Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6466BB981B8C11ECB4B3BF71D8A014CE.roa
File: 6466BB981B8C11ECB4B3BF71D8A014CE.roa (raw, json)
Hash identifier: Sb3763+hBOQ828xIjVLXxzt9O6ylZ1QFADds98Ar//E=
Subject key identifier: C6:E5:69:4F:CB:F9:BD:5E:54:1E:DE:53:E3:28:13:CF:9F:B8:85:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0C61
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6466BB981B8C11ECB4B3BF71D8A014CE.roa
Signing time: Wed 22 Sep 2021 10:03:54 +0000
ROA not before: Wed 22 Sep 2021 10:03:47 +0000
ROA not after: Sat 22 Oct 2022 10:03:47 +0000
asID: 141356
IP address blocks: 154.92.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3169 (0xc61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 22 10:03:47 2021 GMT
Not After : Oct 22 10:03:47 2022 GMT
Subject: CN=614aff8a-be31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:82:ea:93:a7:dd:7d:56:0a:f3:ff:87:af:
a4:51:1a:26:28:40:18:fc:fa:be:7b:2c:af:8d:2d:
95:84:6a:83:f0:ca:21:77:9e:2c:91:41:ba:fb:93:
b9:dc:43:1c:ab:a6:18:e7:58:ee:aa:45:78:b8:91:
f7:30:fd:51:90:9b:82:5b:ce:57:b0:6c:ab:81:5a:
6e:14:71:04:7d:72:d3:a1:c6:32:6e:23:17:ec:c0:
a3:a3:48:a2:6d:2b:76:10:20:95:03:d4:3c:36:d2:
55:fa:05:01:a6:09:fc:9b:63:8b:f7:ed:8d:44:a0:
5c:7c:8a:5a:d7:3e:65:70:60:b2:7a:19:e5:81:db:
f4:22:d1:0b:53:0b:3e:7f:da:da:c3:2a:7c:9f:73:
81:0d:22:23:6b:3c:40:62:c4:7b:31:12:3a:6e:88:
aa:46:85:77:dd:80:93:b8:88:35:a0:ab:ce:11:70:
6b:df:c7:db:5b:6f:50:fb:57:c2:ac:95:8b:d7:03:
ab:9e:fe:a3:0d:d9:e0:30:1c:69:e3:b3:82:3c:e4:
03:c4:42:27:2b:88:3b:9c:a7:bf:47:80:1a:2b:3a:
96:fc:cf:1c:28:cd:0d:54:f1:7e:e7:18:3a:96:9b:
fb:c8:01:d8:d2:f8:7b:47:dd:72:af:83:cd:e0:ea:
d1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E5:69:4F:CB:F9:BD:5E:54:1E:DE:53:E3:28:13:CF:9F:B8:85:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6466BB981B8C11ECB4B3BF71D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.108.0/22
Signature Algorithm: sha256WithRSAEncryption
86:f1:67:75:93:5d:83:b1:e1:20:d4:c3:d6:28:f9:a9:00:90:
31:36:31:22:78:c7:4b:ce:03:a9:17:66:a0:d5:3b:9b:9a:db:
ee:8c:f3:38:e5:ee:35:6d:c7:b3:54:30:22:ba:75:9f:20:6e:
ab:56:b4:4e:78:3b:b3:cd:0c:1b:02:f2:b5:d3:1f:05:91:31:
59:a6:65:1b:26:a5:e4:37:31:02:21:32:d5:4c:74:9b:0d:f0:
dc:b3:7f:df:75:41:48:60:78:99:fd:46:70:59:02:9a:f6:ad:
d0:5a:74:73:69:15:7c:0c:c3:b5:da:73:51:88:2b:6d:88:a3:
a3:be:55:6b:2b:1a:e1:1c:cd:0d:6d:4e:b2:64:1b:0a:dc:1c:
40:61:11:59:e0:8f:79:3e:e6:81:2b:fa:69:76:96:a0:3a:b0:
4a:0c:76:62:ba:a1:db:ee:79:0b:1b:4a:72:55:82:b4:5e:bf:
51:80:0a:37:b1:94:ac:b3:2d:6e:6f:62:c4:9c:5e:e4:85:97:
56:cf:d2:8f:6c:dd:de:17:dd:b7:6b:73:33:ec:8e:ae:d7:cd:
d2:3f:e6:a4:21:19:2d:6e:66:61:8e:ec:cf:58:3b:f0:28:01:
46:b3:c8:c1:72:91:04:99:2b:88:22:60:b1:5c:39:05:21:e4:
49:98:32:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-ams.rpki-client.org