Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CD15CCA2D9C11ECA4470A51D8A014CE.roa
File: 7CD15CCA2D9C11ECA4470A51D8A014CE.roa (raw, json)
Hash identifier: VsjcBqe709Hq5454LOnysh+GTHfsFvmY/eI7hAxICUs=
Subject key identifier: 46:61:54:AF:25:DC:35:9A:70:53:42:6F:49:2D:FE:71:98:C1:8B:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0C92
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CD15CCA2D9C11ECA4470A51D8A014CE.roa
Signing time: Fri 15 Oct 2021 09:44:28 +0000
ROA not before: Fri 15 Oct 2021 09:44:23 +0000
ROA not after: Sun 23 Oct 2022 09:44:23 +0000
asID: 59134
IP address blocks: 154.202.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3218 (0xc92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 15 09:44:23 2021 GMT
Not After : Oct 23 09:44:23 2022 GMT
Subject: CN=61694d7c-0f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:94:d6:0b:94:2b:95:6a:27:96:a6:1e:69:
c1:eb:c7:7c:64:93:04:fe:b5:76:a8:99:b1:97:28:
06:c8:b6:f5:23:2d:3c:63:f9:80:e8:f7:f7:bb:21:
32:0d:99:8d:90:33:d8:5c:17:31:7c:66:87:4f:cd:
83:5b:ab:f9:65:8c:6f:22:47:bc:c8:d2:fd:08:cf:
d0:e3:27:e0:f0:d9:4d:a3:89:d0:6e:17:8b:1e:fa:
51:6c:74:17:64:cc:fa:a8:ba:68:0b:c2:89:6a:6e:
12:a4:e6:9f:08:d5:68:20:90:bb:d2:48:e2:fe:fd:
bf:af:d8:39:aa:8e:15:f5:6a:6f:b2:19:e9:0a:db:
4c:9f:a7:9c:91:0e:52:99:a0:4c:74:ba:16:9a:bb:
58:86:74:51:dd:5a:49:51:06:e3:d5:24:00:93:df:
ad:e9:4c:79:44:e3:b1:44:8f:dd:71:d0:bd:18:4b:
04:18:9e:7f:b8:86:1e:91:03:cf:65:2c:e1:c6:ce:
e4:14:cb:47:9f:84:8d:a6:a6:0b:09:e0:89:f9:df:
03:1c:d0:83:be:b8:6e:5d:46:e7:92:e0:9b:a7:c3:
3d:69:6e:67:9d:2f:d9:55:7f:bd:66:48:9b:80:ba:
fb:f6:22:a8:ad:f2:37:ed:7b:45:b3:51:b5:43:3f:
98:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:61:54:AF:25:DC:35:9A:70:53:42:6F:49:2D:FE:71:98:C1:8B:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CD15CCA2D9C11ECA4470A51D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.5.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:fb:04:1a:dc:2f:2e:18:d1:3f:ae:2d:0d:3a:d6:e2:9c:b6:
4f:53:70:cd:d1:03:b9:ef:c8:87:68:df:59:d3:4f:4a:0b:19:
0d:f1:32:96:b8:51:ef:e0:44:a7:e2:be:ea:0b:d5:14:58:c7:
2f:05:21:82:33:77:7e:2f:b2:83:7f:75:a7:af:0c:52:9f:a8:
97:1a:dd:39:c0:16:34:67:d6:d2:d4:30:2f:9c:a1:97:bb:c3:
b2:f5:1b:39:ba:bb:34:35:c8:26:8f:12:ee:75:f2:a3:35:3a:
55:69:8b:37:7d:48:d4:d4:0f:20:fc:95:88:b1:26:61:a6:92:
53:8b:70:bb:7f:c4:49:b4:81:52:0a:94:52:71:94:31:2f:2d:
32:4f:da:a9:16:f0:3b:8b:65:5d:76:2e:6b:ba:cc:a2:8d:91:
a5:84:3b:28:58:79:02:ff:cb:30:6a:75:86:57:12:dc:10:06:
23:e2:e0:99:03:02:6b:41:a9:42:7d:cb:48:9d:68:5e:2a:c9:
33:3f:ca:a0:62:86:6c:6e:8d:03:d5:05:11:9a:7e:c7:75:70:
03:d7:20:b0:75:a4:d0:f8:fa:f5:9e:e8:ef:94:cd:1b:8d:89:
60:97:16:8c:3f:14:ef:5a:2b:d4:66:4c:b4:d1:28:cf:75:c4:
e2:36:d9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-ams.rpki-client.org