Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61A8ECBCC1EC11EC94E8CBF7F1222468.roa
File: 61A8ECBCC1EC11EC94E8CBF7F1222468.roa (raw, json)
Hash identifier: vQc27wAx5Aq5QwJdX0H7Bc/PrfLMrx8fqqtK68CBCpI=
Subject key identifier: B3:EC:29:CB:AF:E4:BF:76:2A:9E:D4:EC:12:42:E5:9A:D7:9B:11:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 15F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61A8ECBCC1EC11EC94E8CBF7F1222468.roa
Signing time: Fri 22 Apr 2022 03:29:14 +0000
ROA not before: Fri 22 Apr 2022 03:29:10 +0000
ROA not after: Fri 30 Dec 2022 03:29:10 +0000
asID: 135097
IP address blocks: 154.205.40.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5617 (0x15f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 03:29:10 2022 GMT
Not After : Dec 30 03:29:10 2022 GMT
Subject: CN=6262210a-da5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:bd:b2:dd:72:0d:98:00:fe:47:c1:6b:4d:
1f:55:7a:17:63:31:47:9c:a2:6c:d8:20:f9:74:9e:
6a:57:13:b9:b6:fb:61:f7:fe:d3:8a:7d:fd:36:cb:
9f:0c:5c:94:ab:3e:e1:bf:ac:78:03:cc:35:33:eb:
14:2b:dd:b8:d5:15:be:16:6a:99:58:1f:03:8a:fa:
5d:c0:0d:7d:57:b4:2a:8d:e8:44:87:38:c0:a0:77:
f3:fa:0e:ae:19:19:7a:99:e2:03:2d:2a:10:1a:bd:
f2:a7:43:95:df:6c:35:9a:a1:cf:8d:34:e8:5e:c7:
a2:53:33:ac:c0:be:51:d2:c0:74:fe:d8:d5:1a:63:
73:2c:29:21:22:fc:4f:d4:9c:66:9f:12:48:21:4b:
1b:db:fb:d6:55:ca:f0:8f:cd:4c:18:f1:af:54:5e:
cb:38:c8:a5:cc:4e:9b:77:2e:da:3c:bc:bf:9b:da:
0b:c1:dc:c4:69:fe:37:f2:fd:3f:17:d9:79:cc:ca:
1b:28:89:d1:3a:93:64:7a:ce:3a:f9:c5:9e:b1:8b:
ab:a2:d3:0d:aa:71:ae:35:62:64:80:a0:d5:3b:de:
4e:af:c2:b7:c0:dc:08:31:f1:71:bc:d4:a3:82:e0:
93:3b:ae:29:02:21:fc:1e:a0:c7:88:ce:dd:25:ac:
46:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EC:29:CB:AF:E4:BF:76:2A:9E:D4:EC:12:42:E5:9A:D7:9B:11:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61A8ECBCC1EC11EC94E8CBF7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.40.0/23
Signature Algorithm: sha256WithRSAEncryption
05:2b:19:0f:f6:5e:b2:2e:04:41:45:12:96:fa:db:a6:9c:de:
ce:e8:08:7a:79:7c:25:ed:1e:73:62:36:87:33:6b:d5:77:39:
54:ab:a9:e8:30:09:51:32:1a:98:7c:14:7c:10:ff:31:fd:7a:
92:23:72:ae:9f:fb:79:fe:e1:16:ba:96:62:b2:5f:45:32:a8:
f0:c7:14:6d:e1:3b:bf:24:dc:d4:aa:9d:a6:c0:53:aa:89:bd:
12:f1:b2:bd:d5:23:e8:51:8f:a8:1f:39:1a:ff:b0:4c:b3:8a:
f2:5c:23:1b:f0:dc:ef:c5:1d:72:13:d6:4e:f5:2e:d7:8a:2c:
ed:da:ae:81:89:e2:ee:70:f4:4b:72:d6:b9:44:ed:31:c3:4b:
10:6e:d8:7f:2d:61:b7:1f:bf:3a:a5:2a:a9:06:f2:c4:9b:bb:
01:f1:29:d3:e9:ff:cc:91:ef:8e:bb:df:9e:ed:7b:22:8f:ea:
8f:07:07:86:1b:0e:8b:ae:86:6f:77:01:4c:de:99:00:1e:3f:
8c:49:e9:e4:60:e4:ac:15:94:dd:06:81:01:d4:19:7e:4d:dc:
a8:bc:d0:08:af:8e:72:89:78:7e:7f:0c:a3:3e:f0:de:9d:a0:
04:35:90:94:f3:d3:39:41:e1:08:aa:d2:69:b8:67:f4:d9:ba:
09:7e:c4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-fra.rpki-client.org