Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FD32CC0C1EC11EC9FD420F7F1222468.roa
File: 2FD32CC0C1EC11EC9FD420F7F1222468.roa (raw, json)
Hash identifier: tcosQTOqUo1ZMI78HNHR2cW9f0yfyiwFScR+1BjqF3Q=
Subject key identifier: 1B:18:4B:4D:20:57:90:5B:D6:1B:A5:33:31:39:64:AA:33:C1:16:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 15EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FD32CC0C1EC11EC9FD420F7F1222468.roa
Signing time: Fri 22 Apr 2022 03:27:50 +0000
ROA not before: Fri 22 Apr 2022 03:27:46 +0000
ROA not after: Fri 30 Dec 2022 03:27:46 +0000
asID: 133201
IP address blocks: 154.205.38.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5611 (0x15eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 03:27:46 2022 GMT
Not After : Dec 30 03:27:46 2022 GMT
Subject: CN=626220b6-32ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:ac:1e:0b:48:18:8c:f7:58:90:63:0e:a5:
3a:e8:5e:34:ce:e1:65:15:20:da:07:9f:f6:df:03:
ad:ee:1c:6b:95:8b:77:0f:b7:ff:73:12:90:78:bb:
24:db:39:09:a3:18:e4:13:05:17:90:1f:48:6f:7f:
2a:56:ce:82:a3:33:18:f2:16:81:70:6d:2d:48:4d:
d1:3f:9c:77:09:23:33:0a:10:e0:ac:1c:bb:02:74:
51:26:b1:cb:1c:c0:29:2c:33:15:92:c8:a1:0e:66:
8b:21:78:d6:5e:89:fe:ba:66:63:3a:57:a6:16:3a:
1b:a2:17:46:62:4f:c0:b5:56:70:39:f6:cc:8f:e1:
5b:07:7a:09:4d:5d:92:c2:18:a0:37:50:e3:74:a3:
be:8c:a6:a3:ce:95:46:24:ea:10:90:bf:77:78:6b:
a4:df:a3:3b:c5:5c:60:54:74:ac:af:a6:01:0a:85:
b6:45:de:68:42:38:ed:64:9a:05:e2:7b:5f:34:ff:
b6:d3:32:f8:ef:a1:e8:12:76:d5:03:81:97:27:5f:
dd:d4:57:96:ff:66:98:ce:f0:4f:cd:e3:fb:95:fb:
0c:b8:3e:b7:be:43:6c:02:72:06:5f:96:d0:b2:e9:
5d:19:ca:db:73:dd:79:1c:f2:1b:34:9d:12:54:7b:
88:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:18:4B:4D:20:57:90:5B:D6:1B:A5:33:31:39:64:AA:33:C1:16:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FD32CC0C1EC11EC9FD420F7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.38.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:65:a6:10:00:1f:93:e9:c3:a1:0f:77:0c:d6:92:fb:a3:28:
e6:12:c7:55:fc:11:ad:02:00:42:f9:87:0e:78:37:21:94:3d:
95:02:eb:f5:ed:89:02:6f:96:ae:93:cd:7c:55:98:ee:e5:78:
8c:06:a5:9d:2f:bf:52:3b:54:98:f1:1e:e8:32:01:43:31:97:
99:e0:7b:90:a9:fa:15:7c:c9:fa:d5:75:ae:26:1f:a3:28:cc:
82:f4:80:ca:8d:8a:6c:ce:98:b5:57:b1:aa:f6:58:46:72:69:
f6:33:af:3d:91:51:d0:31:e3:86:84:72:ba:96:26:c9:56:69:
8d:c8:97:fb:db:e3:79:98:92:3a:aa:45:b4:ce:37:0e:69:70:
00:25:7f:0a:1b:71:e0:b5:b1:65:bd:3b:32:73:ed:7a:24:32:
f4:d4:44:00:e4:90:8d:4e:8d:b2:03:28:35:61:ba:db:e2:f7:
83:48:fd:0f:83:90:95:8f:27:59:bf:f2:18:96:63:03:ae:e8:
b6:88:4e:46:2d:16:b9:76:5f:62:cd:5a:5f:6d:2a:27:06:4e:
66:ed:dc:2d:07:e3:06:f0:3a:0c:39:a6:32:7d:ce:dc:ef:bf:
e2:10:a9:4e:bc:9c:a9:a4:84:05:eb:4a:e3:35:c5:d9:a5:5c:
84:01:10:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-fra.rpki-client.org