Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E7C2C42CFA411ECB1CB4EA0F1222468.roa
File: 9E7C2C42CFA411ECB1CB4EA0F1222468.roa (raw, json)
Hash identifier: LqyNth6wMuHe+VIeLdK+Q4JK08YkRcRN9rONKJJ/Zqc=
Subject key identifier: 82:96:F9:6A:83:19:56:DE:99:BD:3F:D9:90:B8:E3:63:A4:18:7D:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1627
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E7C2C42CFA411ECB1CB4EA0F1222468.roa
Signing time: Mon 09 May 2022 14:30:48 +0000
ROA not before: Mon 09 May 2022 14:30:45 +0000
ROA not after: Wed 31 May 2023 14:30:45 +0000
asID: 136970
IP address blocks: 154.213.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5671 (0x1627)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 14:30:45 2022 GMT
Not After : May 31 14:30:45 2023 GMT
Subject: CN=62792598-e60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ea:89:02:b0:d3:f4:4c:26:f3:8d:6c:f3:28:
c5:c0:8d:92:b6:3f:d9:5c:4f:93:c3:10:93:41:08:
3c:b0:95:d1:dc:2f:5b:f3:22:b7:93:91:9b:d3:a1:
a6:e3:dc:28:84:07:8f:2f:53:67:8b:9d:a5:c0:df:
c5:fc:7d:4d:ef:2d:a1:fd:15:f5:08:d5:9c:82:14:
7b:3b:09:69:66:b2:51:58:cf:41:c7:22:2b:c6:84:
6d:df:66:c5:09:3e:cd:f1:4b:76:c4:1f:b8:39:f6:
de:fc:ae:66:36:2e:26:48:57:66:b6:74:28:b3:fa:
79:c6:90:4e:7c:e0:63:be:7f:74:a1:de:4d:63:42:
da:49:59:a8:51:9d:41:f7:7d:67:e0:de:c6:02:cf:
d8:f1:78:8f:01:37:1e:62:5b:e6:5e:e1:21:7d:e7:
70:5c:05:d8:18:63:6d:93:e3:b7:41:1f:b4:bb:ec:
36:a9:ee:41:50:3c:e6:29:19:75:c8:f0:8f:04:7a:
16:93:ae:5a:76:ae:0a:d4:7e:4b:9c:ad:4d:64:90:
61:87:f4:e3:fd:a3:c1:fc:c9:b5:58:e0:b1:cc:9f:
08:ac:66:fd:d3:fe:e7:61:84:b0:2f:c9:93:24:99:
56:3a:97:25:f7:34:a9:cb:9c:79:2d:3b:31:03:b2:
aa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:96:F9:6A:83:19:56:DE:99:BD:3F:D9:90:B8:E3:63:A4:18:7D:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E7C2C42CFA411ECB1CB4EA0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.26.0/24
Signature Algorithm: sha256WithRSAEncryption
92:4d:ac:30:11:9e:67:f1:a5:94:87:02:fb:a0:69:6c:07:3b:
00:ba:bb:4a:44:60:aa:e5:f9:df:4e:4d:2e:33:0c:ee:ce:61:
8e:b9:10:e2:ca:7a:90:aa:c9:3f:87:f3:b1:54:39:75:91:72:
d2:3b:2b:8e:af:35:3d:bf:5e:bc:20:9c:f9:07:45:b6:60:99:
8c:29:4b:77:d0:e0:54:ab:20:81:fd:cc:80:0b:d0:50:95:ec:
b9:31:56:82:97:79:64:d2:9d:8f:c2:ef:ef:07:55:68:29:b5:
40:3c:3a:40:b2:07:6f:7e:39:fb:35:61:50:e6:7f:fe:4b:28:
a5:a8:89:21:24:93:64:b4:17:c2:05:f6:9a:46:29:f1:77:60:
9b:07:69:ac:2e:60:5e:d9:8b:2e:73:8e:4b:59:55:8c:39:a5:
2c:c5:11:00:ad:7f:36:c3:aa:23:3d:45:6a:d2:51:af:0f:32:
07:7c:27:6c:41:21:88:08:65:8e:19:5b:72:4f:05:15:9c:08:
79:f6:57:f9:d3:a7:a9:2d:1f:5d:d0:44:25:a0:9f:ea:72:67:
18:a5:ea:7f:fb:52:f5:0e:ec:3f:06:b2:15:ca:cb:b6:0a:d5:
7a:42:fc:8e:31:77:e0:22:aa:43:c3:b8:4c:85:ec:57:22:7e:
2f:11:cf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-fra.rpki-client.org