Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A15CF1CD5B711EC90D888BBF1222468.roa
File: 6A15CF1CD5B711EC90D888BBF1222468.roa (raw, json)
Hash identifier: BpHuo94s//8Oy8on+Og+Wv9p0V7hCbZw/unXSVvBkds=
Subject key identifier: 6D:29:0A:E9:98:02:16:FB:0B:61:45:A7:76:B1:9B:5C:14:12:53:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 165A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A15CF1CD5B711EC90D888BBF1222468.roa
Signing time: Tue 17 May 2022 08:00:28 +0000
ROA not before: Tue 17 May 2022 08:00:24 +0000
ROA not after: Sat 31 Dec 2022 08:00:24 +0000
asID: 63023
IP address blocks: 154.88.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5722 (0x165a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 08:00:24 2022 GMT
Not After : Dec 31 08:00:24 2022 GMT
Subject: CN=6283561c-a1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:19:6f:8d:f7:c3:a3:4a:5f:46:13:27:d5:a5:
6a:9a:74:8e:5e:d0:1f:cd:c9:0a:d8:c2:00:de:9d:
6d:99:56:5d:c4:bf:f3:a1:fb:4e:a3:4f:fc:6e:b9:
06:cb:90:30:ed:f7:31:52:65:e9:d0:ee:4a:a8:05:
0a:59:8d:75:28:6c:86:14:1a:fe:24:1d:ab:0c:b3:
cd:74:2e:b7:de:31:54:40:96:cf:e4:73:c8:3b:ed:
eb:32:49:91:01:5b:4a:c8:91:e1:9b:cb:c2:5a:bd:
52:c1:54:95:af:35:67:53:b8:4e:a2:44:56:51:56:
ce:ac:78:4a:05:bf:da:21:28:85:9c:f0:f8:4b:99:
95:69:6c:58:d1:ea:3b:93:44:01:19:00:b3:2e:cc:
35:2f:a9:31:e2:b2:07:b0:87:50:5e:9e:8b:e9:74:
db:f7:6b:dc:78:c6:14:c1:d3:49:fd:92:d6:2a:a6:
38:fb:d0:6b:6e:19:cc:ac:5d:ee:95:44:83:65:b2:
6d:d0:69:19:b3:f0:0b:65:67:74:32:8d:9c:84:a8:
ee:22:2f:16:98:e3:d2:c8:e0:f7:35:fb:97:9f:8a:
68:e5:c2:21:79:8f:b1:95:21:b8:3f:a7:06:f9:78:
d3:64:48:85:56:27:e4:91:82:3d:11:d1:d3:f4:6d:
da:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:29:0A:E9:98:02:16:FB:0B:61:45:A7:76:B1:9B:5C:14:12:53:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A15CF1CD5B711EC90D888BBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.1.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:07:47:8b:fc:1c:5d:c7:fc:dd:29:a7:b7:2b:99:26:e0:2d:
fd:b4:bd:26:8a:15:f7:f1:b1:10:a1:f7:b5:b2:43:31:50:b7:
13:a8:22:3e:4e:f6:54:d9:99:57:3a:40:ec:30:bb:da:03:b1:
3d:49:0f:2a:e7:3d:fb:99:e0:72:a7:ff:e7:8b:d6:d9:f4:29:
2a:b1:21:c9:1f:1a:b2:c3:78:d0:16:46:31:01:a0:32:20:a5:
95:6a:05:49:2f:cb:af:b9:82:61:eb:67:f4:48:bc:e3:61:63:
83:c2:46:6f:9b:b6:ea:60:f8:b7:76:89:de:8c:d0:78:58:4a:
66:90:89:cd:e6:48:16:c7:7d:f2:7b:d6:4c:87:df:f2:b7:78:
67:44:90:e4:72:e9:84:fe:45:d0:d4:32:06:75:38:a5:2c:b8:
68:45:c9:78:50:d1:68:97:58:d6:a8:fc:a5:ba:2f:01:fb:33:
79:6d:b3:57:71:a6:3b:63:3b:8b:08:43:11:3a:b6:d7:c2:c0:
82:da:0c:28:48:3b:5a:55:dc:80:1f:83:ed:f0:c8:06:84:40:
f2:9f:f7:d1:62:cb:ca:82:cc:15:bf:1f:08:03:06:f2:71:4c:
a0:64:df:79:dc:2d:ae:57:47:99:43:c0:14:07:1b:17:20:72:
cb:c4:d4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-ams.rpki-client.org