Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31F4B0322A9C11ED9142C6E1F1222468.roa
File: 31F4B0322A9C11ED9142C6E1F1222468.roa (raw, json)
Hash identifier: +fd7TK6gvtwdT5KZWA8pEC20NkDzK9T2xFwPfXtgI+0=
Subject key identifier: EC:68:A1:BE:16:0D:07:F0:1C:AF:A1:FB:B8:2F:79:9F:68:08:8D:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 187E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31F4B0322A9C11ED9142C6E1F1222468.roa
Signing time: Fri 02 Sep 2022 08:49:46 +0000
ROA not before: Fri 02 Sep 2022 08:49:41 +0000
ROA not after: Fri 30 Dec 2022 08:49:41 +0000
asID: 328608
IP address blocks: 154.219.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6270 (0x187e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 2 08:49:41 2022 GMT
Not After : Dec 30 08:49:41 2022 GMT
Subject: CN=6311c3aa-b19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:15:88:78:e0:bf:86:76:4b:85:d3:b1:bd:
a2:9b:9f:89:00:74:b9:96:b8:d6:ce:9e:fa:25:a3:
cc:f6:22:31:e6:9b:01:3f:32:8b:c6:6c:11:c8:f5:
95:05:2a:81:76:96:35:d8:c4:48:04:9c:31:a1:99:
2a:d4:ac:02:d9:81:73:9e:f8:53:65:d7:89:67:27:
79:d0:91:cf:cb:90:19:6a:16:39:c0:73:36:17:9d:
cb:a0:e3:c9:11:9a:e4:2c:26:16:9f:80:27:97:86:
66:b0:65:31:5c:a9:76:73:a0:6b:57:2b:86:78:60:
97:09:52:9f:21:0b:fe:a5:f8:ab:ca:b6:da:51:e5:
13:f0:09:24:9b:ec:a6:e6:ff:47:24:c0:be:11:5a:
92:24:f3:5b:5f:40:12:cd:97:2e:15:09:4b:eb:99:
b4:3e:cd:01:cf:85:90:fd:d9:da:09:cc:52:28:83:
3a:6a:af:95:06:19:f7:37:55:21:9f:f8:62:ee:67:
2f:a0:8b:d6:d7:9c:01:12:a5:75:41:f4:97:44:c5:
6b:56:61:87:99:cc:45:3c:96:dd:00:26:33:98:74:
e3:79:95:4d:6b:5d:9d:5d:df:8c:90:72:fe:07:09:
2f:6b:0e:e1:7d:8b:8d:ba:06:3e:7b:df:13:94:29:
61:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:68:A1:BE:16:0D:07:F0:1C:AF:A1:FB:B8:2F:79:9F:68:08:8D:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31F4B0322A9C11ED9142C6E1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.224.0/19
Signature Algorithm: sha256WithRSAEncryption
aa:51:5a:06:ef:17:9c:9a:13:24:3e:3f:04:94:65:98:f8:51:
49:ce:0b:f8:5d:e4:f8:69:65:84:5e:28:a2:99:06:80:03:c6:
6e:9f:fe:b4:d6:5c:14:cf:45:9f:b9:bc:57:7c:8f:24:93:e8:
7a:e9:69:97:68:4a:60:c6:bf:e0:1d:75:66:82:78:d0:73:67:
ed:c2:01:82:28:69:27:5f:47:e6:56:80:48:48:fa:81:d8:7b:
88:b1:d6:df:11:46:3c:1b:e9:70:62:4c:c9:9a:59:05:a3:91:
a9:d4:64:d6:52:2b:19:d3:94:6b:b2:28:82:6a:64:66:e7:be:
69:ff:01:16:93:c6:86:16:72:05:33:da:d0:57:be:f6:28:44:
dc:5a:24:f4:68:14:0e:7d:02:ea:6d:c7:f4:73:65:44:fc:aa:
d4:4a:cc:a2:8c:cd:2f:32:e3:a8:4d:e1:27:ca:5a:b6:4f:f1:
5b:b0:84:87:13:66:c4:e9:58:12:cc:1a:30:66:37:89:8a:56:
67:c4:4f:b4:c6:b8:da:28:8a:bd:2d:7b:28:9b:66:3d:32:86:
7a:81:69:fc:53:35:f0:02:5f:77:03:b7:06:8c:a7:3e:38:31:
7c:f1:79:74:4c:2a:b4:bc:1b:f6:94:c7:72:98:c8:9c:ee:b0:
7f:f1:03:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-fra.rpki-client.org