Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DAA9B2E4CC811ECBBE7F179D8A014CE.roa
File: 3DAA9B2E4CC811ECBBE7F179D8A014CE.roa (raw, json)
Hash identifier: L4HewbPjg7bUJhDbNatWAc8VCuiEWGs1oEAGocQygcQ=
Subject key identifier: E9:BA:58:0F:08:7B:DC:CE:97:BF:2F:D0:80:19:21:B8:00:19:9E:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1291
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DAA9B2E4CC811ECBBE7F179D8A014CE.roa
Signing time: Wed 24 Nov 2021 01:45:45 +0000
ROA not before: Wed 24 Nov 2021 01:45:40 +0000
ROA not after: Sat 24 Dec 2022 01:45:40 +0000
asID: 54600
IP address blocks: 154.86.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4753 (0x1291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 01:45:40 2021 GMT
Not After : Dec 24 01:45:40 2022 GMT
Subject: CN=619d9949-2401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:21:c5:e4:de:71:e9:83:86:35:3d:5b:ea:43:
f2:50:b7:74:58:c3:92:ef:15:49:16:dd:e1:f9:b8:
50:5f:09:28:77:54:99:c5:e9:c8:bb:d7:db:be:35:
a3:ea:32:76:f4:ad:c6:cf:54:d8:85:f3:d4:d2:2b:
7a:89:e8:d3:0a:47:10:18:fd:eb:79:17:44:cb:53:
4e:5d:c9:8f:20:0a:3a:3a:a6:e5:96:40:73:58:ac:
63:09:79:9c:bf:42:01:7b:4d:c2:39:c7:17:e5:e7:
a4:de:77:35:77:61:3d:f0:e4:3d:5f:c3:a1:eb:34:
32:ef:ac:9c:b9:f1:c8:3e:2d:5e:fe:df:01:98:ae:
dd:01:f0:fd:bf:4b:73:0c:a9:1c:92:e2:43:d8:c8:
90:b4:f6:cc:97:c4:73:89:d2:9e:72:4b:40:44:03:
ec:7e:46:51:3b:b4:35:17:4f:55:30:c1:5e:95:96:
61:4b:da:bc:54:4d:d5:b3:f6:fe:02:cd:f2:79:3f:
ce:7e:75:63:d1:53:fe:78:3d:ce:da:5f:a5:fa:98:
10:c4:67:e7:37:9c:20:bc:69:e4:84:67:aa:40:26:
7c:cc:cc:51:87:c3:7e:30:dd:f4:b1:fa:6f:fd:b6:
ce:66:4a:36:09:e7:ca:f1:a6:1d:40:e5:b5:92:81:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BA:58:0F:08:7B:DC:CE:97:BF:2F:D0:80:19:21:B8:00:19:9E:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DAA9B2E4CC811ECBBE7F179D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.205.0/24
Signature Algorithm: sha256WithRSAEncryption
44:85:ce:a8:fe:91:62:ed:16:45:92:64:c2:2f:06:be:43:78:
46:15:92:6d:99:dc:a2:22:92:2c:ff:40:13:5f:b7:12:5e:08:
1b:0e:c4:ae:05:1c:a5:ad:04:47:2b:13:1a:13:85:4a:e2:28:
69:a0:a3:d0:47:d5:96:f3:46:2e:f9:21:45:a0:df:e6:cd:78:
8f:e5:ab:28:e8:df:e4:e4:39:7c:2f:11:32:d9:c6:fc:1d:f8:
e3:ce:a5:1d:86:aa:3d:90:41:f6:ce:96:4a:7c:62:33:2e:18:
26:29:5f:e2:3e:c3:ea:81:9c:14:42:6a:df:b7:f3:cc:c0:55:
da:12:34:39:40:8c:44:7b:da:74:d3:00:38:db:ae:65:bc:c5:
27:e8:c6:a6:f9:06:65:c0:2f:19:44:fd:1d:95:15:71:1f:72:
7a:cd:4a:9f:e3:f6:f4:2e:35:2f:6e:08:6f:77:0e:bd:ad:aa:
54:6d:35:48:11:0e:77:3d:de:9b:e3:36:62:a7:ce:2c:64:00:
ec:2e:2b:48:2b:1b:aa:be:71:44:96:f8:6e:eb:94:8a:56:37:
4c:00:b4:de:0a:46:cb:f0:0e:c0:ac:65:38:7e:fd:a4:2d:c8:
1c:c8:7d:36:7e:2f:39:bd:78:7c:69:d5:3d:fb:fd:46:ef:36:
1e:af:c5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-fra.rpki-client.org