Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/645B3E32E57F11EB9920F42CF8AEA228.roa
File: 645B3E32E57F11EB9920F42CF8AEA228.roa (raw, json)
Hash identifier: QvQ1J063zYP4Z/lSC6VcybO7YeTvywcO88t3Pay/OLU=
Subject key identifier: 8F:0D:45:02:54:2B:4B:53:22:03:17:AF:4C:C8:5C:9F:D7:5F:BB:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 07DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/645B3E32E57F11EB9920F42CF8AEA228.roa
Signing time: Thu 15 Jul 2021 15:14:47 +0000
ROA not before: Thu 15 Jul 2021 15:14:44 +0000
ROA not after: Sat 09 Jul 2022 15:14:44 +0000
asID: 397630
IP address blocks: 154.202.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2014 (0x7de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:14:44 2021 GMT
Not After : Jul 9 15:14:44 2022 GMT
Subject: CN=60f050e7-8293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:a8:7d:70:f9:47:ae:19:2b:ba:6b:50:0c:
35:57:d4:9d:5a:64:83:ae:17:8f:4b:43:82:12:3c:
89:65:bc:b9:e0:fb:8d:dc:4a:37:4a:78:fb:cd:a7:
25:ed:fb:cf:61:4c:c8:5a:14:ff:bd:82:48:8b:76:
2a:62:fc:31:a0:01:cd:5c:02:2f:fc:a0:16:1c:a0:
76:af:aa:70:bc:65:74:08:c5:28:ce:44:c2:f8:b4:
ab:6e:09:16:50:50:6a:0c:8c:3a:b9:0d:2e:e2:bb:
a7:ed:a5:60:1e:45:1d:2c:a5:1f:32:11:b8:19:9f:
0e:c6:38:d7:06:96:61:f0:70:56:c8:2c:8f:f5:5e:
84:fa:0d:64:9c:4b:7f:f9:ca:eb:a0:2a:4b:77:cb:
4f:f9:d8:50:dc:c0:f9:ef:4a:29:7f:6e:dc:ca:4d:
78:e0:c4:35:6c:0c:df:df:f9:4f:f9:ec:60:03:15:
72:a9:8f:e7:13:6d:12:24:46:35:6e:3e:44:17:e9:
3b:8e:35:1c:a3:46:95:4e:24:93:a9:a4:ce:9f:c1:
8e:4e:b5:65:20:b3:08:0b:6b:f7:9a:17:75:54:fe:
c3:61:d4:dd:66:47:37:9c:06:37:c8:69:a4:56:34:
5b:7c:3b:05:23:a5:f3:0c:c4:98:53:2f:5b:f8:16:
4b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0D:45:02:54:2B:4B:53:22:03:17:AF:4C:C8:5C:9F:D7:5F:BB:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/645B3E32E57F11EB9920F42CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.111.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ff:4a:d7:3e:b6:db:c0:1e:70:95:3a:91:d3:67:73:de:52:
1a:ee:5c:26:47:17:f8:90:2e:b5:5f:06:ea:cb:fd:79:74:72:
e5:e7:57:ad:b9:bb:a6:a4:e3:f8:d7:2d:92:04:a0:80:09:cc:
dc:f4:02:8b:3a:56:0b:dc:c0:5b:48:a2:68:f5:38:a9:34:44:
27:d6:f4:3c:a3:c5:a6:0b:6c:78:0f:af:2a:86:bf:ea:9d:1b:
2f:e3:dd:86:79:a9:73:84:93:f9:7a:b5:67:64:67:8e:4a:07:
b3:86:f0:3d:bc:1a:14:32:dd:68:3e:f4:06:9c:6f:9c:59:17:
13:40:d8:06:62:83:fe:94:a0:c1:22:03:56:b1:7c:e6:12:3d:
19:26:cf:7f:81:46:3c:0b:c0:28:f3:6a:09:44:8c:06:c8:78:
86:2b:64:06:03:b0:6f:1a:fc:29:57:b0:9c:3e:df:3c:0c:14:
a9:c2:56:3a:c9:40:ea:3f:66:67:04:99:f4:5f:44:37:92:6c:
16:16:23:28:27:ad:39:da:b9:a0:fe:55:de:9c:1f:4a:a2:c9:
a3:e3:d2:1f:c8:36:7a:52:94:c4:00:8a:4f:c7:14:df:f9:65:
6c:13:a9:89:8a:ff:9a:bd:e5:31:ee:07:75:e0:11:0f:e7:9b:
e6:93:97:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-ams.rpki-client.org