Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EC415CCA44411EC85243FCE5A40D577.roa
File: 1EC415CCA44411EC85243FCE5A40D577.roa (raw, json)
Hash identifier: FTvNt4MwnC46PT3o7J6nZyT2E3zNzWe1VAbPjznF78U=
Subject key identifier: A5:76:93:E9:BC:74:CF:59:DB:A4:08:E9:A5:76:A9:AF:4E:74:84:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1538
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EC415CCA44411EC85243FCE5A40D577.roa
Signing time: Tue 15 Mar 2022 09:41:42 +0000
ROA not before: Tue 15 Mar 2022 09:41:39 +0000
ROA not after: Sat 31 Dec 2022 09:41:39 +0000
asID: 133201
IP address blocks: 154.205.40.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5432 (0x1538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 15 09:41:39 2022 GMT
Not After : Dec 31 09:41:39 2022 GMT
Subject: CN=62305f56-a4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:0f:ee:36:2f:73:74:5d:66:42:75:85:5d:
d4:92:d3:33:a0:cb:9b:75:8c:9c:23:e2:83:15:ed:
15:07:f0:61:0b:dc:0e:e1:8a:be:57:a8:87:3e:0e:
76:ea:b4:33:5c:2e:ce:32:cf:33:d9:db:2f:80:cc:
c4:39:64:ff:b1:2a:c1:bd:9e:3e:51:c3:da:9a:15:
e5:78:43:09:e4:f6:ff:80:80:00:2d:0f:53:2a:34:
72:f2:2d:f4:01:11:78:aa:96:b3:49:ec:99:9f:56:
ae:9c:fb:92:15:7e:6c:21:70:a8:08:35:a3:a2:45:
6c:57:5b:26:43:ad:a4:7b:28:06:3a:ab:54:2f:f7:
89:f5:85:01:2e:01:ea:e1:9b:ae:34:9d:34:03:8e:
e2:f4:3f:c2:6a:0d:7a:8e:45:3e:c0:b2:49:35:ae:
72:b2:b0:c7:70:a9:27:71:d3:e3:a9:75:e0:b1:5e:
43:65:98:92:25:49:ca:74:14:04:d2:dd:f1:f3:52:
4b:a0:07:4b:1b:70:74:7b:1f:03:57:9c:01:61:ed:
ec:32:12:2c:c8:a1:a8:27:d9:3a:b7:72:9e:75:17:
06:0c:65:53:1f:14:c2:31:2e:9c:5f:6a:3c:6a:e8:
cb:5d:cf:53:0f:24:20:e0:bd:f8:dc:9d:21:2a:35:
d0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:76:93:E9:BC:74:CF:59:DB:A4:08:E9:A5:76:A9:AF:4E:74:84:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EC415CCA44411EC85243FCE5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.40.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:22:fa:2f:54:7e:8a:ef:b4:4c:85:1f:08:27:1d:83:fd:72:
e8:3f:c0:61:f9:a4:e2:d3:68:8c:f5:51:28:3c:9c:78:9b:96:
96:36:13:c1:49:85:8a:e6:57:65:68:4b:65:25:eb:98:97:84:
4c:94:fb:f3:c0:66:ef:4a:94:b7:ca:f2:92:5a:f9:d6:fc:64:
87:e0:32:de:db:98:56:69:72:25:28:b0:33:8d:33:47:6e:0d:
ac:12:5f:60:8e:1e:18:4c:00:a2:bd:ac:56:15:b2:6c:1b:3c:
eb:f3:b3:6c:ef:d3:60:c2:cb:e8:21:c0:c7:9f:b7:36:1a:17:
a2:82:09:da:f3:1d:e8:08:4f:22:0e:aa:f5:c7:89:3c:39:f1:
e6:0f:d5:0e:f5:5d:57:7b:27:51:f5:49:1b:f7:11:74:8b:25:
4a:b0:69:75:a3:a1:c6:3c:5e:4d:85:af:19:10:18:a7:f3:02:
59:d7:12:c1:57:bd:e8:15:ad:0c:09:71:d5:50:e5:84:2b:28:
ff:7a:b7:77:3f:59:de:db:63:d1:13:c9:30:b8:09:0a:fa:d7:
a0:3d:55:bd:0b:d8:1a:7f:a2:85:a1:28:60:83:e9:96:63:7c:
1f:4e:2e:f0:43:2c:bf:73:30:e0:7e:8d:72:90:b8:86:e3:be:
b4:0b:99:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:05 2023 by rpki-client on console-ams.rpki-client.org