1911
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A5DC65A3B1A11ED8F6546C6F1222468.roa
Signing time: Fri 23 Sep 2022 08:31:22 +0000
ROA not before: Fri 23 Sep 2022 08:31:18 +0000
ROA not after: Fri 30 Dec 2022 08:31:18 +0000
asID: 328608
IP address blocks: 154.202.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6417 (0x1911)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 23 08:31:18 2022 GMT
Not After : Dec 30 08:31:18 2022 GMT
Subject: CN=632d6ed9-fc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:98:61:7e:50:fe:55:c5:c9:c2:74:0a:e0:
fc:4e:90:eb:2c:3f:d2:c5:81:93:03:87:01:d2:56:
fb:b5:a6:84:59:a1:73:28:43:d5:b9:03:94:97:2b:
96:83:62:3d:0a:89:f0:7a:59:74:95:3a:79:ef:dd:
4d:3b:7b:b3:1e:1b:3e:f5:f1:bd:b7:67:f2:fe:9d:
f6:a8:eb:ed:cb:e5:a7:2d:45:5b:33:13:4a:ee:d7:
e8:61:83:6d:d7:8a:85:e6:00:32:55:70:83:f6:f4:
8a:86:60:98:3a:b2:73:05:fe:ee:cd:80:26:01:ba:
e1:8a:a3:91:51:c3:f9:1a:bb:64:e6:78:ff:56:1f:
92:46:d3:6d:99:1b:a1:d8:5e:ee:ba:00:06:41:b1:
6c:df:19:d6:b1:94:87:5d:dc:2c:43:13:4e:a0:ff:
7f:eb:a9:77:36:9b:c4:93:6a:57:de:57:87:15:14:
67:a7:1b:3b:23:b5:cf:fc:3a:03:7d:75:d8:13:20:
2a:30:30:a8:12:a6:af:21:c0:61:0f:00:78:a9:26:
0f:1b:56:99:c3:b1:e9:2a:99:b8:c6:7d:ef:eb:66:
38:59:51:02:69:9e:0a:39:a8:54:b3:72:04:b5:18:
79:46:5c:7e:e7:2b:e6:2e:2b:bc:c8:36:99:ea:54:
1f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E4:EA:B4:2B:6E:85:9D:A3:26:73:3D:9B:E6:24:5C:79:3F:B5:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A5DC65A3B1A11ED8F6546C6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.2.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:c8:15:ef:58:bd:35:a6:b1:7d:e5:41:6b:ea:6c:8f:87:38:
56:f3:b4:21:da:ac:a7:61:ab:fd:4f:c8:1f:45:90:be:28:84:
37:01:29:07:35:f6:5b:3d:f1:c0:36:17:ac:90:a8:27:d0:f2:
5a:08:fe:f7:7e:56:af:a9:f7:50:14:ff:49:1d:af:3f:b5:5e:
7d:84:d6:3f:2d:ff:2d:ee:9c:ac:60:dd:09:ce:54:bc:94:d8:
59:c8:5c:72:04:b7:f1:dd:2d:a3:2e:27:43:57:fb:e9:92:de:
1a:60:1f:c1:79:e8:58:30:80:94:f6:c6:07:10:70:3e:32:0b:
bc:9a:f0:07:09:71:90:ae:1f:24:78:3e:fb:28:1e:47:74:7c:
43:21:65:46:19:8e:af:bb:03:08:39:c4:93:b0:e9:04:6f:cf:
ef:0b:11:80:12:03:b1:25:ff:fc:b3:24:b0:6d:6c:5d:a2:7c:
de:6a:8b:b1:8b:7c:3a:24:12:e3:aa:c4:ed:a9:e5:f1:5c:2c:
d0:17:f3:ac:50:cf:22:d5:b8:77:7b:f1:96:f6:ce:de:36:e2:
fa:94:34:48:57:8e:75:d1:72:5c:a7:c1:82:57:c3:6b:b0:04:
ba:81:80:af:c6:47:d2:bb:6b:47:83:32:7a:50:1a:28:9c:f8:
07:e4:b4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:04 2023 by rpki-client on console-ams.rpki-client.org