Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/935FBBB890AB11EC943508BC5A40D577.roa
File: 935FBBB890AB11EC943508BC5A40D577.roa (raw, json)
Hash identifier: OFpe2ha12eYx9x/9lAIfGurPr+TQoOJQjZQ+ykL6xAg=
Subject key identifier: 1A:E9:5B:ED:45:46:50:B3:0F:5A:A2:D5:7C:D8:DB:5A:34:91:E7:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 14E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/935FBBB890AB11EC943508BC5A40D577.roa
Signing time: Fri 18 Feb 2022 11:11:53 +0000
ROA not before: Fri 18 Feb 2022 11:11:50 +0000
ROA not after: Fri 30 Dec 2022 11:11:50 +0000
asID: 137951
IP address blocks: 154.210.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5352 (0x14e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 18 11:11:50 2022 GMT
Not After : Dec 30 11:11:50 2022 GMT
Subject: CN=620f7ef9-0a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8f:a4:4f:81:04:c5:49:73:5a:80:3b:32:00:
9a:a2:03:83:ec:d5:ba:34:e2:06:11:4e:f7:14:9d:
82:44:a9:c3:cc:d4:82:4c:78:f3:64:28:b2:f1:26:
7a:23:53:e4:96:19:a0:a9:fa:b7:f9:1e:3c:c4:f1:
df:56:12:ac:a5:ac:d6:4b:fb:4c:03:26:71:46:b6:
27:73:18:03:ef:bf:cd:6d:5d:a1:b8:1e:ed:ac:32:
fa:00:a4:8f:1b:c4:28:41:aa:36:5b:35:db:48:0a:
6b:62:29:b5:eb:c4:12:50:e7:16:84:0c:b7:99:6f:
cd:33:17:18:a6:9c:9e:19:08:bd:39:0c:9b:32:4a:
fa:f1:b5:18:61:c7:40:c5:f1:b0:d9:c7:3c:73:ff:
35:6b:74:2c:cc:84:6e:6d:46:79:2e:1f:4e:36:fc:
da:4f:d9:ba:11:86:66:7c:18:12:c9:3e:37:7b:61:
fb:bb:40:73:a7:b2:9e:c6:f3:38:8c:af:db:ae:7d:
14:44:7f:ff:a5:28:11:fa:0d:92:bd:15:e4:c0:2b:
f5:f0:8f:eb:fb:5a:6d:28:f1:20:9c:12:ae:88:80:
ab:38:6e:19:7c:65:56:ab:d8:99:ba:04:6f:7e:a0:
73:c0:fb:b0:ca:1e:97:d4:62:4f:95:61:da:d9:84:
7d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E9:5B:ED:45:46:50:B3:0F:5A:A2:D5:7C:D8:DB:5A:34:91:E7:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/935FBBB890AB11EC943508BC5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.76.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:b4:1e:2f:6c:e4:de:10:4c:aa:21:ce:80:9e:a8:44:c4:2b:
ce:21:78:02:20:7a:61:2f:76:49:2a:d6:c0:89:70:c7:b5:b0:
68:7d:19:47:02:91:a0:ce:a8:9c:fc:1c:32:1e:23:8c:31:da:
80:9e:36:42:26:f4:e5:91:7a:27:ac:ee:63:17:09:46:eb:37:
02:df:2a:b4:0a:e6:48:cc:f2:8d:1b:53:b0:92:ed:3a:61:0b:
e4:50:f5:7f:0c:13:f2:bd:cb:4d:b7:ec:e4:24:d3:d0:18:56:
22:c8:e7:bc:ae:20:69:86:60:f1:77:3a:4a:41:4d:19:df:71:
64:19:5b:2a:7e:71:d0:b9:97:0f:d7:1c:be:82:1e:14:66:65:
2d:71:ba:15:6a:a6:0f:1d:f3:6f:ca:85:a5:ff:e6:48:ad:fb:
7b:c5:f8:6c:a5:46:64:5e:c3:eb:97:14:1f:17:58:ba:98:e9:
8a:0e:32:f0:62:d9:75:e9:89:2f:c7:5b:7e:75:55:9d:76:48:
7b:8b:3a:3d:0a:19:88:30:dc:10:2e:cf:55:9c:67:af:fb:85:
94:05:b2:e6:aa:e2:ef:0f:4a:45:60:15:ec:93:f5:35:ba:ad:
b9:f5:5a:eb:7c:01:f7:be:73:20:48:bb:82:a8:86:0a:25:39:
1d:d4:b9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-ams.rpki-client.org