Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A8265ECE06811EDB3AAC9C82F6D8C1D.roa
File: 7A8265ECE06811EDB3AAC9C82F6D8C1D.roa (raw, json)
Hash identifier: Khw2dHB6xDlqAaE81p+xKCTxccSDhjCau0iZqDFsZKU=
Subject key identifier: A9:60:02:9D:B9:81:DD:DF:DF:EC:26:3F:45:4A:97:C8:2D:BA:EE:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1F99
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A8265ECE06811EDB3AAC9C82F6D8C1D.roa
Signing time: Fri 21 Apr 2023 17:18:05 +0000
ROA not before: Sat 22 Apr 2023 17:18:02 +0000
ROA not after: Thu 25 Apr 2024 17:18:02 +0000
asID: 63888
IP address blocks: 154.205.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8089 (0x1f99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 17:18:02 2023 GMT
Not After : Apr 25 17:18:02 2024 GMT
Subject: CN=6442c54d-1704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:b3:e2:f8:16:25:9e:7d:0e:af:a4:22:a0:
01:9d:43:4f:f4:bc:23:8f:1d:42:87:f8:9c:7b:4d:
4e:9c:45:3b:3e:3b:ea:67:7f:a9:a5:5d:4a:b9:1d:
11:df:d8:83:33:93:f4:68:48:ce:a5:a0:71:60:2a:
95:17:9f:2d:61:be:90:c5:50:8d:27:bd:f8:21:93:
93:e9:f4:d3:33:5d:2b:1d:21:f8:25:05:74:12:43:
b0:02:cc:66:a0:f4:9a:8f:d9:7d:95:6b:18:e7:30:
83:07:50:b3:ac:d7:6d:40:61:bf:2c:57:b5:15:37:
64:cd:3a:ca:2d:54:84:2e:e6:56:c5:ae:c8:56:b6:
d0:20:46:70:76:dd:ae:f2:98:b9:85:19:c1:f9:d7:
d5:ac:87:60:b3:17:93:6b:7f:fd:2c:bc:21:7f:c4:
29:17:2f:ac:80:c3:06:f7:73:15:38:28:eb:1c:54:
f5:83:76:53:41:29:48:c1:d4:27:da:20:96:3a:bd:
d1:43:05:02:cc:69:ca:9a:7e:c3:1b:16:d1:0d:19:
69:86:9f:74:80:54:67:de:8f:59:de:c1:2e:d3:45:
6a:11:84:86:e1:df:23:9b:1a:31:9b:c3:21:f9:82:
64:29:53:cc:08:dd:97:ff:a1:87:77:56:bd:27:74:
4f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:60:02:9D:B9:81:DD:DF:DF:EC:26:3F:45:4A:97:C8:2D:BA:EE:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A8265ECE06811EDB3AAC9C82F6D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.32.0/20
Signature Algorithm: sha256WithRSAEncryption
b3:a5:cc:68:d2:45:1e:5f:a2:ef:a7:5d:8c:ad:74:7a:95:95:
f1:d2:8a:91:4c:3d:48:4e:47:88:f4:ff:bd:5e:f8:0e:58:9b:
11:4b:08:79:3a:2c:56:4a:a1:82:96:ef:fc:51:9f:cd:31:4e:
fe:2e:ba:ad:b8:89:dc:6c:44:6e:01:f7:c5:f5:6b:71:75:c8:
ab:d3:07:59:3e:f1:0f:7d:07:66:84:d0:23:11:8b:63:db:6c:
4b:d4:37:d9:92:fa:03:5e:45:7a:53:8a:02:5a:ae:ce:bb:6c:
eb:30:68:47:00:90:c3:87:3d:e3:9b:63:f8:ec:72:9e:4b:09:
57:30:30:45:bf:b8:fa:67:6e:ef:75:66:70:80:68:b0:8f:cb:
8e:3a:26:39:b9:cb:c9:00:df:61:cb:3c:99:f0:30:d1:9c:65:
2c:9b:0d:ed:d3:b1:f8:9e:9d:ea:58:c4:0e:ae:7e:2c:4b:25:
a7:9c:81:23:be:89:27:11:c5:92:8a:65:58:f3:29:3c:ef:05:
59:0a:99:cd:23:e5:07:fd:ab:cd:60:4c:00:c3:b3:b6:cd:7b:
c9:09:b9:3b:8f:ba:54:f4:60:c1:36:67:f3:f5:54:83:18:fd:
fc:e3:42:31:40:23:c1:68:0a:ed:24:de:bb:e5:45:5e:64:a0:
5a:c9:0b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:35 2024 by rpki-client on console-fra.rpki-client.org