Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E9520CEB0DC11EC952554CE5A40D577.roa
File: 6E9520CEB0DC11EC952554CE5A40D577.roa (raw, json)
Hash identifier: A+xyD4/WlQ3NmB+FpnF7aU987bZvioPRv7WsZLyx3/4=
Subject key identifier: 47:1F:11:24:9B:0A:56:6C:2B:3E:A1:4B:8A:24:41:26:C6:15:6D:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1586
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E9520CEB0DC11EC952554CE5A40D577.roa
Signing time: Thu 31 Mar 2022 10:22:14 +0000
ROA not before: Thu 31 Mar 2022 10:22:10 +0000
ROA not after: Sat 31 Dec 2022 10:22:10 +0000
asID: 136744
IP address blocks: 154.209.16.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5510 (0x1586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 31 10:22:10 2022 GMT
Not After : Dec 31 10:22:10 2022 GMT
Subject: CN=624580d6-bea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fc:c0:42:c0:5c:f9:ef:df:83:5a:36:38:c0:
94:22:35:ce:47:1f:eb:c0:a7:92:88:56:d9:d1:89:
50:1d:7a:6f:54:4e:81:74:a5:ac:9a:11:80:63:55:
b6:5e:be:ab:4b:50:d8:1b:7d:e7:fa:1c:85:7c:66:
69:11:b9:e8:89:3e:67:51:3f:c0:26:60:0e:97:e5:
59:a7:5e:11:6a:7e:66:58:d5:29:c3:52:e5:b7:89:
a4:30:97:6e:7f:67:d5:cb:a1:51:bf:23:d4:f2:2b:
0f:06:e9:86:25:aa:5c:d6:8a:d3:6d:6e:11:b8:56:
98:9b:8e:d9:45:0a:a3:01:95:ea:b8:d8:48:78:38:
0d:47:ab:bb:7a:ab:92:6f:84:c1:7a:38:30:ce:dd:
b2:7e:90:25:90:8f:db:89:d0:00:54:97:ad:59:3b:
b2:c2:c3:47:b9:f8:e5:4f:b0:f1:c8:df:42:d2:aa:
3c:53:c8:3c:7d:f2:ca:60:8d:78:16:ea:41:3e:1a:
02:5a:40:0c:a1:c5:07:d4:46:22:81:08:e3:6c:5a:
70:4e:f9:51:49:eb:1a:26:ef:0f:9a:24:5a:b8:14:
30:29:d0:15:fa:89:51:2b:8c:24:04:6c:c1:eb:5a:
cd:14:51:7b:45:16:16:a5:c7:1f:8d:9c:06:16:4b:
1b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1F:11:24:9B:0A:56:6C:2B:3E:A1:4B:8A:24:41:26:C6:15:6D:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E9520CEB0DC11EC952554CE5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.16.0/23
Signature Algorithm: sha256WithRSAEncryption
47:fe:20:ba:8a:9e:0b:d4:44:dc:ab:7f:76:c8:d9:fe:a8:9b:
7c:2f:4d:32:87:37:ff:de:23:96:a5:a2:e6:92:17:6a:e8:db:
dc:da:fd:9b:e7:6d:3a:13:b5:51:07:d6:35:1b:43:f9:b5:e3:
3b:d5:69:59:90:a9:3f:51:4f:ac:ef:67:16:84:1f:c8:67:25:
15:fa:e9:57:7a:54:d3:eb:02:f7:e6:bf:3d:91:a7:5a:97:41:
80:e7:18:52:40:d9:a5:ab:8b:db:27:87:1b:5f:d4:ef:ca:f5:
6c:35:e3:b3:7d:61:a9:6c:15:05:45:33:46:f8:58:42:44:64:
b2:80:a3:25:08:9b:cc:83:63:70:ab:fa:2e:ae:10:a0:5c:72:
fd:d7:a5:fa:38:15:79:7d:55:80:20:f5:76:93:2e:92:55:66:
ae:49:e1:65:72:7f:04:80:7c:d5:af:a8:2b:02:f0:ca:13:5c:
3c:18:16:25:fb:7a:0d:24:07:29:fb:15:1d:11:41:78:11:ca:
15:33:77:19:4a:64:05:f7:8a:4b:a5:f3:99:fa:25:a8:eb:ae:
b7:4b:bc:68:c9:9d:83:f9:c8:6b:6a:bc:fb:6b:64:3e:08:52:
85:94:3c:01:b7:f1:aa:35:3b:88:bd:78:60:55:98:07:e3:da:
80:76:75:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-ams.rpki-client.org