Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/312F4582F9D711EB8E869502D8A014CE.roa
File: 312F4582F9D711EB8E869502D8A014CE.roa (raw, json)
Hash identifier: iAPeK03KEe1BQuvi8VI9kQ4a67Zqqmlqf7c7qgQm7fM=
Subject key identifier: C3:87:AF:A4:71:83:C0:5F:7D:C2:6A:92:11:F3:E7:DB:3F:68:6F:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 08A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/312F4582F9D711EB8E869502D8A014CE.roa
Signing time: Tue 10 Aug 2021 12:34:20 +0000
ROA not before: Tue 10 Aug 2021 12:34:15 +0000
ROA not after: Mon 10 Oct 2022 12:34:15 +0000
asID: 9009
IP address blocks: 154.85.124.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2210 (0x8a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 10 12:34:15 2021 GMT
Not After : Oct 10 12:34:15 2022 GMT
Subject: CN=6112724b-6d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fa:6d:0f:4b:ee:53:6d:4a:c8:fa:90:c0:ac:
0d:90:7e:29:f6:34:49:e9:6e:69:d9:1e:c3:ed:9f:
ec:d2:a3:c6:0d:fd:8e:08:73:3d:57:9a:73:43:91:
66:31:18:6d:a8:15:32:60:44:39:41:db:26:90:1e:
2c:54:bb:0c:5f:45:61:02:30:98:0d:6f:5f:31:4a:
f5:0a:df:37:99:06:2b:03:d6:c1:69:73:29:9a:c7:
e8:c4:96:3a:6f:12:e6:26:e3:85:0c:11:1c:c0:ad:
f8:e8:30:c8:aa:fe:8f:35:4f:8e:4c:2f:e4:0c:2c:
02:f6:10:b0:67:fb:06:04:fe:07:bb:6e:10:72:49:
d2:5d:23:bc:e1:6a:57:02:29:a3:7b:2f:21:b5:fd:
cc:e8:8d:81:53:6c:b9:fd:75:41:cc:c0:46:e5:bd:
ff:24:8f:07:55:79:83:05:50:71:03:f4:56:11:9a:
a3:b1:10:2b:cf:1c:0b:ca:24:c7:c6:7d:3c:4a:77:
ed:56:e7:14:39:e4:79:09:5a:eb:d6:54:24:ad:92:
c6:c6:d8:15:85:71:6d:97:d2:58:1c:43:81:85:9c:
3b:8f:df:80:fb:7b:22:36:ef:c4:50:a0:09:54:c3:
ce:00:39:6f:1b:1b:81:e2:63:70:66:6e:16:be:dd:
ee:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:87:AF:A4:71:83:C0:5F:7D:C2:6A:92:11:F3:E7:DB:3F:68:6F:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/312F4582F9D711EB8E869502D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.124.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:43:e0:6d:b6:3e:a9:5e:6c:c2:14:18:20:cd:de:5f:81:3c:
0c:ae:e9:ba:78:d0:f0:1d:5f:cd:a0:78:ce:d8:6a:a2:00:91:
75:1d:9b:6c:11:2f:72:00:97:3d:7e:92:72:1b:a9:b9:d2:7b:
7f:7f:8d:22:98:71:eb:87:86:ad:b2:b4:9c:5d:14:22:33:4e:
4c:25:e7:8e:f2:95:cd:84:d7:45:cc:4c:3f:0e:ae:25:5c:2d:
a1:93:c3:c9:f4:df:af:fe:c3:2c:26:fd:d4:7a:90:af:ae:5e:
fb:d2:8d:96:fe:c9:e8:ef:7a:ad:43:ca:1c:28:f2:b3:ac:22:
16:30:76:ee:82:7a:33:77:67:cf:3c:2b:75:14:1b:be:a2:f2:
f4:74:97:7e:ce:bc:59:54:5c:f9:5f:4d:45:28:1a:92:8f:4c:
60:02:72:d0:af:72:dd:0c:ba:50:59:9e:4d:21:86:ca:9e:33:
1f:8e:ce:36:6a:05:c1:f9:19:76:a6:de:6d:0f:26:61:09:c2:
2e:f7:8f:72:fd:ce:04:f6:31:b3:3d:09:01:52:fb:e2:05:db:
a6:ff:26:63:55:86:29:da:45:da:8d:d2:e3:f5:7f:88:03:92:
fa:38:76:ba:06:f0:cb:fa:64:2e:9e:54:b8:9a:8d:f0:c8:98:
d0:87:1d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-fra.rpki-client.org