Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D1617AA4B9111ECAAF58D0DD8A014CE.roa
File: 5D1617AA4B9111ECAAF58D0DD8A014CE.roa (raw, json)
Hash identifier: fTAPedXlfRuE71LZ2AAt44Pdh1LvK8I2hz3lL4cBMB0=
Subject key identifier: 0A:69:40:FB:FE:10:CB:A8:5D:42:80:6D:6F:73:6E:42:7B:DD:DF:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1212
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D1617AA4B9111ECAAF58D0DD8A014CE.roa
Signing time: Mon 22 Nov 2021 12:40:25 +0000
ROA not before: Mon 22 Nov 2021 12:40:21 +0000
ROA not after: Sat 19 Nov 2022 12:40:21 +0000
asID: 9009
IP address blocks: 154.85.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4626 (0x1212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 12:40:21 2021 GMT
Not After : Nov 19 12:40:21 2022 GMT
Subject: CN=619b8fb9-317e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ab:c3:46:bc:8f:04:68:a2:9c:cb:0e:1e:43:
a8:af:99:f5:44:d2:2e:02:1f:6c:e3:8c:25:25:de:
27:09:10:32:5b:24:02:e5:d9:2d:ca:d2:49:e1:b7:
1e:2a:2a:b0:73:4f:25:72:48:d4:70:73:9c:df:a6:
0f:cb:1c:ad:c3:d3:ec:c2:75:20:f1:a6:b2:39:01:
e1:94:d1:ad:b3:ae:07:2b:d7:1b:3e:ed:8e:5f:87:
e6:88:13:80:1d:9b:ee:2a:88:0c:fd:e7:e7:1b:e2:
b3:c9:fd:a1:71:b4:3e:a3:22:9e:92:d0:32:66:fb:
9c:97:c0:6f:28:86:f5:a6:8c:bf:cc:ae:81:c8:76:
09:db:d5:97:72:be:ac:2c:34:f1:8a:d9:e2:d5:27:
54:cf:62:e9:53:af:30:7f:b8:94:10:24:09:ba:37:
a4:a1:9d:06:e9:49:7a:9a:0e:2f:52:3f:9a:d5:9d:
57:46:9a:fd:8e:4b:ec:6b:2e:e9:4b:73:a5:0c:08:
00:6a:c0:c6:30:00:fa:8b:38:32:20:28:9f:84:00:
58:65:ae:32:1e:09:67:34:3e:2b:70:a6:52:5e:36:
9e:f2:b7:81:68:15:29:7c:f7:bb:b5:d9:3d:de:25:
01:5e:be:6d:68:d1:22:85:03:ce:17:c1:21:ab:8b:
42:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:69:40:FB:FE:10:CB:A8:5D:42:80:6D:6F:73:6E:42:7B:DD:DF:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D1617AA4B9111ECAAF58D0DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.127.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:43:53:49:fe:77:b3:ad:24:5f:bd:12:c0:c6:bb:fe:54:66:
3d:2c:d9:4f:1f:1c:3e:a5:55:ee:86:a4:8a:e2:8e:a7:43:b5:
82:dd:71:66:29:b4:a1:8c:6b:5e:cb:24:65:b1:01:6b:be:3f:
47:f8:c8:20:bd:46:71:25:db:08:ad:44:ca:38:9c:5d:9c:00:
c2:0e:75:d1:a3:52:c6:93:90:31:71:1d:f8:54:ee:2a:a8:84:
f4:48:d1:99:f6:ef:42:ee:c6:7b:80:87:63:f0:25:2e:64:44:
e5:22:7e:e4:e3:cd:3c:24:fb:f9:1a:cc:66:cb:cf:1a:74:0e:
fe:ac:d8:49:36:ac:01:cf:a8:45:f2:5e:e7:0e:91:88:cb:cf:
f7:c9:2e:97:88:40:89:0b:b8:0e:e4:96:7d:65:fe:52:72:31:
7c:bc:14:d5:03:ef:62:aa:26:1c:91:7c:4f:81:c9:51:9f:bc:
fe:24:f8:14:53:a7:86:4b:a8:e5:f4:95:35:68:23:62:4c:63:
0f:eb:1c:f7:e1:23:3b:99:cb:bc:1d:63:55:7d:5b:8c:b2:41:
07:38:92:82:ed:7c:98:c6:d4:6a:45:12:c4:0c:7f:79:7c:89:
e2:cd:72:ed:08:47:64:95:0f:89:83:66:b2:84:6d:7b:f9:38:
0b:54:c1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-fra.rpki-client.org