Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/412E2766E58011EBB5D6822EF8AEA228.roa
File: 412E2766E58011EBB5D6822EF8AEA228.roa (raw, json)
Hash identifier: 3PyOYMHR/qe8edW7bJKm4v++KfIdQEIRKuRfNtVAUKI=
Subject key identifier: 04:4A:3A:1D:FC:92:81:0E:EC:58:BE:B4:B1:D6:80:13:57:F1:A6:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 07FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/412E2766E58011EBB5D6822EF8AEA228.roa
Signing time: Thu 15 Jul 2021 15:20:58 +0000
ROA not before: Thu 15 Jul 2021 15:20:54 +0000
ROA not after: Sat 09 Jul 2022 15:20:54 +0000
asID: 397630
IP address blocks: 154.202.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2042 (0x7fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:20:54 2021 GMT
Not After : Jul 9 15:20:54 2022 GMT
Subject: CN=60f0525a-4f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:61:57:20:3b:38:6c:31:a1:90:8d:f0:4b:
87:09:c2:c2:ab:ed:ec:9a:5c:c9:cf:73:7c:fd:5b:
d3:ea:5f:18:95:1f:b7:99:d5:6a:62:f0:26:d4:b8:
5e:f1:26:c9:6d:a7:82:28:4a:0b:a2:f2:25:3a:c1:
5c:0a:80:28:70:45:a2:8c:56:d5:fc:52:b2:ac:f5:
c3:0d:f6:ef:76:27:8d:33:66:3a:9f:0c:99:2c:73:
06:91:8b:1e:3f:ae:96:b6:d7:d8:2f:65:ca:26:d7:
e5:46:a1:3d:db:8b:b8:25:96:ec:3d:db:c7:5a:9c:
59:83:f3:d7:af:e9:6a:70:a9:28:6c:a2:8c:39:f1:
d3:1a:cd:e7:3d:2e:bf:fc:81:af:d8:f9:3d:a7:bf:
a3:d4:76:96:6e:4b:62:28:61:7c:3c:f5:86:9f:12:
e4:09:e7:96:9f:88:81:25:24:e6:63:65:87:47:c8:
c4:99:d5:fb:24:7a:17:1a:86:5e:a2:ae:bb:ce:06:
e0:9b:4a:37:33:0c:f9:ec:e6:17:78:ce:0c:0a:34:
6b:cd:1b:91:46:e5:d2:7a:9a:de:2a:8e:00:77:f3:
bf:b2:c6:4a:d4:06:87:2f:c5:17:fd:cd:d6:43:76:
b5:28:c5:7f:67:f6:63:0c:32:8f:23:51:f7:14:9b:
f7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4A:3A:1D:FC:92:81:0E:EC:58:BE:B4:B1:D6:80:13:57:F1:A6:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/412E2766E58011EBB5D6822EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.126.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:58:b3:07:fa:3b:6f:69:2a:43:2f:d7:f2:98:cc:74:8c:1a:
b8:af:99:0b:19:61:a0:88:37:aa:af:e7:a4:bd:cd:9d:d4:6b:
97:9a:60:cf:ea:8f:3e:29:01:01:27:f7:94:5e:dc:1c:e4:ea:
86:cb:52:7f:e1:43:e0:ef:76:a4:26:7e:40:14:92:9f:dd:98:
06:f0:13:7b:77:55:18:10:6b:5a:63:d4:8d:16:f3:63:25:9a:
38:5f:15:bc:95:28:f2:b5:b2:46:30:39:27:da:4c:00:76:59:
c1:4f:a8:df:99:bd:84:9a:aa:2b:55:08:10:bf:69:21:65:44:
f6:83:17:35:5e:1d:b2:4d:b2:4d:c7:b3:fe:8e:bc:17:b7:64:
54:b4:c1:02:d4:86:b9:c7:c6:8f:77:67:14:05:3d:f0:1e:33:
4f:61:26:44:5c:f7:c4:0c:c9:5a:2c:7a:46:34:40:38:25:9e:
bd:33:18:a1:f0:2a:53:2f:e6:03:65:6e:b5:16:15:36:ef:cf:
44:e6:52:96:87:46:ae:35:50:68:0a:00:c2:5a:e9:f1:ae:8f:
d3:c7:f9:12:24:68:06:94:dc:27:a5:83:9b:d9:21:1f:93:7f:
58:2c:03:7a:38:82:a6:17:67:c2:e8:a7:cd:f7:07:22:53:b6:
ae:c2:3f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:06 2023 by rpki-client on console-ams.rpki-client.org