Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48C9ECC60E5111ED9CF4C9A8F1222468.roa
File: 48C9ECC60E5111ED9CF4C9A8F1222468.roa (raw, json)
Hash identifier: QXyVAhWKxeVPhVhj382INdasVy/TGSzLKmuZoJnvaoY=
Subject key identifier: 99:59:C1:C9:3F:B9:4C:19:1A:0B:65:AE:D8:75:30:FC:36:BC:EA:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 17B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48C9ECC60E5111ED9CF4C9A8F1222468.roa
Signing time: Thu 28 Jul 2022 08:43:00 +0000
ROA not before: Thu 28 Jul 2022 08:42:56 +0000
ROA not after: Mon 15 May 2023 08:42:56 +0000
asID: 397630
IP address blocks: 154.201.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6072 (0x17b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 28 08:42:56 2022 GMT
Not After : May 15 08:42:56 2023 GMT
Subject: CN=62e24c13-fcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9d:2d:aa:90:59:6d:81:c0:11:9a:e0:e3:31:
ab:64:17:a0:fb:dd:72:f7:79:ad:7a:09:13:08:3e:
da:e5:06:7a:9f:73:b3:1d:31:55:50:56:d3:26:bf:
75:b9:c6:08:dd:c8:a9:46:87:20:04:fa:37:bb:e9:
1b:f9:b2:65:20:d2:8e:ca:49:65:52:b6:8a:d2:c2:
5d:41:fb:6c:e7:20:7c:f9:fa:4e:65:09:13:9b:fa:
d5:9a:06:d7:58:3e:ff:a5:dc:aa:8f:33:b2:6d:55:
bb:de:2a:15:16:07:a8:d0:9a:81:15:b8:ce:e6:a4:
e4:b0:cf:a1:a4:3a:47:97:a2:ca:31:fe:6d:3d:b2:
31:fd:f2:c5:20:ab:03:5b:c2:fe:d4:72:51:9f:99:
2f:c8:eb:f3:0d:11:71:b8:7b:1e:c6:f3:4d:17:f3:
07:50:17:8c:8b:4f:a1:75:54:c3:91:d2:48:50:63:
41:d0:36:3b:a0:18:93:29:81:6b:46:34:70:25:6f:
8d:2b:52:b4:da:45:e4:c7:1c:ea:10:a9:f8:23:88:
de:6b:38:31:48:b9:18:db:ec:f1:13:b0:74:ac:f9:
5f:b7:65:00:9c:39:d5:35:5b:82:d7:96:b5:23:91:
74:fa:7b:11:01:1f:3a:b2:3d:08:25:d5:2c:f1:56:
20:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:59:C1:C9:3F:B9:4C:19:1A:0B:65:AE:D8:75:30:FC:36:BC:EA:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48C9ECC60E5111ED9CF4C9A8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.56.0/24
Signature Algorithm: sha256WithRSAEncryption
16:27:d4:22:f6:c0:af:c5:45:ec:7e:a6:0e:1a:e7:21:1f:84:
75:db:19:88:b1:be:94:a9:3d:0c:05:a3:39:50:ba:7e:15:f8:
3f:c9:c3:e0:e9:10:44:79:e1:71:b5:57:c2:5f:e9:37:fb:4b:
5c:f4:a2:f6:de:cd:07:78:98:4a:58:59:56:1e:80:99:01:80:
fd:05:77:4b:0f:81:68:01:32:0d:37:80:97:e7:40:70:9b:95:
53:9f:b5:f6:77:cf:5c:36:55:c2:f5:b0:d2:23:3d:23:3b:68:
08:63:9c:cc:72:14:33:cb:7b:d8:38:b6:38:eb:8b:59:98:81:
62:4a:8c:b6:86:0d:0a:c7:90:90:79:e5:48:0d:18:32:38:1a:
0f:84:f4:09:99:e3:14:ef:d4:39:69:4e:1c:29:78:d8:65:db:
f3:43:ca:52:66:95:3b:63:e6:a5:48:c2:d2:ba:1f:02:07:26:
28:15:ea:1e:02:1b:0a:d5:e7:cc:b1:db:26:d9:ed:ed:e4:8b:
1d:c7:6c:7a:7a:97:c2:a5:3c:19:21:73:da:01:33:72:ed:e9:
6f:40:44:c7:45:08:55:97:67:2d:bb:51:a7:58:29:be:7f:ba:
69:f3:49:39:03:f3:a3:2f:17:6f:eb:fa:f6:04:f0:fb:1b:a4:
d9:7b:5a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-fra.rpki-client.org