Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EB04DC8BBB611ECB817A4AF5A40D577.roa
File: 2EB04DC8BBB611ECB817A4AF5A40D577.roa (raw, json)
Hash identifier: qzgfOFsY5onxtRlBZCHM0/kaPpjqJ3qPNt6XKZ7usv0=
Subject key identifier: 9E:DB:FD:85:4F:BC:82:A5:60:74:05:CE:02:89:DF:2E:A3:2C:9B:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 15C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EB04DC8BBB611ECB817A4AF5A40D577.roa
Signing time: Thu 14 Apr 2022 05:46:08 +0000
ROA not before: Thu 14 Apr 2022 05:46:04 +0000
ROA not after: Wed 31 May 2023 05:46:04 +0000
asID: 399674
IP address blocks: 154.203.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5575 (0x15c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 14 05:46:04 2022 GMT
Not After : May 31 05:46:04 2023 GMT
Subject: CN=6257b520-a29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:fd:38:34:8d:f9:01:f9:05:71:86:5e:bb:
3d:12:41:26:33:0f:94:df:77:f7:48:1f:07:17:4b:
06:06:40:1c:3f:0f:29:e5:8a:8a:44:00:11:32:0c:
78:d4:79:84:c4:d4:3a:fb:3c:1a:cc:4a:2c:d2:39:
37:1b:6f:26:21:da:5d:e3:7d:6c:54:54:d8:d7:bd:
30:85:1e:2f:00:77:c9:12:c9:38:76:ff:62:62:2f:
78:c4:9e:b0:da:1f:5e:f5:1c:0a:56:fc:ff:ca:94:
0d:9e:1b:be:23:e6:6f:52:a3:2e:6a:b9:04:e8:45:
37:1c:e6:25:f2:a1:f4:a8:6e:64:15:8b:e5:d8:44:
4c:d2:aa:85:16:65:54:65:ab:ee:85:3d:ff:88:9d:
a4:1e:9b:5e:fe:ec:80:e0:f9:dc:02:44:0f:de:4d:
8f:b1:f7:60:96:00:5b:f6:13:a9:ae:c2:31:b6:76:
9a:57:94:96:36:be:f5:59:bc:33:1b:1a:4f:cb:03:
7c:c4:87:65:d4:e4:c6:c0:79:cd:63:45:3e:22:96:
4e:7e:0b:1b:59:2e:e5:7f:fa:89:80:46:38:65:7e:
2e:97:31:4d:b8:52:d8:58:aa:79:b6:76:dc:d6:45:
f8:2c:48:92:ba:ab:86:6c:27:d6:1d:c4:40:90:b7:
d8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DB:FD:85:4F:BC:82:A5:60:74:05:CE:02:89:DF:2E:A3:2C:9B:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EB04DC8BBB611ECB817A4AF5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.128.0/17
Signature Algorithm: sha256WithRSAEncryption
a0:53:e2:7a:31:51:b4:31:80:2b:ac:72:19:36:22:8a:96:cf:
43:6e:43:e3:5f:04:da:62:18:55:02:f0:f6:ff:bb:34:f9:81:
d7:a3:58:96:7e:f0:22:18:c5:69:4b:6f:6c:55:70:08:b9:7f:
cb:bf:e3:85:41:7b:7f:de:ad:94:d5:64:77:b1:e0:07:30:d1:
59:6a:8f:97:84:35:ae:fb:2c:42:e6:e1:02:be:76:09:01:41:
ce:ab:ba:8c:8a:52:8f:c2:90:3b:ae:0d:f5:61:5d:4b:d2:42:
28:51:56:ff:87:65:4c:5e:a6:7f:80:f3:f7:4f:40:83:87:44:
ad:4b:ff:de:85:4a:01:f4:dc:d5:38:a3:14:e9:64:cb:a1:26:
fc:12:b6:85:33:49:46:8f:e1:4b:a5:81:dc:ea:85:fa:20:a1:
86:fa:e2:89:7b:a5:d0:7f:10:c3:5e:bb:12:46:b4:67:eb:5e:
bd:2f:b0:fb:64:cb:da:b5:d3:37:ae:8f:96:2b:ad:25:3e:bb:
93:0b:4e:24:96:5d:85:95:3c:73:17:2e:a1:5a:56:60:9c:3a:
98:58:33:91:6b:f9:a9:c4:cd:9b:b3:d1:a7:24:a4:b1:f4:52:
be:03:f8:b2:f5:99:6b:f2:ec:be:b3:e3:66:17:f2:c4:fd:29:
9e:5c:40:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:05 2023 by rpki-client on console-ams.rpki-client.org