Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6224384E57E11EB82ABBA2BF8AEA228.roa
File: A6224384E57E11EB82ABBA2BF8AEA228.roa (raw, json)
Hash identifier: kozQQ5uI5imCEt3dhuCCC4uLEPkyARKBqZ68yTh2Lm8=
Subject key identifier: A2:E9:EC:76:5C:36:75:DD:8B:D8:20:F1:8D:A7:A5:19:C1:62:4C:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 07CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6224384E57E11EB82ABBA2BF8AEA228.roa
Signing time: Thu 15 Jul 2021 15:09:28 +0000
ROA not before: Thu 15 Jul 2021 15:09:25 +0000
ROA not after: Sat 09 Jul 2022 15:09:25 +0000
asID: 397630
IP address blocks: 154.202.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1994 (0x7ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:09:25 2021 GMT
Not After : Jul 9 15:09:25 2022 GMT
Subject: CN=60f04fa8-c18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:aa:8d:98:ea:de:c6:f9:c2:74:43:f7:19:
fe:47:c1:d6:2e:a7:bb:e6:08:b8:8f:e0:b6:7c:bd:
7a:14:74:6d:d7:8f:1c:6b:59:98:68:5a:c4:1d:a7:
5f:da:de:e6:47:53:54:7d:e8:57:b2:34:65:a3:29:
f1:33:4a:be:4c:c7:45:74:a7:d1:ab:62:b4:18:3a:
98:2f:29:b9:eb:1a:03:d8:f4:33:c1:9d:fc:99:69:
4d:27:f6:ef:a0:ce:b9:f9:79:41:ba:8d:6c:6a:c1:
4e:01:92:93:36:b7:03:bf:94:35:80:c5:dc:3a:de:
94:41:4d:fa:89:0f:b7:28:08:75:66:6f:33:8e:1d:
02:db:c3:ad:9d:03:ea:48:77:e4:72:d8:1d:6b:07:
91:86:87:71:83:53:54:ca:a2:79:33:ed:44:62:11:
1c:06:6b:e7:f2:a0:e3:35:ee:71:28:32:aa:78:2c:
30:dd:a2:a0:32:6e:a1:98:cc:fe:39:0b:8d:92:b3:
cf:ee:15:76:f9:13:e1:b7:3c:35:90:f9:5e:d6:c9:
e0:7a:4a:a2:eb:1c:79:e6:31:d0:74:49:cf:05:9d:
8b:45:cc:54:14:18:b1:7c:87:68:15:b3:8c:10:79:
16:b5:53:33:4b:e2:d3:ad:90:ec:51:af:8d:39:19:
43:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E9:EC:76:5C:36:75:DD:8B:D8:20:F1:8D:A7:A5:19:C1:62:4C:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6224384E57E11EB82ABBA2BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.101.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:26:5b:9e:7e:6d:96:55:58:d3:c3:83:07:a0:0b:0a:e1:b2:
0b:10:c4:f8:ba:7f:a9:ff:5f:52:cf:60:fd:a7:e7:db:50:35:
e0:65:e5:ef:3a:75:00:c3:b0:60:fc:3f:9d:db:6d:a8:fb:95:
92:f6:1a:a4:e7:e1:ea:19:4e:a5:de:dd:1d:94:1e:f1:28:c5:
1c:e0:c9:bf:b1:5b:2f:94:4f:47:09:52:6d:3b:ee:2c:4f:e8:
26:35:f0:9b:ff:4c:be:89:01:a6:24:f3:b9:b8:31:c4:7a:6a:
29:44:38:92:b3:b6:51:cf:4d:86:be:59:e8:a6:fc:f9:51:80:
fb:35:00:ec:64:28:23:20:b3:36:6b:74:07:d9:85:f8:cf:8b:
53:62:a4:8c:0c:d8:85:2c:f2:44:b8:c4:91:c0:8e:28:16:af:
6b:ad:71:46:59:c4:71:4d:cb:4c:0c:a6:96:1a:dd:31:ac:13:
a4:af:12:c5:4d:7b:37:1a:4e:20:d8:95:97:59:64:6b:fe:ad:
03:b9:85:9e:b0:ab:4d:90:09:62:73:6e:9d:23:e7:0d:a6:6d:
8f:5a:93:97:82:11:03:f6:9d:3c:a3:ff:c2:d0:cc:df:f3:5e:
ec:1b:b9:2d:22:68:6e:0b:fc:c5:91:f9:54:8b:e2:ea:40:d0:
5e:19:2b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-ams.rpki-client.org