Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/982BF7100E5011ED8C1788A6F1222468.roa
File: 982BF7100E5011ED8C1788A6F1222468.roa (raw, json)
Hash identifier: 7sGIOGDmBoN4eZZJG5AleLeSI/3SvNXqwtV0ZEubxS4=
Subject key identifier: 6D:F5:84:BE:A1:E4:7C:FF:F6:7A:9B:AD:16:FE:93:F2:E2:F6:BD:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 17A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/982BF7100E5011ED8C1788A6F1222468.roa
Signing time: Thu 28 Jul 2022 08:38:03 +0000
ROA not before: Thu 28 Jul 2022 08:38:00 +0000
ROA not after: Mon 15 May 2023 08:38:00 +0000
asID: 397630
IP address blocks: 154.201.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6052 (0x17a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 28 08:38:00 2022 GMT
Not After : May 15 08:38:00 2023 GMT
Subject: CN=62e24aeb-b505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c7:af:a5:de:06:99:fb:0b:1a:08:b7:0d:e8:
9b:ef:99:56:8f:d5:de:9b:59:bb:f1:b3:b9:ad:54:
21:20:8b:a6:9d:29:19:cf:6f:3f:4f:8d:97:0b:25:
5a:74:70:2a:11:87:7e:e8:37:66:d3:e2:e9:01:55:
8b:0c:ec:cb:e6:c9:6f:9b:45:f3:9b:3a:49:ae:d3:
60:27:f8:1f:16:c1:ab:db:f5:41:da:04:e9:dc:dd:
46:60:da:be:7e:c7:c2:07:ea:26:01:95:9c:3c:36:
7c:69:ee:53:dc:71:c8:1f:40:f8:67:af:b0:c3:8b:
98:96:59:87:30:59:f0:bb:37:00:68:a8:92:92:64:
1a:a0:b1:1d:a3:0b:95:bc:1c:98:5f:d0:5c:e0:65:
d1:9b:a0:a7:49:be:3a:61:5e:81:ca:0c:39:96:83:
a4:4e:17:9f:1d:2c:7d:ba:7c:d2:11:72:eb:9f:52:
93:5a:5e:c2:87:f2:8f:48:99:24:c2:c1:48:d5:5e:
ab:6f:12:be:c5:dc:29:1f:48:80:05:61:86:ec:c1:
23:71:cc:47:35:7c:02:1d:c4:f9:aa:5d:45:3a:51:
f0:35:f6:a4:d2:92:15:2b:98:82:66:35:d2:0b:61:
3c:ea:ed:dd:fd:e2:93:c5:57:f5:16:cb:be:57:bc:
7d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F5:84:BE:A1:E4:7C:FF:F6:7A:9B:AD:16:FE:93:F2:E2:F6:BD:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/982BF7100E5011ED8C1788A6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.38.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:91:18:1b:79:b2:9d:c6:38:c8:1d:a0:52:d6:2e:10:7b:1e:
af:35:12:3b:7c:c6:65:67:3d:df:bc:ea:83:79:82:6c:d9:7b:
cd:63:bc:39:de:35:cb:e3:bc:d9:36:15:96:cc:c3:27:aa:7f:
2a:be:31:47:16:b5:82:4b:76:f9:49:0a:fb:b2:6c:21:ab:1e:
c7:e5:ef:b5:9d:af:c7:72:b4:46:7e:88:4f:02:99:26:e0:fd:
a6:ed:2a:9f:d4:90:eb:0a:a4:12:29:3c:f9:36:4f:fe:c9:15:
54:b6:0a:b2:cf:af:e3:69:af:5d:12:96:3f:67:35:85:c3:ea:
96:ca:96:d0:2f:0e:66:8e:26:c4:ed:81:4b:46:0c:71:78:16:
97:12:d7:6b:04:46:38:70:51:68:60:22:a8:c1:02:73:3c:5f:
08:c8:63:43:05:08:d8:c9:01:79:cd:68:77:a0:43:70:64:8b:
19:da:c2:40:b9:d6:9d:db:8f:dd:2d:4b:66:bc:3a:c6:38:c7:
09:0e:c2:77:27:64:49:1c:07:71:4b:09:2b:bf:6d:0f:7e:4d:
b4:71:b3:05:75:f4:8a:cb:fd:df:31:c3:cb:09:92:e6:48:b5:
da:ec:07:8c:79:90:c7:0c:59:d9:2c:22:41:fa:e8:6c:36:c7:
25:c5:e9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-ams.rpki-client.org