Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C8D81E490AC11EC8AEFF5BD5A40D577.roa
File: 2C8D81E490AC11EC8AEFF5BD5A40D577.roa (raw, json)
Hash identifier: YwEdA0G73E4MjxotBv25aoE/5dUx5q3y8I9ltMMpuhA=
Subject key identifier: C5:34:BC:43:C9:C8:B1:C8:BB:5C:54:46:CB:57:2A:1E:38:1F:22:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 14F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C8D81E490AC11EC8AEFF5BD5A40D577.roa
Signing time: Fri 18 Feb 2022 11:16:10 +0000
ROA not before: Fri 18 Feb 2022 11:16:06 +0000
ROA not after: Fri 30 Dec 2022 11:16:06 +0000
asID: 137951
IP address blocks: 154.210.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5366 (0x14f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 18 11:16:06 2022 GMT
Not After : Dec 30 11:16:06 2022 GMT
Subject: CN=620f7ffa-b2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:49:8d:d8:bd:36:d6:a4:6c:95:6b:5a:27:
40:0e:a3:83:1c:bf:49:73:d3:e6:09:a2:49:91:04:
44:a2:20:67:5d:63:5b:91:ab:99:00:29:ad:73:78:
0e:e7:0b:e0:c9:fb:ed:85:ae:51:98:6b:29:c5:47:
73:22:32:d3:3a:12:df:b2:50:60:2f:fd:ba:d2:73:
7d:5c:2e:6f:72:93:1b:2a:7c:41:b5:44:88:2f:78:
1c:be:43:32:7c:dc:36:d5:d5:6c:c1:cf:13:c8:2f:
42:b2:25:43:d1:a1:7c:2f:b3:e5:46:19:b6:cc:70:
4c:e3:c0:86:04:ab:6b:d4:5b:44:66:38:5a:25:85:
bc:a1:73:06:a5:24:b0:61:13:99:e0:69:8d:86:48:
36:9b:3f:f5:6a:5c:7f:4a:f2:a6:56:30:5d:76:cd:
19:63:73:9e:b7:1f:83:e4:fc:c9:66:b9:7d:dd:c9:
69:d6:c9:be:55:41:1c:bc:0f:02:ed:cd:48:5a:57:
9e:77:5a:92:c0:38:ba:b8:a6:25:02:b4:15:e0:a3:
e5:ed:51:d0:26:0f:38:62:4a:41:11:dd:cf:2d:6e:
79:89:ac:02:e3:43:c9:b9:0c:ee:4b:ef:39:22:5a:
97:15:64:b4:22:77:7f:a5:84:e2:9b:ca:2f:a8:2d:
06:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:34:BC:43:C9:C8:B1:C8:BB:5C:54:46:CB:57:2A:1E:38:1F:22:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C8D81E490AC11EC8AEFF5BD5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.85.0/24
Signature Algorithm: sha256WithRSAEncryption
57:6d:86:bc:84:5e:5f:cb:a1:79:7e:7a:72:81:a5:c5:15:d2:
24:08:0f:0c:fd:fd:6b:75:ae:7c:9c:08:59:ee:91:9d:a7:41:
73:c2:f6:ec:1d:22:89:60:bc:f7:0e:99:5e:93:41:26:f2:d8:
d8:ee:de:39:45:1f:c9:20:df:8e:2b:08:bb:97:df:86:9e:1d:
6e:c8:75:9c:a5:fb:20:e8:99:64:60:09:9f:68:33:6d:f3:a5:
d8:58:6e:75:1b:db:91:3f:e0:40:50:72:a8:e9:49:38:18:c0:
9d:77:5f:ac:6e:13:ab:90:ac:9c:1e:fe:18:3c:78:3d:a4:ed:
33:62:b9:57:35:61:28:71:d4:f9:ef:3a:49:62:c5:a6:35:1d:
7c:6e:14:0f:02:c1:35:c7:34:e8:5c:a9:5f:89:bb:83:d3:37:
91:a6:1e:09:38:3b:e5:c0:08:7d:a2:70:b3:44:d3:5d:71:31:
f7:e9:38:86:79:45:37:38:86:27:d7:16:e3:80:e6:aa:43:65:
27:52:e3:b9:60:cb:f8:8d:b1:4b:cf:f4:86:2e:90:6e:42:c5:
31:6b:39:62:a2:84:51:83:8e:a4:9c:18:7e:58:61:b8:30:a9:
7a:1b:18:a9:f8:f5:3f:2f:a5:28:a0:3d:e6:a9:3f:36:77:9c:
ad:f2:bc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-fra.rpki-client.org