Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6212C7BC4C3B11EC8085921BD8A014CE.roa
File: 6212C7BC4C3B11EC8085921BD8A014CE.roa (raw, json)
Hash identifier: yneK8WXw9P/6WwB2Q3v2FYiuh/uoROTtTDyRvgM/BNo=
Subject key identifier: 07:31:C6:F9:E4:37:97:BC:32:D5:CD:F5:98:FA:20:66:49:38:F0:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 125C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6212C7BC4C3B11EC8085921BD8A014CE.roa
Signing time: Tue 23 Nov 2021 08:57:28 +0000
ROA not before: Tue 23 Nov 2021 08:57:24 +0000
ROA not after: Wed 23 Nov 2022 08:57:24 +0000
asID: 54600
IP address blocks: 154.210.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4700 (0x125c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 08:57:24 2021 GMT
Not After : Nov 23 08:57:24 2022 GMT
Subject: CN=619cacf7-f3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:c3:70:d6:2c:1d:bc:be:95:e4:6d:14:1f:
c7:50:74:69:7c:7c:5d:16:14:63:66:14:05:27:03:
f2:b4:d2:1d:c5:de:5c:e3:a4:e8:53:a1:aa:a4:76:
93:47:cb:bc:12:94:c7:39:c1:6b:43:43:c7:ea:2d:
3d:ce:13:cb:db:4f:21:9e:51:b2:86:3e:70:6d:c4:
a7:11:04:4e:54:3d:2d:55:66:d9:a3:87:ed:8e:5d:
66:72:92:12:ce:14:38:de:e8:5b:dc:a3:3c:a0:08:
5f:8c:1b:e5:ad:87:ff:29:27:d6:a3:d8:83:aa:f0:
ee:ad:ae:e5:b2:fd:f0:01:77:42:e2:23:b6:ef:dc:
a2:38:9e:25:f5:01:6c:e9:92:60:78:10:0f:1f:5e:
90:03:19:5c:75:41:c4:39:bd:82:09:52:89:d5:a3:
e6:b3:e7:e2:09:c3:99:7c:69:6f:9b:6e:85:af:dc:
da:b8:fb:df:25:3d:26:7f:ad:a6:da:a8:fc:a3:6a:
c2:69:fe:28:78:27:ba:c6:3a:ba:cb:e8:e3:21:e7:
b8:6a:f5:d7:de:88:c8:66:45:23:00:8c:ae:81:6c:
4e:1b:46:aa:d2:ee:a9:15:8c:fd:01:4a:cb:3d:41:
c9:56:70:27:d3:c9:c3:9c:8c:92:22:4e:03:2f:fe:
ad:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:31:C6:F9:E4:37:97:BC:32:D5:CD:F5:98:FA:20:66:49:38:F0:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6212C7BC4C3B11EC8085921BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.91.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:a9:56:1a:e5:23:34:f0:b2:d5:90:f1:54:ca:4f:a1:75:e7:
9d:40:51:b1:9a:c9:61:5d:ea:b5:06:c7:99:ee:60:5c:7b:5c:
e1:56:fd:be:bf:9b:79:72:6d:07:08:15:c9:bf:78:f1:f3:4f:
90:0f:99:77:e7:32:3b:80:f2:85:63:82:19:3e:d5:21:1c:0e:
95:e9:b9:0e:a6:3d:4f:41:23:47:a7:7c:e6:00:e3:aa:96:67:
bc:f7:32:af:4b:03:2f:fe:0f:a6:13:77:6c:1f:13:1a:8f:8e:
30:62:c5:d8:e6:1a:8f:46:95:81:90:70:5b:06:92:7b:77:23:
46:b3:fe:7e:d1:db:14:ca:e2:72:2b:c7:6a:35:0d:3a:14:71:
bf:83:9d:89:ed:af:7f:ec:9f:c0:18:c8:1c:d5:a6:81:18:55:
c9:52:62:e2:d0:24:45:73:f6:e2:51:44:17:10:e0:b5:19:d5:
fc:91:24:a6:02:4f:cf:ef:22:77:97:3a:93:74:60:43:8e:0b:
33:dc:83:52:be:03:2f:4e:07:ff:ab:98:fc:2e:fe:a3:5d:0f:
8c:8b:4b:19:91:e5:ed:ec:f4:2c:79:17:21:bd:72:aa:c1:52:
61:ae:e6:07:5c:82:2c:f6:eb:41:ef:98:c9:c1:8a:98:8d:17:
9f:4d:e2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-ams.rpki-client.org