Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35CB3EE214B111EEB6C040354AD9E6FC.roa
File: 35CB3EE214B111EEB6C040354AD9E6FC.roa (raw, json)
Hash identifier: XvIJr8j0rME02jvYQjYfmj324KjpVpJvEIYziR8QkcM=
Subject key identifier: EC:EF:3A:A5:5E:55:42:AC:2F:CD:E7:A4:C6:4F:9C:F6:74:DE:88:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2DBC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35CB3EE214B111EEB6C040354AD9E6FC.roa
Signing time: Tue 27 Jun 2023 06:09:44 +0000
ROA not before: Tue 27 Jun 2023 06:09:40 +0000
ROA not after: Wed 01 May 2024 06:09:40 +0000
asID: 140227
IP address blocks: 154.197.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11708 (0x2dbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 06:09:40 2023 GMT
Not After : May 1 06:09:40 2024 GMT
Subject: CN=649a7d28-63b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cc:d7:0d:c7:f0:3c:82:31:51:b6:22:26:16:
17:19:3c:3b:a7:3f:c3:7b:c3:1c:b8:3c:4f:b1:e2:
01:84:5e:0e:dd:80:fc:92:ba:e6:28:37:b6:15:8d:
53:c9:8e:9e:d9:c2:2e:bb:d2:9e:61:a7:86:03:16:
60:89:f4:49:0d:32:71:0f:e3:70:72:5b:bf:f4:39:
c9:84:f2:a0:af:dd:26:e1:83:ba:da:3b:2f:a0:18:
96:ea:3d:d6:5c:14:2a:8a:d1:a8:90:76:06:2b:3c:
60:eb:d9:f4:9e:86:a6:48:91:37:8f:ad:a7:5e:50:
25:4e:02:ba:81:40:03:59:67:e4:7d:2d:5c:27:60:
bb:02:7a:de:8d:8b:49:8b:52:a9:ee:99:8d:e8:e5:
a1:60:0e:ac:b5:44:10:23:84:4a:4d:20:31:39:4f:
7e:e8:2a:a9:12:72:83:7a:43:4a:7a:01:88:bf:96:
4d:f8:40:c4:32:b9:45:25:9f:77:32:80:da:af:ef:
27:cf:d3:d7:35:66:8a:dc:81:6f:dd:c4:fc:05:31:
de:88:f0:ab:cf:37:79:ee:a6:cc:ef:a4:43:54:9e:
33:b0:38:81:f9:13:bb:af:bc:8e:3b:df:d2:73:16:
eb:8d:71:83:a2:a9:8c:db:44:22:28:6a:88:d8:3d:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EF:3A:A5:5E:55:42:AC:2F:CD:E7:A4:C6:4F:9C:F6:74:DE:88:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35CB3EE214B111EEB6C040354AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.22.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f1:4c:d5:29:ef:43:1a:b2:ca:a4:23:24:28:12:25:67:15:
86:ab:ee:5a:99:34:fb:59:96:97:98:04:0a:21:b3:78:2f:30:
3a:ea:f3:61:4d:26:c9:14:19:a0:01:cb:0f:c8:54:f1:25:39:
dc:05:da:84:c5:bf:cb:2c:1a:8b:63:d2:54:d2:a6:95:3a:63:
be:f1:40:9b:52:12:2a:26:8c:c7:b1:37:6e:12:f3:bd:1c:80:
4f:94:f3:93:28:e5:bc:6c:26:c5:2c:59:be:89:6a:fc:4a:d9:
b1:a4:c2:ed:22:c1:ab:fd:12:ca:ae:66:53:93:d3:34:6e:82:
9b:89:57:c5:21:92:25:b7:27:0b:9a:23:67:cb:9f:c8:97:98:
b7:f3:ff:f8:42:2f:ea:1f:91:75:04:a3:78:2c:09:0d:03:ed:
68:4a:c7:48:16:1d:8d:23:52:d6:93:27:bf:e9:4c:56:97:f1:
64:56:8b:73:7b:0f:6f:bc:b3:10:9e:49:95:98:fb:fd:fc:6b:
fc:47:7e:6b:36:df:f0:d8:dd:32:21:49:03:06:da:f8:a9:18:
06:3c:c4:62:af:91:ac:c5:da:15:94:dd:ed:4c:f8:31:e1:ef:
ea:12:0d:d9:03:91:d8:bd:c6:49:3d:f8:cc:a4:45:16:de:b2:
13:b1:75:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 12:38:37 2024 by rpki-client on console-ams.rpki-client.org