Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/375323CAFFEF11EBBF055514D8A014CE.roa
File: 375323CAFFEF11EBBF055514D8A014CE.roa (raw, json)
Hash identifier: KWsAT5tgqkCZ4U77wR8CiK5lL2jvVb3JQRq7L/+gwcI=
Subject key identifier: 87:EF:D9:F9:E5:CC:45:07:82:95:62:53:59:56:D6:EC:06:28:56:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 08E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/375323CAFFEF11EBBF055514D8A014CE.roa
Signing time: Wed 18 Aug 2021 06:41:36 +0000
ROA not before: Wed 18 Aug 2021 06:41:30 +0000
ROA not after: Tue 18 Oct 2022 06:41:30 +0000
asID: 9009
IP address blocks: 154.194.8.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2273 (0x8e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 18 06:41:30 2021 GMT
Not After : Oct 18 06:41:30 2022 GMT
Subject: CN=611caba0-f861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:05:c5:5f:e5:b3:d8:7b:54:df:6c:45:43:20:
41:26:38:ac:e2:a8:22:4c:68:c8:3d:17:17:7a:d7:
53:49:fe:e3:73:0f:51:7e:44:dc:b6:29:d2:d0:83:
f3:2a:6e:f3:34:dd:53:bd:96:51:00:04:c3:fb:47:
a0:de:5d:fe:e8:15:58:4c:b6:bd:6f:40:d5:f8:68:
a9:4d:21:cd:2b:00:a2:16:07:40:ef:b6:03:d4:db:
98:8c:38:08:b8:b0:cc:4a:bb:36:5b:98:58:ea:aa:
a5:8d:01:f5:6e:54:36:ef:23:68:f9:ca:a5:1d:f2:
36:b8:c9:a3:f6:85:86:63:16:2f:bb:6d:47:a2:8c:
8e:3f:2b:c1:7f:6c:80:12:df:f1:07:31:b5:ce:99:
dc:11:5c:e0:1e:d0:76:b8:4e:79:68:85:8d:d3:0a:
88:5d:f1:06:d7:3b:09:8c:b0:ca:06:a2:25:e1:04:
54:a2:29:2e:59:18:e2:c6:3c:88:92:fc:c2:48:58:
80:3f:e6:d7:c5:3b:66:c0:98:f0:88:ae:25:51:d9:
e0:de:fe:4c:dd:c5:34:4f:a9:db:a5:09:00:4c:6e:
54:a5:43:c0:e1:a6:f2:e8:0e:98:79:23:40:10:2d:
51:c3:93:6c:2a:79:ee:ae:b4:bc:af:1f:66:3e:1a:
26:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EF:D9:F9:E5:CC:45:07:82:95:62:53:59:56:D6:EC:06:28:56:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/375323CAFFEF11EBBF055514D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.8.0/23
Signature Algorithm: sha256WithRSAEncryption
44:23:16:ac:8f:06:b7:7c:2a:6c:ae:0d:d9:00:90:97:3d:f7:
32:a3:f6:ed:cc:dc:cf:d4:14:3b:f7:b5:f6:fe:c0:8f:1b:5c:
a4:fb:d6:f9:bc:61:5f:60:4d:49:fe:01:3c:4f:ad:11:eb:8e:
89:e1:97:23:70:13:c5:57:1b:9b:41:c2:da:8c:8a:6e:97:ef:
5d:3e:ec:a7:41:fe:14:38:aa:8a:13:0a:0f:58:1b:5a:fe:01:
74:98:5d:91:88:a7:f5:85:e2:32:a4:3a:81:a2:38:4a:5a:bb:
4a:1d:9b:1e:87:5d:b8:ce:f0:e4:46:c4:7a:7e:c5:12:a6:98:
c2:aa:10:ce:bc:ac:d8:d5:f2:a7:21:b9:7a:79:b0:3a:3c:5f:
c9:7e:82:35:86:95:45:3e:b0:3d:ea:e3:b4:00:76:2a:19:ae:
bd:ec:63:93:0d:22:d3:e3:30:fc:ec:5b:99:19:cc:86:51:b0:
39:de:96:73:16:aa:c9:f9:74:90:8d:59:cb:7c:6c:fa:fa:a5:
07:f5:a0:90:e8:85:d4:99:ee:b6:4c:82:e8:83:b3:b1:21:1d:
72:a4:32:79:35:84:af:46:39:ab:b5:f1:19:8c:00:a5:e7:f3:
65:7e:f2:98:0f:d7:ad:3f:43:4f:05:4b:33:61:91:0d:d1:7e:
99:30:a3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-fra.rpki-client.org