Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0E6D7BCE57F11EBA32B732DF8AEA228.roa
File: A0E6D7BCE57F11EBA32B732DF8AEA228.roa (raw, json)
Hash identifier: WlwclKvVyBLt/iqvzrsAp11wxGyHeEP8vglbWmV9TcA=
Subject key identifier: 04:30:8A:80:3A:15:3B:71:C7:75:DD:C5:5F:57:A9:34:13:0B:EC:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 07E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0E6D7BCE57F11EBA32B732DF8AEA228.roa
Signing time: Thu 15 Jul 2021 15:16:29 +0000
ROA not before: Thu 15 Jul 2021 15:16:25 +0000
ROA not after: Sat 09 Jul 2022 15:16:25 +0000
asID: 397630
IP address blocks: 154.202.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2022 (0x7e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:16:25 2021 GMT
Not After : Jul 9 15:16:25 2022 GMT
Subject: CN=60f0514d-7283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:aa:af:b9:47:21:67:5e:f6:d6:c7:16:4e:
ad:2c:e0:d2:53:8f:c6:0c:d4:84:cf:12:73:ce:ac:
1e:84:ca:bd:66:12:87:1e:51:32:59:d6:ef:90:7e:
9e:c7:1b:00:e4:dd:26:f3:0b:4d:b1:ae:87:8d:2e:
bd:80:f4:a3:35:d9:16:0c:6b:80:d9:1c:16:42:38:
6f:5d:8c:fe:9b:58:94:97:eb:82:c8:19:f4:c4:03:
54:00:ae:e9:b4:7d:56:9b:b5:65:dc:75:21:25:79:
db:c4:66:0c:2a:ba:9e:25:f2:cb:3b:2b:e5:dc:7e:
3f:ca:ac:47:6d:fd:30:eb:99:1e:be:84:7b:dd:80:
b9:3e:f0:62:92:38:ff:02:02:d3:f1:90:7e:e5:7d:
ae:6e:5d:fc:78:04:7a:c0:4a:58:63:31:49:72:d5:
e3:e9:df:52:e7:3b:c9:7f:d0:00:cc:88:b3:cd:9a:
a6:cc:ca:78:9d:43:c9:3e:12:e4:29:67:5d:a0:cb:
d5:cf:64:2d:91:98:ea:19:d1:fa:9d:66:08:ec:8a:
6d:a7:25:1c:c5:a5:67:77:93:0c:8d:09:ce:29:85:
2d:ee:53:0c:ef:c7:38:ed:83:04:78:20:f0:b3:71:
81:67:45:cf:6c:f6:25:49:3f:15:fc:60:90:50:3c:
08:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:30:8A:80:3A:15:3B:71:C7:75:DD:C5:5F:57:A9:34:13:0B:EC:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0E6D7BCE57F11EBA32B732DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.115.0/24
Signature Algorithm: sha256WithRSAEncryption
23:fa:0a:cf:39:be:76:2f:7a:8c:7e:aa:6b:3e:a1:e5:2b:6b:
80:6f:88:64:92:14:3d:02:72:16:60:1f:83:30:a4:2f:ef:af:
31:5b:f2:03:4b:53:67:60:f8:f8:21:0c:d0:79:46:b5:e2:15:
e1:7c:40:94:fd:f7:29:47:67:56:57:24:68:5b:64:6a:c9:89:
2c:cc:3c:90:49:93:c6:98:13:bb:7e:7f:05:0c:63:9e:07:89:
a2:a6:f0:3e:d4:7b:62:d0:5f:ac:1e:2a:39:48:ab:ac:07:14:
26:87:1b:70:45:6d:cc:91:42:93:0a:81:68:95:3c:b9:b8:e9:
2d:82:50:a7:35:25:0a:4f:b9:f3:ed:af:2e:ba:7d:78:23:b9:
f1:c5:e7:eb:0f:ba:7c:b2:3a:6f:c8:2f:49:6e:c5:9d:b4:02:
45:4c:2b:86:b7:e2:48:2e:99:ea:c5:72:48:39:a7:72:01:8f:
ee:4c:11:6b:78:83:0d:f4:15:e5:f0:b4:d5:bd:61:af:1a:49:
c7:36:cc:94:75:e2:0d:31:7f:81:6a:68:e8:74:e0:a3:e0:68:
24:02:79:dc:0f:4c:53:9b:30:64:18:97:4a:3b:1c:2d:c7:19:
31:7d:6c:2c:dd:7a:a8:97:38:4a:66:49:e1:63:6d:02:22:a6:
c8:32:53:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-fra.rpki-client.org