Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/446B31CC623411EC83B5746B5A40D577.roa
File: 446B31CC623411EC83B5746B5A40D577.roa (raw, json)
Hash identifier: S60NlzS3Jod9WldpsqPqPR+1/XPp3YC6HWgJI30UR/8=
Subject key identifier: 7B:1A:19:D8:C8:FC:A4:6E:DD:FE:E6:96:06:35:16:E9:5D:C8:01:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 140A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/446B31CC623411EC83B5746B5A40D577.roa
Signing time: Tue 21 Dec 2021 08:01:57 +0000
ROA not before: Tue 21 Dec 2021 08:01:52 +0000
ROA not after: Fri 30 Dec 2022 08:01:52 +0000
asID: 328608
IP address blocks: 154.198.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5130 (0x140a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 21 08:01:52 2021 GMT
Not After : Dec 30 08:01:52 2022 GMT
Subject: CN=61c189f5-97d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:57:02:64:e6:a7:3f:2f:db:d5:6f:b1:d5:
ec:4f:98:cd:57:c2:34:21:24:ca:d1:b2:2e:83:e7:
95:11:60:98:53:31:10:ec:a7:06:bc:7c:2a:1d:7a:
b9:9d:72:ed:cf:db:98:a0:21:c7:30:0f:cc:8e:7b:
f9:0b:eb:20:42:1f:fb:34:13:3e:ff:04:90:d7:a6:
ef:f6:27:b1:44:b7:8d:73:e5:41:cf:e1:17:e5:b5:
c0:aa:03:2a:19:f5:3c:89:fc:c3:34:1e:bc:b8:7d:
96:ad:6f:31:b0:02:e2:36:4c:3f:af:85:53:66:c2:
a4:8e:26:f3:ee:1c:91:20:1c:17:27:fe:f0:b9:9e:
81:62:75:92:c3:76:b0:ba:55:d3:2a:a5:5e:27:56:
7c:87:44:cd:74:f1:e5:0b:e7:fe:b4:69:86:77:71:
e4:c4:2f:21:73:91:41:e3:0b:93:e6:2c:6c:75:f2:
45:f9:0f:87:bb:53:e9:14:a2:72:95:56:88:de:8a:
52:52:04:68:7a:ce:00:88:02:12:52:09:12:5c:68:
0f:85:06:af:a7:88:e8:15:cb:7c:76:aa:89:3d:58:
96:17:96:ce:28:81:18:22:3c:27:f0:d2:51:4c:ee:
f5:9e:48:0a:5e:7e:5c:db:33:7b:38:95:ff:7f:8b:
08:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1A:19:D8:C8:FC:A4:6E:DD:FE:E6:96:06:35:16:E9:5D:C8:01:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/446B31CC623411EC83B5746B5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.8.0/22
Signature Algorithm: sha256WithRSAEncryption
33:69:84:f7:22:6a:9f:c3:37:c0:db:2c:19:22:5d:57:7d:a4:
1a:09:10:78:c4:cf:fd:99:7f:60:7f:db:99:cd:56:71:09:2a:
4b:22:e4:cb:ae:18:89:cc:49:28:bb:49:32:1f:f4:df:ad:1d:
06:b5:ee:10:41:e2:82:0e:96:b5:2d:c7:49:ad:a8:d4:05:00:
7c:f3:77:03:6d:80:43:4e:80:c6:c0:40:c3:5f:af:bd:0a:26:
c2:a3:2e:c6:63:ea:fb:d9:be:cb:0c:b4:b7:1f:10:9c:35:37:
65:31:5c:db:74:71:b5:97:45:5f:d3:a3:fd:dc:4e:f8:b9:1e:
4d:b3:0c:4b:e5:a4:55:a9:75:04:57:10:7f:61:43:aa:e6:8c:
94:62:cf:96:bd:cc:fa:c8:ce:39:d8:82:29:45:84:c9:b0:f5:
14:c0:ed:da:ec:89:37:eb:6e:7c:b2:7d:71:bf:19:9a:9d:f0:
6d:9b:c0:05:25:73:e1:2d:47:95:79:3c:6b:af:ba:78:55:6e:
4f:cd:c2:fb:3b:74:3f:a6:f9:d7:fb:a2:42:20:41:93:c7:e4:
16:fe:78:ef:27:c9:ed:d7:f5:05:bc:0b:5d:65:c3:f2:d3:c9:
24:3c:a4:00:c2:88:52:df:45:39:a1:47:3e:f2:7e:56:f5:2f:
fa:f2:13:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:06 2023 by rpki-client on console-ams.rpki-client.org