Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CB3D494541C11EC8910DC56D8A014CE.roa
File: 5CB3D494541C11EC8910DC56D8A014CE.roa (raw, json)
Hash identifier: HS1zwtYmULgZsEYfBiMc6el5kTwrOIkSPbdsHj3ATNA=
Subject key identifier: BF:7D:C2:39:3F:C6:51:01:AC:88:5C:31:3E:38:AA:93:5C:EE:4E:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 12FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CB3D494541C11EC8910DC56D8A014CE.roa
Signing time: Fri 03 Dec 2021 09:35:33 +0000
ROA not before: Fri 03 Dec 2021 09:35:29 +0000
ROA not after: Wed 30 Nov 2022 09:35:29 +0000
asID: 26617
IP address blocks: 154.202.6.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4858 (0x12fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 3 09:35:29 2021 GMT
Not After : Nov 30 09:35:29 2022 GMT
Subject: CN=61a9e4e5-7bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:08:92:84:49:f5:0a:c5:f4:80:ec:b8:b6:
32:ce:44:a2:a6:92:b1:b0:89:d9:34:51:a6:70:9d:
62:ca:68:ab:15:17:8c:21:84:fa:0b:ef:ed:30:fd:
c2:6a:14:52:52:d7:12:06:84:56:1f:19:b5:49:e1:
8b:d1:22:6e:5e:24:bf:ac:57:63:87:d8:87:fa:79:
df:39:9c:2c:32:e9:8d:40:15:0d:33:be:b6:08:56:
31:52:91:92:91:e3:0f:78:f5:a1:59:37:fa:12:27:
b3:91:52:73:aa:b8:60:3a:47:6f:89:22:7b:a1:cd:
e1:a0:13:15:3f:ad:29:d8:26:8a:64:65:e4:fc:20:
24:49:aa:03:5e:61:e1:19:a1:96:47:6f:0e:d7:3a:
b0:3e:ef:c9:23:64:61:cf:4f:6a:d0:65:8a:da:33:
b6:9e:a8:44:11:05:04:63:55:2b:2c:dc:c3:85:3c:
7c:8c:bf:8c:8f:48:66:c0:ab:69:df:af:2c:dc:95:
5e:55:cc:e9:22:c4:87:58:28:36:6a:64:77:a3:ae:
3b:ff:01:2a:e5:b9:fa:d6:2c:dd:7a:66:1f:01:d1:
6e:fb:95:d5:7d:f3:47:91:dd:b3:b7:87:fe:c4:5c:
ac:14:84:a3:42:4b:21:74:a6:cc:7c:9f:d3:01:ce:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7D:C2:39:3F:C6:51:01:AC:88:5C:31:3E:38:AA:93:5C:EE:4E:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CB3D494541C11EC8910DC56D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.6.0/23
Signature Algorithm: sha256WithRSAEncryption
93:55:2e:55:a0:dc:b5:68:04:36:29:6e:38:75:a1:12:c3:8f:
d4:3a:65:f4:b4:7f:86:08:19:77:b7:e7:14:ee:30:3e:60:2d:
7e:eb:92:99:8c:a9:a7:7c:0a:55:ed:86:17:5c:99:9f:ec:9f:
de:3e:ed:a5:d9:79:2b:f1:28:7e:81:c8:f8:d5:27:8e:28:93:
04:95:31:2d:5f:69:8e:d0:f8:9e:8b:d9:03:2e:98:1a:74:1b:
80:dc:c3:9f:95:df:c1:08:ad:33:14:3e:07:aa:60:dd:d3:70:
ce:a8:7a:6f:c8:97:53:49:5d:de:cd:cb:83:40:71:7b:de:22:
52:7d:cf:5a:e6:15:b9:56:a9:fb:52:db:aa:fe:f3:2a:b9:bc:
ee:00:ec:5a:89:b5:a3:f4:16:9b:eb:63:bd:34:9b:6b:80:77:
53:89:79:ae:a2:b0:25:90:f1:32:70:2a:52:b8:ab:87:3d:cb:
d6:62:fe:52:e3:a5:16:db:00:34:87:81:c1:5d:12:43:d4:5a:
b7:c3:c3:ab:4a:f7:60:b6:a6:79:48:28:06:1a:93:2d:e5:85:
b3:0f:7f:06:48:6e:0e:c9:4e:71:cf:b3:5e:00:14:4f:9f:9d:
f8:55:e5:33:c0:92:99:58:e2:a0:d4:4e:9a:5e:87:49:21:08:
0f:09:0d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-ams.rpki-client.org