Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5418AD94C1EC11EC8FA796F7F1222468.roa
File: 5418AD94C1EC11EC8FA796F7F1222468.roa (raw, json)
Hash identifier: UMhnXoCQax19wA3FTIaRSlUbUXRtuP5WhFM4Op8l03g=
Subject key identifier: F2:C6:48:C0:65:39:E3:6D:87:F3:E4:C4:AA:A1:5F:D3:30:A5:E5:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 15EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5418AD94C1EC11EC8FA796F7F1222468.roa
Signing time: Fri 22 Apr 2022 03:28:51 +0000
ROA not before: Fri 22 Apr 2022 03:28:47 +0000
ROA not after: Fri 30 Dec 2022 03:28:47 +0000
asID: 133201
IP address blocks: 154.205.40.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5615 (0x15ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 03:28:47 2022 GMT
Not After : Dec 30 03:28:47 2022 GMT
Subject: CN=626220f3-b04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6e:9a:c3:5b:ef:39:39:4c:da:e8:ec:4d:a9:
da:f8:8e:73:a0:a2:61:58:f3:25:1b:6c:11:63:b7:
54:6b:91:d4:bf:93:ff:da:b6:83:2a:b1:7d:c4:28:
59:ec:34:99:4f:ba:28:1f:f5:30:0b:29:72:ef:22:
fa:bd:69:5d:35:90:0e:5c:d1:d9:fb:fa:dc:85:5e:
ea:52:c2:56:a3:59:68:6d:67:47:8d:67:ec:bb:54:
c9:cb:ec:57:93:66:ee:0c:9f:c6:f3:ef:f6:e1:19:
cb:59:8b:f4:5d:ad:c3:84:51:98:46:6c:4e:49:ef:
f0:fa:48:f2:40:f4:d7:54:c2:ac:6c:6a:23:93:7f:
23:0a:78:1e:f8:56:f6:8d:94:a9:05:43:00:b3:98:
08:b9:9a:ff:8e:0d:35:ce:f0:ea:b2:fe:fd:54:c3:
e4:0a:4b:c5:a4:5a:ab:08:73:3e:fd:c4:8d:2b:f8:
bd:9a:de:f9:6c:7d:62:fe:32:bd:ff:fd:89:3c:f1:
fb:3a:67:99:df:f4:5c:2a:4e:6e:cc:55:3d:fb:ad:
59:6c:31:56:b8:9c:bb:ca:d7:49:d1:51:7e:6e:62:
88:97:b1:a6:33:e7:f2:d1:0f:cb:63:13:23:2c:ad:
45:68:f4:bf:79:d8:fc:89:dd:87:18:79:b1:17:5f:
cd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C6:48:C0:65:39:E3:6D:87:F3:E4:C4:AA:A1:5F:D3:30:A5:E5:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5418AD94C1EC11EC8FA796F7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.40.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:3b:f9:c0:e6:00:59:a8:45:66:7b:27:67:f3:38:9a:5d:5b:
2e:65:31:81:3b:15:f0:08:a3:cc:50:e7:4d:d6:e1:ec:3c:ee:
95:f8:ab:a0:ff:3d:98:8b:1f:62:a2:97:dc:58:ca:c3:26:05:
b0:a7:91:16:b2:96:b6:dd:50:54:c8:4e:47:98:dc:e6:d7:6e:
59:36:88:78:84:95:50:48:c7:ab:d4:0d:57:d4:30:47:5f:48:
30:e3:cf:30:a0:77:d9:d1:45:b0:81:2b:9c:0a:25:46:a6:09:
e3:7a:b1:c9:8f:40:ed:82:73:87:de:be:c6:a4:a1:a7:2d:57:
58:6f:f3:01:bd:ab:d0:3d:b0:0a:1b:a7:13:e2:ac:11:e1:1c:
eb:ba:79:ed:42:e0:a6:63:ba:7c:85:a4:fb:cc:dc:07:db:70:
ce:ed:c1:32:79:69:32:cd:d3:d3:91:c2:6d:fd:55:1d:f3:9b:
f9:b6:a0:fc:1f:5b:d1:d8:05:f8:55:d1:d7:ab:e0:da:60:72:
ef:e5:a0:20:e5:37:cd:82:84:2e:7b:90:6a:4a:28:95:89:4c:
83:e6:4b:74:9d:27:7b:2b:da:08:11:66:76:c9:4a:57:af:46:
e7:3c:7b:38:9f:e0:bf:70:7e:35:08:43:f5:62:81:23:3d:be:
b3:3c:bf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-ams.rpki-client.org