Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68A6CBC23D7711EDB9BE2398F1222468.roa
File: 68A6CBC23D7711EDB9BE2398F1222468.roa (raw, json)
Hash identifier: xTSD57A1BQuGrDwjO5ofJ/5/wUeCqIzuJ2uATQVAYX8=
Subject key identifier: A6:E0:9A:77:72:CA:FE:9F:CB:2D:86:00:15:30:33:4D:42:84:BF:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 191A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68A6CBC23D7711EDB9BE2398F1222468.roa
Signing time: Mon 26 Sep 2022 08:44:18 +0000
ROA not before: Mon 26 Sep 2022 08:44:14 +0000
ROA not after: Fri 30 Dec 2022 08:44:14 +0000
asID: 35916
IP address blocks: 154.94.20.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6426 (0x191a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 26 08:44:14 2022 GMT
Not After : Dec 30 08:44:14 2022 GMT
Subject: CN=63316662-a15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:28:97:3f:52:7e:df:12:69:85:1c:d5:1b:64:
b9:b7:e4:64:a5:00:26:f0:27:e0:80:ee:cc:87:a5:
0b:1a:39:5a:20:4a:6f:82:82:38:e2:4e:e3:1c:67:
d0:f8:91:21:8b:c4:21:5c:09:8f:14:d9:6d:18:2c:
67:0a:f9:f9:43:5c:0b:e7:cf:43:d7:9d:28:b0:b5:
1e:a8:db:5a:1c:d1:31:8f:d9:63:cd:53:2e:37:aa:
a5:fb:be:a5:c8:84:af:bb:06:37:31:52:5c:dd:14:
4e:e9:08:d6:92:cd:f8:c8:1b:5e:fd:9e:61:53:8a:
69:27:1b:7c:91:58:6e:95:54:29:17:f3:7e:22:e1:
3b:6f:68:14:e7:f3:be:d5:e2:89:e8:a0:51:4d:86:
77:e4:da:fa:a9:77:79:82:0f:17:dc:fe:6a:8e:78:
0c:6e:36:59:fe:54:98:6c:23:15:dd:e8:41:a1:8c:
56:9b:0d:4c:22:0c:7d:98:57:a5:00:d9:86:bb:96:
f5:c4:93:23:c0:6b:63:95:43:81:e2:19:b7:35:26:
60:c1:86:e4:cd:a1:cf:03:bb:27:18:1d:10:f8:84:
61:f1:12:ab:35:7f:33:cd:c3:ec:75:0c:7b:db:9b:
f5:15:92:8c:48:fc:2b:c3:b1:8e:c6:bd:1d:76:42:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E0:9A:77:72:CA:FE:9F:CB:2D:86:00:15:30:33:4D:42:84:BF:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68A6CBC23D7711EDB9BE2398F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.20.0/23
Signature Algorithm: sha256WithRSAEncryption
31:c6:17:22:e2:be:9e:cf:b5:ac:8e:c6:47:bc:98:96:fc:2c:
21:8f:4f:76:84:4f:9e:dd:9c:3e:ed:da:cc:82:25:82:ef:41:
85:8c:41:fc:2e:a1:37:3d:7d:66:27:d0:da:fc:cf:80:94:73:
82:90:8a:b0:9a:6b:99:c6:31:b5:f3:6b:22:66:29:02:6b:6e:
3f:3b:ea:63:d8:ff:17:7f:59:e4:ca:40:97:b9:41:c4:a8:93:
d5:99:e8:cc:95:10:49:24:cb:57:17:04:e4:1d:7f:31:72:59:
25:7b:2f:71:2d:78:48:87:b3:cf:3b:a3:cb:c8:e6:33:0c:06:
60:7f:7b:15:4d:47:14:08:5c:bd:ba:9d:ee:7e:6a:08:c2:76:
7d:09:16:3a:09:6a:9d:d7:a2:6d:ef:5a:b7:48:a2:72:63:fc:
cc:75:28:01:57:61:e7:36:0f:de:a0:cb:bf:15:30:e1:38:d7:
eb:fb:f7:32:9a:5a:9d:ce:e9:e4:76:a2:f0:aa:b6:94:18:f0:
04:45:75:37:ce:34:c6:a7:03:4a:d7:c3:d0:ee:ce:5b:80:e6:
84:72:44:61:db:8a:90:01:d3:00:6c:5d:fe:f8:b6:ee:64:11:
56:5c:54:3b:7c:33:c3:d8:3b:42:63:a2:c1:82:9e:e4:7d:e0:
6e:f0:dd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-ams.rpki-client.org