Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A3988F8157A11EE9A0018274AD9E6FC.roa
File: 7A3988F8157A11EE9A0018274AD9E6FC.roa (raw, json)
Hash identifier: DfN3o23wae98R6JzFXLnGL06ZtvhLH+hyjwmw0HpT48=
Subject key identifier: E0:ED:20:AE:DB:C8:EC:90:34:13:71:0F:49:5B:DF:CB:6C:0F:7F:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2ECD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A3988F8157A11EE9A0018274AD9E6FC.roa
Signing time: Wed 28 Jun 2023 06:10:28 +0000
ROA not before: Wed 28 Jun 2023 06:10:24 +0000
ROA not after: Thu 25 Apr 2024 06:10:24 +0000
asID: 28458
IP address blocks: 154.212.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11981 (0x2ecd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 06:10:24 2023 GMT
Not After : Apr 25 06:10:24 2024 GMT
Subject: CN=649bced4-5a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:1f:20:ae:51:dc:3b:36:1e:ee:0e:27:78:
50:54:65:ca:73:a2:85:89:7b:f7:bb:02:da:49:d8:
d8:85:6e:8b:81:aa:e5:54:12:09:1a:82:01:fe:99:
4e:29:84:72:31:6b:12:04:cb:c3:ac:5a:e7:bb:34:
c7:39:14:0e:4b:9c:e6:55:e1:e8:b8:bb:e8:ff:75:
0a:ac:63:d2:32:72:70:e2:cd:b4:bd:85:26:73:9e:
75:94:d9:55:fd:d7:44:83:15:6d:ae:71:e5:3a:c5:
68:77:4f:9d:58:53:98:a7:6b:c0:79:5c:6b:7d:6f:
3a:ef:40:2f:6f:c3:07:0c:f8:fd:45:2f:53:21:fa:
01:91:56:da:fc:d7:43:be:c6:bc:33:f3:77:f3:94:
f0:cf:48:05:4b:f6:07:29:86:b9:a8:3c:b4:53:34:
b1:2f:8e:9e:84:23:99:a0:10:dd:73:2e:b5:d4:68:
9c:29:73:dd:85:91:0e:65:7b:7f:0a:39:59:b6:86:
e2:08:9e:69:43:2c:c8:10:f3:3b:d2:f3:f4:67:72:
36:d9:f9:ab:cf:8b:cb:fe:28:2e:ec:a4:0f:e8:27:
0a:47:cb:95:34:59:d7:c6:b8:31:53:7f:21:e7:4f:
a7:dd:43:23:56:34:32:16:21:e8:5b:24:2a:20:47:
a5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:ED:20:AE:DB:C8:EC:90:34:13:71:0F:49:5B:DF:CB:6C:0F:7F:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A3988F8157A11EE9A0018274AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.7.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f1:8a:3b:05:5d:26:15:17:75:c2:72:cc:bc:6b:a4:c3:68:
78:ea:f0:ae:86:6c:f7:c2:ea:b4:be:60:17:c4:0e:27:64:8d:
26:f6:d0:1f:ec:f5:26:22:5c:93:a4:49:41:1a:b6:07:cd:de:
f6:32:e8:9d:b6:38:4d:e1:cc:a2:c9:46:fe:6a:66:e6:6e:cc:
96:1a:5b:34:1c:88:1d:9a:70:24:57:40:ec:0c:7e:62:97:00:
d5:7c:be:ec:e1:f5:fa:82:b4:60:cf:96:1e:74:38:c5:53:9c:
c0:75:00:19:aa:8e:51:44:06:8a:b0:ee:07:29:76:49:9a:b3:
50:4a:08:fa:7f:23:03:67:34:b7:5a:bf:1b:33:04:82:67:85:
42:e9:2e:bb:1a:cd:fc:11:38:f5:2d:9c:52:22:62:ea:3d:ec:
54:4e:ae:dd:84:da:ea:f8:17:7c:1d:b3:0d:91:1f:0b:eb:40:
22:a0:7a:9b:0d:53:c3:4a:14:6a:3d:e5:36:59:11:cf:01:92:
8f:2f:15:10:2a:1e:d8:8f:6f:68:71:8b:6d:0a:df:13:e5:23:
01:90:35:f7:77:2c:fb:09:00:84:06:df:d8:01:69:c1:5d:2a:
83:0d:60:99:15:b6:04:f0:37:70:72:0d:3c:3a:a7:1b:44:31:
93:42:28:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:50:18 2024 by rpki-client on console-fra.rpki-client.org