Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/426AF41ACFA411ECB514469FF1222468.roa
File: 426AF41ACFA411ECB514469FF1222468.roa (raw, json)
Hash identifier: NCNmjOYla2141DP/SypHO8+tB8qIjU+MVxdzN+GRMCE=
Subject key identifier: 9E:A1:43:AA:C7:81:F4:4C:36:2B:79:6D:DC:2B:37:B1:D3:AC:AE:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1620
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/426AF41ACFA411ECB514469FF1222468.roa
Signing time: Mon 09 May 2022 14:28:14 +0000
ROA not before: Mon 09 May 2022 14:28:10 +0000
ROA not after: Wed 31 May 2023 14:28:10 +0000
asID: 136970
IP address blocks: 154.213.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5664 (0x1620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 14:28:10 2022 GMT
Not After : May 31 14:28:10 2023 GMT
Subject: CN=627924fe-90ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a1:2b:46:1b:00:be:b8:99:26:be:a4:1a:13:
ed:08:6c:0a:29:bb:12:7a:72:72:db:58:ca:9d:46:
45:a7:28:5c:d9:e3:49:aa:ca:92:80:36:6c:e1:60:
ad:d7:09:e4:8b:96:5b:00:8c:da:46:1c:f2:e4:5b:
90:74:fa:e7:bd:31:16:62:e6:41:71:cc:00:58:c4:
2d:eb:66:0f:e9:22:92:e1:a5:6b:ef:ac:bb:f7:83:
50:c4:64:b5:86:af:b2:a5:cb:e8:fe:9e:07:a0:15:
b9:0e:88:4a:4d:05:dc:48:3d:60:63:bf:5e:ed:33:
46:34:73:50:bd:68:14:d3:09:df:37:d6:1a:c3:f4:
78:2e:05:84:09:e3:1d:82:aa:1b:a0:0b:7c:cb:64:
a6:34:34:50:e5:3c:63:b0:07:45:13:15:c5:93:f7:
ac:d1:7e:61:e1:68:25:f3:88:f9:ec:0b:19:df:0c:
08:84:65:7f:0b:a9:34:37:7e:73:96:6a:79:24:07:
c0:c8:b5:60:82:5b:f7:b2:7f:d2:35:e0:ba:97:e5:
6c:f3:c2:af:43:e7:63:d7:75:83:f4:f0:f8:83:89:
2c:ac:31:d3:de:83:67:db:eb:01:07:de:fb:e0:8c:
d0:fa:f1:f1:c0:98:fd:53:f5:98:d1:75:12:3e:61:
a8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A1:43:AA:C7:81:F4:4C:36:2B:79:6D:DC:2B:37:B1:D3:AC:AE:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/426AF41ACFA411ECB514469FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.25.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:41:27:1e:39:e9:6d:5f:c7:d5:70:03:1f:ea:e4:24:9a:9a:
73:e2:50:1c:df:b7:1f:e9:ec:c7:7c:9a:0c:61:27:69:39:7d:
27:29:ac:45:dd:db:4a:82:4e:b6:bd:0b:68:98:f5:26:30:11:
f3:a5:cb:0c:6e:6f:fa:10:da:08:a3:9a:ba:5f:cd:38:78:69:
40:e6:d9:7a:d2:4f:8b:81:1a:b8:78:7f:0c:77:13:8f:dc:2a:
5d:f6:08:9d:4c:ac:40:94:fc:bb:6f:c0:6d:a1:4d:90:fd:cb:
a0:e2:b7:1a:25:8b:40:f1:49:68:44:36:ab:67:e4:81:f8:f0:
42:bc:ce:5d:9e:73:c5:28:93:8c:94:b6:9a:fc:39:50:d7:d5:
73:9b:19:ac:d2:29:1d:88:c6:b4:eb:ba:e6:86:4c:8e:14:76:
32:9f:2e:17:91:f9:2a:13:37:38:23:86:17:55:cb:4b:51:d4:
b0:3c:0e:53:84:d4:e0:3e:af:d9:f6:9c:8b:6a:75:41:41:25:
27:f9:73:49:20:b4:71:67:3f:79:85:79:e1:4f:82:e3:a4:8b:
97:ea:f5:11:3a:6f:1d:6b:d2:89:e0:98:fb:06:74:20:a9:f7:
1f:fc:77:95:56:fe:3d:a4:24:9e:55:16:67:04:c9:a5:a1:d3:
b6:43:96:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:06 2023 by rpki-client on console-ams.rpki-client.org