Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47B7ECB6E7BE11EC85EE5B97F1222468.roa
File: 47B7ECB6E7BE11EC85EE5B97F1222468.roa (raw, json)
Hash identifier: mK5N6Y0dGibOU2IPeIi5Abi41KT3TogvI1kKY9rKq04=
Subject key identifier: B5:2C:3B:70:F6:58:D4:B6:4A:44:15:18:52:18:D7:CD:FC:86:58:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 16A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47B7ECB6E7BE11EC85EE5B97F1222468.roa
Signing time: Thu 09 Jun 2022 06:34:58 +0000
ROA not before: Thu 09 Jun 2022 06:34:54 +0000
ROA not after: Sun 30 Jul 2023 06:34:54 +0000
asID: 133199
IP address blocks: 154.197.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5792 (0x16a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 06:34:54 2022 GMT
Not After : Jul 30 06:34:54 2023 GMT
Subject: CN=62a19491-355e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cc:21:6b:42:42:4e:a1:09:11:8b:d3:01:3c:
5c:aa:1e:4c:c6:29:34:04:c7:d2:ba:48:36:e8:6a:
62:a0:1f:63:9a:e8:aa:ad:80:a9:d2:e9:0c:af:f0:
50:9a:5b:14:e0:d7:fa:b1:30:53:f1:08:4a:34:ad:
e3:dd:62:9e:3b:6e:33:75:22:c5:9e:d5:fd:aa:ec:
ab:28:4c:a7:48:c7:30:23:b1:dd:02:56:ea:79:85:
f0:6a:69:75:24:bd:02:c1:04:02:f1:38:43:81:e1:
99:37:e6:a6:27:cf:4d:ac:14:be:1a:50:e1:b8:2a:
40:98:a5:66:ba:7a:03:fa:c3:d9:83:5a:5d:25:3c:
38:f1:0c:c5:6b:43:69:dc:99:7d:f6:a8:6c:8b:c2:
82:2d:c8:c5:81:90:ef:66:c4:ea:c2:7c:66:0f:d7:
e5:ef:e9:f2:17:68:5c:bb:27:af:85:77:a2:91:ac:
d2:ad:06:09:e5:c8:c8:86:97:ac:59:b4:5b:7a:b7:
59:68:01:dc:b6:2a:b3:25:31:3d:bb:85:b5:e7:bb:
ee:03:4e:02:38:e3:79:68:c9:f8:8c:53:a0:13:d3:
76:d5:4f:a1:ae:61:4b:b5:2d:00:58:f1:b0:d6:27:
18:33:ef:50:c2:f4:4f:a4:41:5f:27:7a:1c:3d:05:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2C:3B:70:F6:58:D4:B6:4A:44:15:18:52:18:D7:CD:FC:86:58:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47B7ECB6E7BE11EC85EE5B97F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.24.0/24
Signature Algorithm: sha256WithRSAEncryption
28:fd:27:3d:b9:04:d6:a7:90:7a:55:db:ca:05:49:25:b6:c8:
1b:b5:98:5d:19:58:30:02:f4:fc:99:aa:74:4c:2a:cf:75:81:
43:35:88:ba:bb:83:b0:83:c4:7e:02:db:19:f1:d8:84:d3:eb:
f8:d5:46:b6:25:83:86:2f:4d:4c:f5:a5:e3:b7:43:b2:08:48:
70:3e:e4:40:55:a3:6c:94:96:62:3c:31:c7:f1:a8:13:1d:eb:
52:8b:bf:83:d3:a7:5d:af:ee:9c:09:87:64:38:9a:03:da:b5:
f3:66:b8:9c:34:85:9b:e8:c0:68:6d:00:61:bc:28:9a:d6:16:
d3:34:43:f5:5b:54:2b:58:78:69:de:12:b6:64:e4:a6:47:f7:
28:d8:a1:09:2c:f0:cb:85:00:7c:f9:46:ee:30:7f:9d:77:b2:
f6:7c:84:75:8f:09:0a:4b:6c:51:9b:d4:cf:a1:85:00:d1:b9:
6c:0a:20:59:97:b2:49:29:1a:c2:e5:06:bf:61:6b:0a:9e:fb:
f2:cc:eb:77:7d:ac:43:62:19:70:cf:95:c3:57:87:17:8e:11:
d3:0a:4b:ae:b1:e4:97:2e:2a:cb:56:46:cd:55:8b:33:af:6f:
09:65:06:03:37:1a:99:66:d1:90:7e:7f:3f:a8:6b:6d:37:96:
d6:d9:b2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 01:14:45 2023 by rpki-client on console-fra.rpki-client.org