Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/324CEBBAE58011EB8B8F5F2EF8AEA228.roa
File: 324CEBBAE58011EB8B8F5F2EF8AEA228.roa (raw, json)
Hash identifier: BgO7nkMbCDTrPDCGqyFmtuuLfah1Z0apouQgQ3dNSdg=
Subject key identifier: 78:2C:84:BA:05:EF:3E:55:B9:E1:25:26:A2:2D:B7:C6:C9:75:02:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 07F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/324CEBBAE58011EB8B8F5F2EF8AEA228.roa
Signing time: Thu 15 Jul 2021 15:20:33 +0000
ROA not before: Thu 15 Jul 2021 15:20:29 +0000
ROA not after: Sat 09 Jul 2022 15:20:29 +0000
asID: 397630
IP address blocks: 154.202.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2040 (0x7f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:20:29 2021 GMT
Not After : Jul 9 15:20:29 2022 GMT
Subject: CN=60f05241-5ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:29:27:84:5f:1b:17:8b:50:df:17:14:46:
e0:ea:f7:64:b5:e2:77:91:69:3b:22:92:a0:0e:f8:
ee:eb:f4:e1:ca:9d:44:c6:0c:14:7a:22:e5:c2:fb:
84:2e:84:84:8a:72:f3:62:52:3f:37:50:55:28:20:
dd:0b:f7:64:89:c7:0e:8c:6b:5b:61:40:1d:d5:5d:
39:a4:bd:c4:56:6f:10:09:93:cd:e2:d6:9b:50:7b:
39:23:8d:84:19:42:74:d8:29:5c:27:ff:ea:53:ab:
6e:49:1e:35:05:5b:1a:0d:22:57:be:1d:73:40:35:
8a:46:39:b3:c4:62:95:ba:8f:a3:b2:7e:97:6f:97:
b2:3a:d1:0e:a0:78:50:8e:1a:9e:08:4b:70:4f:d6:
cb:b3:e3:3d:cc:7b:35:2e:50:81:65:5b:17:e5:99:
f0:b2:10:cd:d3:af:7c:f8:2e:80:4f:36:7d:aa:0e:
7b:63:8d:1f:e1:b1:85:54:8d:af:76:bd:11:46:a0:
c2:b8:65:af:64:bd:90:aa:7e:5d:1e:fe:5e:9c:55:
dd:55:eb:07:ca:9b:37:02:11:44:64:19:73:df:17:
49:7c:76:21:19:02:8c:74:50:2f:59:32:f1:6e:6f:
52:ff:70:a2:78:30:02:4b:95:e3:3c:b3:1c:80:e5:
57:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2C:84:BA:05:EF:3E:55:B9:E1:25:26:A2:2D:B7:C6:C9:75:02:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/324CEBBAE58011EB8B8F5F2EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.125.0/24
Signature Algorithm: sha256WithRSAEncryption
94:08:65:23:4f:4b:6b:81:bf:4b:69:c1:a8:94:73:4e:85:9e:
3c:9e:3e:e0:c0:f8:97:bb:aa:07:ad:46:0f:c6:d5:e2:dd:19:
b7:9b:32:fc:c7:84:a7:22:3b:79:70:ae:a5:01:88:27:43:3d:
10:1e:06:e3:f4:1f:f7:f9:99:2e:b2:07:8c:ca:3e:ce:cf:62:
a9:19:77:e2:79:3e:bb:89:3e:33:8a:65:be:58:fe:33:43:ef:
f3:83:7e:6b:9f:6e:dc:45:16:4c:40:08:95:b1:f4:2b:86:1b:
2e:d2:66:9a:24:6a:a6:d6:d8:f6:67:61:2a:b3:b0:2b:ca:59:
08:e7:e2:13:77:9c:37:f3:ed:63:d4:87:c8:7b:b5:35:5d:ba:
92:c4:19:85:7f:0e:e3:da:07:37:6a:cd:50:6f:f9:87:a3:86:
02:1f:53:52:36:15:6d:c3:41:98:c5:7c:9f:ae:70:4c:4e:7b:
4b:c9:cc:62:3e:1f:8c:9c:f0:dc:c8:82:36:0b:60:47:b5:37:
6b:9b:c7:ba:ff:d2:56:bd:81:d7:09:f8:2a:3f:66:3b:7f:91:
eb:0e:e4:93:23:b2:42:8a:88:67:d3:d4:a6:b6:4c:4f:a8:b8:
e8:1e:4b:cf:f0:59:82:6a:21:c7:ce:5d:49:cd:c1:78:6f:ea:
57:26:b0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:05 2023 by rpki-client on console-ams.rpki-client.org