Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/265D2BB44C3F11ECBC895B21D8A014CE.roa
File: 265D2BB44C3F11ECBC895B21D8A014CE.roa (raw, json)
Hash identifier: lyDZ20gLlTSDrJHiW0JubePZIZFF3CA1idebj8uk9BA=
Subject key identifier: 90:97:A2:E6:C7:5F:7A:0A:DE:56:94:B7:83:B1:5F:46:88:5B:BB:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1268
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/265D2BB44C3F11ECBC895B21D8A014CE.roa
Signing time: Tue 23 Nov 2021 09:24:25 +0000
ROA not before: Tue 23 Nov 2021 09:24:21 +0000
ROA not after: Wed 23 Nov 2022 09:24:21 +0000
asID: 54600
IP address blocks: 154.210.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4712 (0x1268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 09:24:21 2021 GMT
Not After : Nov 23 09:24:21 2022 GMT
Subject: CN=619cb349-a321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0c:bc:b2:3a:2d:e5:ae:46:c7:46:17:70:78:
2b:5d:7c:3d:83:6d:e4:52:cf:b0:ee:d9:10:94:bb:
a9:dc:75:94:88:0b:59:19:53:5e:d5:cd:2d:c5:fa:
e6:a3:76:57:7c:7a:08:aa:fa:af:b8:1f:98:1b:c9:
24:1d:3a:43:3d:97:0e:d6:fb:6a:ed:12:92:bd:3f:
fc:92:81:28:f2:07:f2:67:14:4d:01:34:66:6a:46:
73:9c:88:b1:26:82:62:36:e6:33:8e:f7:7e:08:09:
5d:3d:9f:5f:40:df:a4:95:ea:92:c7:a4:63:bb:30:
de:83:9c:09:35:99:c8:a8:af:b1:1c:e9:07:11:92:
e0:e5:88:d7:60:3a:90:74:70:53:30:23:37:0c:d9:
1f:d4:d3:02:ec:2b:93:46:0c:34:1c:73:61:3d:31:
4e:b1:de:a3:11:0b:31:d7:15:cb:69:42:fd:6d:ee:
ca:21:c2:b5:78:36:2b:2d:81:c8:d5:c7:8c:07:77:
0b:c5:00:96:cb:0c:e8:db:fd:a7:59:2f:08:eb:8a:
8a:68:03:09:10:70:1c:df:e8:63:fa:20:aa:af:88:
36:64:55:6a:04:d9:84:f0:0d:09:57:b3:22:e8:e9:
69:97:a1:c9:3d:54:fb:31:fd:9e:82:85:4b:93:f4:
44:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:97:A2:E6:C7:5F:7A:0A:DE:56:94:B7:83:B1:5F:46:88:5B:BB:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/265D2BB44C3F11ECBC895B21D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.96.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:ac:b2:41:d5:6c:5b:8c:d9:56:3c:70:3e:8a:d2:2e:5f:13:
ea:71:44:72:ba:97:67:17:e0:e9:86:07:5e:99:f6:82:25:1b:
f0:5b:de:64:fc:6f:12:d7:68:55:8c:81:6a:1e:5d:60:13:a1:
7d:0f:1c:07:43:13:3d:ec:0b:08:0e:95:b5:9f:5f:9c:bc:ec:
cd:66:b0:0d:bb:56:9f:ba:b7:db:10:97:ea:69:51:54:b5:76:
06:36:54:40:58:03:dc:51:af:01:eb:64:d3:40:78:cb:33:b1:
86:ac:90:68:e2:1f:e2:8b:2a:78:9d:dd:77:58:55:70:06:e5:
f8:d5:bf:25:8c:99:b4:93:b5:c4:f1:0a:bc:4d:bc:b9:1c:57:
1b:e2:c6:a5:6a:7c:22:66:0a:25:b4:0e:af:bb:f5:8f:52:9f:
20:7a:6d:e9:90:59:b4:8c:cd:3f:c7:12:33:b7:60:6c:23:b3:
34:48:40:49:9e:77:ca:30:0a:cb:b9:ca:b3:af:12:f6:16:f7:
ee:11:98:7e:da:1f:0f:0b:02:0c:74:ca:9a:cc:23:be:61:3e:
44:75:be:b9:c6:8b:94:c0:57:27:51:77:4d:80:91:dd:91:3c:
fc:4d:b4:d2:f1:a0:58:66:b9:f6:45:a0:7f:23:d9:93:48:04:
26:d0:32:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-fra.rpki-client.org