Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46235B6A125211EDAFC559DFF1222468.roa
File: 46235B6A125211EDAFC559DFF1222468.roa (raw, json)
Hash identifier: jTOaaL3/ENa0YJxHh5dVmPRNMyxfjw2xk3fDaWrVbFg=
Subject key identifier: 44:F8:39:E2:7F:97:97:E9:D8:90:39:03:66:4A:70:AF:25:D2:BE:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 17E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46235B6A125211EDAFC559DFF1222468.roa
Signing time: Tue 02 Aug 2022 11:00:09 +0000
ROA not before: Tue 02 Aug 2022 11:00:05 +0000
ROA not after: Wed 05 Jul 2023 11:00:05 +0000
asID: 133861
IP address blocks: 154.197.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6116 (0x17e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 11:00:05 2022 GMT
Not After : Jul 5 11:00:05 2023 GMT
Subject: CN=62e903b9-28e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f4:e0:94:80:2f:8c:12:3e:10:8f:2e:66:23:
5d:6d:91:b0:0d:61:63:00:35:b2:f7:77:e9:d1:1a:
35:5a:e9:d6:60:11:8f:7b:e3:55:41:56:6d:b5:cd:
79:58:64:6d:0b:27:56:99:b4:41:02:97:aa:f9:50:
1c:22:ed:d8:6a:50:34:50:dc:73:44:2e:01:3c:3c:
de:f4:55:49:4b:0a:69:c8:bf:c7:ef:04:b0:b1:9d:
b8:90:1e:49:9d:de:d5:01:a2:2a:9a:11:c7:c0:b3:
c2:54:68:eb:37:93:bc:6f:61:0a:31:97:3c:c2:b5:
31:cf:4b:a5:c5:4c:ae:6e:fc:6a:23:00:4b:d6:82:
03:f1:05:0c:0f:be:71:ce:7d:5b:0b:73:66:3b:6d:
f1:46:5e:23:2f:d6:60:b1:05:fa:23:3f:89:30:e7:
e0:43:73:b0:7e:d1:9e:9b:ae:5a:1c:66:24:02:19:
fa:71:f6:ba:bf:af:50:b5:2a:93:bf:5b:99:4f:d7:
27:92:da:37:dd:01:73:36:66:64:95:ad:71:83:57:
a7:c8:7e:93:3e:d5:d3:99:d9:4f:3f:81:79:d0:7c:
0c:51:d7:1c:ca:1d:73:5e:ad:3e:06:c8:db:a5:e6:
e7:b3:a8:72:fd:65:db:36:b2:a3:4f:03:57:02:a7:
30:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F8:39:E2:7F:97:97:E9:D8:90:39:03:66:4A:70:AF:25:D2:BE:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46235B6A125211EDAFC559DFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.49.0/24
Signature Algorithm: sha256WithRSAEncryption
00:bf:64:61:71:8d:1d:5f:75:f8:b6:52:36:69:88:50:95:6c:
0f:fb:c0:24:ed:6f:53:8f:b4:51:ae:da:ce:2a:e3:7d:25:24:
59:31:8e:a2:96:7f:47:86:a9:a1:50:45:b7:54:4b:8c:d7:35:
2a:89:16:14:51:05:a9:69:af:61:e6:5b:e1:19:84:b7:eb:2d:
9f:c6:53:46:72:50:f6:70:1c:d1:0b:e2:6e:c0:f9:e7:ca:b6:
df:73:03:11:68:94:a3:ed:3f:b9:a8:84:73:e0:98:1c:a0:5c:
e3:8e:2b:5b:27:03:d1:50:2f:65:b2:9c:da:68:6b:7f:5e:ed:
af:33:a4:22:eb:0c:38:ac:60:dc:7d:6b:6f:79:7c:17:eb:a5:
11:f1:8d:d0:ca:fd:0f:4f:e4:66:87:6d:0a:16:43:94:f8:99:
73:ec:2b:d8:73:17:e3:0d:92:f1:21:eb:e7:bc:4d:77:de:d8:
44:a8:90:ce:d6:82:6e:11:f9:1e:e9:5f:96:d4:63:38:54:f5:
c7:73:92:1f:21:43:6b:3f:8a:53:0d:19:65:bf:6f:7d:f6:b2:
b8:95:60:66:1e:58:38:ba:2a:9c:66:b9:20:d7:00:ee:2a:5c:
bc:97:af:f6:6a:aa:2d:b4:11:c9:0c:51:ce:0d:47:f2:0b:59:
c7:98:38:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-fra.rpki-client.org