Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9859E34A74DC11ECBC203EAC5A40D577.roa
File: 9859E34A74DC11ECBC203EAC5A40D577.roa (raw, json)
Hash identifier: VLl97gU01h2kdREysRLvG0/Fn2XRRtMgmx3iu0zYgmc=
Subject key identifier: 93:72:9C:2A:34:1A:82:C1:8A:88:8A:10:7E:94:A5:65:B9:EB:E8:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1490
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9859E34A74DC11ECBC203EAC5A40D577.roa
Signing time: Fri 14 Jan 2022 01:52:14 +0000
ROA not before: Fri 14 Jan 2022 01:52:10 +0000
ROA not after: Tue 31 Jan 2023 01:52:10 +0000
asID: 139646
IP address blocks: 154.216.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5264 (0x1490)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 14 01:52:10 2022 GMT
Not After : Jan 31 01:52:10 2023 GMT
Subject: CN=61e0d74e-6f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:27:08:8d:6d:ff:44:63:e6:10:d5:a9:f2:
7e:0d:01:33:3f:11:42:27:7c:05:52:18:ba:82:68:
0e:e5:5d:5c:ee:77:bd:34:8d:f3:5d:69:79:85:17:
c8:c0:26:c5:a2:42:94:1d:25:e1:22:62:9e:ee:29:
f7:54:61:c0:df:9d:75:fe:64:76:66:65:6f:05:79:
f6:b0:53:e6:ea:80:c4:30:ea:0f:99:d8:ab:f3:05:
15:ca:d8:a1:8d:ed:28:ad:6e:f3:ce:40:c8:f5:86:
4a:85:c4:45:2c:36:fa:7f:ae:d9:fa:70:56:55:54:
2d:80:93:47:f1:02:cd:8e:43:e2:fd:f2:08:fd:d7:
a0:3c:c8:8b:af:86:34:d8:ef:07:fa:e9:ea:78:b7:
ae:a5:8d:16:54:8d:2e:97:4c:20:f9:34:fa:b2:26:
58:a7:68:37:b9:63:fc:13:86:98:2c:26:94:62:9b:
ee:e6:5b:e5:4b:63:e6:b4:70:49:46:85:26:ed:7e:
06:48:e7:1d:f9:fb:9a:d5:c7:8f:20:eb:80:28:a0:
58:25:10:aa:97:eb:dd:41:46:cd:9b:95:c7:4a:c9:
ba:50:53:92:3d:45:30:55:57:f8:25:e0:0d:47:b6:
05:6c:b3:5c:05:63:6b:77:49:0c:af:c8:0a:86:7e:
4e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:72:9C:2A:34:1A:82:C1:8A:88:8A:10:7E:94:A5:65:B9:EB:E8:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9859E34A74DC11ECBC203EAC5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.128.0/18
Signature Algorithm: sha256WithRSAEncryption
d3:a0:e7:ba:92:56:6d:d1:30:ff:71:f0:71:13:ef:53:5c:d4:
18:95:4c:13:09:a9:c7:e9:ec:ee:4d:6b:5d:65:82:d7:29:4d:
0d:3a:b4:8c:60:59:18:4c:33:a8:9b:51:b5:5b:d1:08:3c:02:
96:ca:f0:07:99:25:ed:14:ac:03:98:4e:77:a2:db:94:45:98:
53:f2:bd:f9:93:29:cf:cb:2c:b4:6c:63:7d:80:5d:a6:d7:93:
c0:14:7e:a6:47:28:0d:5c:99:37:85:a4:6b:ee:9a:50:67:6d:
26:23:6d:6d:74:b6:10:7e:ef:21:02:d8:66:f9:f2:7e:8f:c7:
d5:41:96:bb:71:b4:61:bb:54:8e:41:af:a9:f9:cc:2b:f3:3c:
de:06:11:04:4c:0a:00:77:74:0d:21:69:6d:72:f2:d7:b1:97:
65:4c:bc:0d:56:34:28:f0:2a:20:f8:f2:7e:06:fa:ed:4a:78:
4e:48:3a:51:65:e7:b7:ed:53:85:31:44:ce:0e:59:be:11:68:
92:3c:5b:6f:9f:79:b6:ea:9d:90:b9:8a:7e:82:0f:09:f5:ba:
13:96:c8:da:c2:51:2f:35:eb:83:4d:0a:25:40:c1:ab:73:3c:
d0:3f:3d:dd:a6:66:bb:a2:cd:2e:56:45:0c:97:f7:ec:d9:29:
7b:d3:f4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-fra.rpki-client.org