Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/239584CC476B11EC88B07C79D8A014CE.roa
File: 239584CC476B11EC88B07C79D8A014CE.roa (raw, json)
Hash identifier: b2fZrxUS+nZIjwbK+stEYHSTSTgKmGXtxtE9aZs99E4=
Subject key identifier: 6E:2D:5F:1D:AA:2B:D4:D8:D5:D8:C1:70:94:20:7C:B2:9D:94:A0:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0CF4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/239584CC476B11EC88B07C79D8A014CE.roa
Signing time: Wed 17 Nov 2021 05:56:43 +0000
ROA not before: Wed 17 Nov 2021 05:56:39 +0000
ROA not after: Sat 17 Dec 2022 05:56:39 +0000
asID: 134428
IP address blocks: 154.222.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3316 (0xcf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 05:56:39 2021 GMT
Not After : Dec 17 05:56:39 2022 GMT
Subject: CN=6194999b-6bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2b:20:b5:d6:43:71:9b:e3:f4:4b:0b:70:5a:
ce:b8:a4:ea:cf:19:4c:61:f7:f9:53:b3:24:74:4c:
24:48:17:01:05:5f:47:0e:34:bb:3a:45:9e:a5:4c:
00:41:73:b5:08:a7:dc:d5:55:92:f9:3c:54:bd:f6:
06:f9:7e:21:cc:76:19:8f:fb:7e:14:cd:b9:cf:2e:
36:7f:73:bf:a7:bd:b2:d1:cd:9d:0a:9c:43:67:59:
85:a9:36:10:ad:33:70:d1:31:0a:15:6e:62:be:bc:
60:9e:c3:2f:a4:29:92:3c:e6:c3:62:3f:0e:94:4f:
a8:0b:e7:32:27:cb:3c:14:56:02:46:71:ea:a0:a1:
1f:f1:12:3a:dd:11:14:83:69:a2:23:7d:f4:b2:44:
fc:53:06:72:eb:28:fc:ba:c3:c9:26:18:ea:85:98:
1e:3f:4b:7b:36:bf:05:6c:be:02:a8:50:09:dd:d1:
c2:09:fd:fd:6a:72:35:01:d7:58:e3:17:83:88:55:
ef:9e:a3:4b:bf:5b:52:d2:1f:07:87:a7:f8:8a:2c:
70:5a:af:78:02:7b:c7:71:c4:9f:d2:9e:86:eb:a0:
46:2a:32:01:31:61:c3:c6:d4:7b:f4:9b:b3:b6:5b:
d4:84:5a:2a:c2:98:25:81:ec:4a:d9:7a:11:0e:f9:
47:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2D:5F:1D:AA:2B:D4:D8:D5:D8:C1:70:94:20:7C:B2:9D:94:A0:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/239584CC476B11EC88B07C79D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.46.0/24
Signature Algorithm: sha256WithRSAEncryption
35:04:24:72:90:82:1e:d2:73:98:9c:d6:50:6b:f3:3b:7a:be:
53:b9:11:8e:ce:fd:ff:f7:ff:86:5b:59:18:1c:ff:31:77:2d:
02:07:63:92:a5:23:c1:66:71:e9:d6:68:a9:25:f0:b9:c0:30:
58:7f:a9:61:bb:18:1e:71:68:28:11:4e:62:01:83:85:d9:35:
d1:31:bd:47:45:c0:02:7b:a6:69:f0:7f:af:33:55:a0:13:1d:
5e:24:ef:b1:b4:f3:d3:67:2b:80:27:45:2d:04:60:3c:7f:65:
80:fd:fe:1f:15:8e:e4:d0:da:5b:25:2b:12:71:48:bc:11:b6:
70:9a:84:18:46:fb:a1:f6:a7:b9:38:e8:90:b6:75:16:fe:22:
fc:bd:5d:37:ee:ad:31:10:77:4c:0c:0f:d0:eb:c4:56:06:47:
24:9e:7e:1d:de:c1:b5:d4:bf:ee:67:7d:d8:62:6d:3e:80:18:
dd:c8:47:31:73:1c:1c:81:a8:d2:25:0e:b6:b9:5e:30:2a:3b:
f2:bf:47:e5:fa:3b:9c:8c:23:0f:39:66:98:b6:68:6d:a7:d5:
07:a0:ee:21:a7:95:a9:bb:a1:ba:aa:4f:ec:f9:ff:8f:e8:c4:
74:1d:43:64:a8:0f:a0:e5:f9:c6:bf:b5:70:65:6b:88:7b:cd:
d0:f6:a1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:05 2023 by rpki-client on console-ams.rpki-client.org