Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95C275E8391D11ECBEC2096ED8A014CE.roa
File: 95C275E8391D11ECBEC2096ED8A014CE.roa (raw, json)
Hash identifier: WUK8VZieE6GHcWWCem0OqIVl93oORc5w0dGe6iYBcO0=
Subject key identifier: A5:4C:B1:37:EF:54:62:EF:9A:43:59:6A:13:C4:96:53:CA:09:D1:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0CC2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95C275E8391D11ECBEC2096ED8A014CE.roa
Signing time: Sat 30 Oct 2021 01:06:17 +0000
ROA not before: Sat 30 Oct 2021 01:06:14 +0000
ROA not after: Sun 30 Oct 2022 01:06:14 +0000
asID: 139879
IP address blocks: 154.203.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3266 (0xcc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 30 01:06:14 2021 GMT
Not After : Oct 30 01:06:14 2022 GMT
Subject: CN=617c9a89-5878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:ce:75:49:26:9d:03:be:31:59:94:a6:b5:
0f:b3:ff:8f:a0:9f:7c:97:a0:c5:56:70:44:df:4d:
a4:e9:79:99:c3:de:75:d0:43:c3:77:9d:6e:66:3e:
2d:da:9b:8e:e2:70:c9:82:1c:ad:19:20:e8:83:54:
0e:09:66:41:a8:2b:e8:88:11:19:56:77:79:05:36:
e6:8a:5c:b8:de:42:f4:12:b7:0e:82:55:09:da:87:
f9:ed:e9:7d:bc:79:e1:4b:75:f8:ed:16:2f:de:65:
7d:d8:b4:3b:32:12:2c:0f:34:62:b0:66:24:00:9b:
bc:6f:e4:8d:9c:3b:05:0b:8d:b1:13:9a:b4:85:7f:
b4:b8:90:ae:4e:ad:51:a6:81:07:ed:83:75:15:31:
45:fc:de:74:ed:b9:c9:0d:05:f0:ca:02:32:21:41:
70:52:9b:f3:a6:63:00:5f:92:fd:01:e3:b5:ff:c3:
97:74:b7:f8:0d:e1:3a:41:bf:2e:25:14:59:01:da:
f8:3b:cd:77:c8:e3:5b:26:3e:94:90:ce:e2:f4:4b:
8a:5f:04:d2:fe:71:46:ee:c1:9f:75:2d:7c:c8:39:
8c:f6:9d:17:57:0f:6f:17:b5:cb:9d:ec:5e:70:f1:
82:ea:18:59:3a:49:f6:a8:88:a6:41:ac:13:12:54:
42:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4C:B1:37:EF:54:62:EF:9A:43:59:6A:13:C4:96:53:CA:09:D1:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95C275E8391D11ECBEC2096ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.64.0/18
Signature Algorithm: sha256WithRSAEncryption
c8:19:75:81:97:18:9d:c8:e7:0a:38:df:cf:21:23:60:c5:e3:
49:44:93:d8:61:b9:c0:3d:16:14:38:b6:40:fb:bc:d3:03:c2:
60:58:71:23:ac:63:8f:b4:f9:0e:be:10:7a:28:d3:2a:ad:d8:
ee:ca:41:25:47:32:08:07:e9:cd:a5:22:ff:a6:17:60:ce:83:
47:72:de:31:84:86:5e:9a:5d:de:25:53:d3:c9:99:13:be:68:
02:dd:6d:ef:5d:8c:f2:0e:16:de:32:5c:2b:ad:85:96:79:fd:
5e:f4:ad:da:21:9b:e6:46:1d:0b:50:a2:77:e2:90:02:a6:59:
ca:85:62:ec:92:4f:1f:7b:47:4a:37:62:0a:67:00:12:b0:f9:
3a:25:6b:ba:75:68:61:24:71:16:d2:0d:e1:3a:a4:15:52:20:
f9:30:66:b8:1f:e5:3f:f4:c0:0c:79:e8:41:37:7e:c7:1d:1a:
df:c3:95:b4:07:c4:14:67:20:17:76:fb:bd:5e:92:ac:1e:54:
e6:f2:35:7a:7c:b8:32:ef:e6:c8:e4:55:2f:f8:97:81:38:37:
be:84:48:5d:bf:d5:ff:38:47:ca:16:81:53:b7:59:5e:8f:43:
cc:45:e0:28:f8:3a:cb:ed:00:d5:b7:ff:3d:ca:d4:7a:8d:85:
f9:58:d2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-ams.rpki-client.org