Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/776CBEB83D7811EDAA0CEB9AF1222468.roa
File: 776CBEB83D7811EDAA0CEB9AF1222468.roa (raw, json)
Hash identifier: 85kNvoZdGuGBEQZCzqdgLvEWNBP11AYvmWCwOwOppas=
Subject key identifier: 85:FC:72:02:43:A0:99:6B:69:13:D9:55:2F:65:1B:47:2D:C9:97:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1922
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/776CBEB83D7811EDAA0CEB9AF1222468.roa
Signing time: Mon 26 Sep 2022 08:51:53 +0000
ROA not before: Mon 26 Sep 2022 08:51:49 +0000
ROA not after: Fri 30 Dec 2022 08:51:49 +0000
asID: 35916
IP address blocks: 154.95.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6434 (0x1922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 26 08:51:49 2022 GMT
Not After : Dec 30 08:51:49 2022 GMT
Subject: CN=63316829-67c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:d4:15:f7:cd:be:61:26:18:d9:64:9c:c7:
7a:71:e8:17:d5:2e:ba:38:8f:0f:0b:82:fb:62:f0:
e9:5e:a7:df:c1:ac:66:0c:3f:03:77:d0:cd:b6:87:
fe:05:9b:a2:9a:19:f1:87:a2:56:12:6c:32:b9:a2:
7f:c5:51:98:17:ec:0b:4b:ce:ce:d9:cf:3d:ee:24:
89:4a:e4:4a:6d:f3:d5:d7:f6:8c:aa:0b:ee:0b:e2:
7c:a1:a2:d2:3e:06:b3:64:45:d7:1e:54:2f:60:3d:
0b:7b:c7:27:8f:4e:1e:df:00:5d:eb:a8:3d:7b:3f:
26:71:f2:22:ad:a7:b0:e6:99:fe:01:e1:0a:79:e1:
3f:55:42:c5:6a:ac:65:05:98:c8:27:0f:8e:de:9f:
19:bc:92:f2:5f:45:7b:5e:bd:fc:97:5a:1b:52:2d:
a5:c3:23:94:fe:bc:d5:4d:eb:dc:c7:12:67:64:8d:
ae:98:b2:af:4b:cc:ff:06:e1:e0:76:f0:67:bf:e5:
3c:18:16:e6:cf:68:ba:8f:7f:44:81:f5:9e:8a:9a:
9b:af:da:6a:1b:33:17:c8:38:b0:46:d0:d5:cd:6f:
13:82:75:24:9a:88:29:e0:7d:b9:78:65:8b:b8:72:
0a:41:00:f1:aa:73:67:4f:e6:17:65:c3:bf:14:50:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FC:72:02:43:A0:99:6B:69:13:D9:55:2F:65:1B:47:2D:C9:97:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/776CBEB83D7811EDAA0CEB9AF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.4.0/22
Signature Algorithm: sha256WithRSAEncryption
48:40:64:0b:a7:4b:da:eb:e4:1b:15:4e:79:fd:7c:69:1b:ae:
51:d7:41:83:c2:da:9b:1c:11:79:e7:53:c2:21:9b:dd:5f:62:
56:c2:a8:7c:ab:95:57:8d:84:7e:94:c2:77:a4:84:3a:14:f2:
af:80:e7:ab:c4:ba:56:43:6e:53:0d:cd:7e:eb:5d:7a:3a:29:
18:30:66:aa:4e:cf:49:51:f3:fe:fa:af:ce:03:f4:9d:bd:b8:
00:c6:fb:a2:cd:fe:e3:8f:1b:87:81:f7:5b:df:d2:22:5e:00:
6f:db:e0:b0:69:81:91:32:05:e1:b7:6d:45:e7:7e:ca:7d:3d:
eb:b9:35:ca:b7:b0:82:e0:47:dc:dd:ce:fd:fb:6e:46:82:f8:
5e:ca:35:d1:e9:36:a5:0c:7f:cf:16:ed:b2:8b:ea:c4:63:45:
00:6d:7b:ec:78:2c:2f:eb:47:5d:e2:03:a1:19:5f:f1:53:0b:
e4:9e:51:c9:4e:7e:f5:e2:8a:2b:bf:f9:c9:22:dd:da:19:2f:
14:5e:29:1a:ef:8c:07:c0:7a:d5:21:fa:61:09:a5:d9:9b:20:
31:05:ec:47:ce:05:66:96:e5:6c:65:12:e7:f7:ba:de:bc:14:
35:65:17:8c:68:ff:e7:ab:ae:60:56:f1:e1:90:69:1b:02:e6:
9f:89:d4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-fra.rpki-client.org