Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9F712BAC47A11ECB274D881F1222468.roa
File: A9F712BAC47A11ECB274D881F1222468.roa (raw, json)
Hash identifier: s9j4DCH5YobOPFB1bZLGS9kg2yGVQwu9P+t/0sTqhsI=
Subject key identifier: 9C:F5:2D:19:58:F6:03:6A:65:59:42:47:B9:08:09:59:9B:01:F0:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1602
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9F712BAC47A11ECB274D881F1222468.roa
Signing time: Mon 25 Apr 2022 09:32:46 +0000
ROA not before: Mon 25 Apr 2022 09:32:42 +0000
ROA not after: Sun 30 Apr 2023 09:32:42 +0000
asID: 135097
IP address blocks: 154.205.46.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5634 (0x1602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 09:32:42 2022 GMT
Not After : Apr 30 09:32:42 2023 GMT
Subject: CN=62666abe-7325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:10:a8:d7:e9:c3:ab:7e:a0:e2:f6:cc:60:
13:2f:ba:ec:2c:a7:9b:8b:60:18:71:30:87:b5:64:
9f:90:d4:0f:66:49:95:b6:82:5a:6a:29:ba:fb:da:
1c:7d:c5:0f:4d:cf:d4:05:ae:89:65:8b:74:d8:5b:
e1:ea:6c:c6:22:45:c9:1e:bd:0b:65:5f:90:48:2c:
d9:2a:ab:fe:8b:58:ee:2f:e3:6c:ec:f0:14:47:e5:
81:ca:59:0f:bf:e4:74:9b:8f:8a:5e:95:04:f6:02:
72:71:bc:4d:da:59:41:70:04:ed:a7:96:35:ee:44:
b2:a0:b2:1f:4c:4f:fd:46:09:fc:f3:5b:ae:fe:e8:
41:83:68:2f:f9:aa:c8:f4:c9:94:dd:10:05:db:11:
b0:0d:f4:30:74:5c:fe:27:cb:86:5e:72:95:9c:ee:
4f:d3:26:ae:fa:00:96:a0:71:33:ee:93:50:79:8d:
86:bb:07:af:b5:88:1e:e0:2a:63:f8:89:de:e3:a2:
23:4a:49:6e:55:b3:5c:ae:ab:4c:5c:97:30:be:18:
fe:2d:89:25:07:e4:55:33:3e:dd:f9:ba:4a:e3:07:
f6:cc:0a:56:2e:58:56:6a:b8:6a:2d:c3:4c:7d:67:
dc:37:dd:5d:9e:a0:24:c2:b6:3b:5b:ae:9a:1a:20:
ff:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F5:2D:19:58:F6:03:6A:65:59:42:47:B9:08:09:59:9B:01:F0:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9F712BAC47A11ECB274D881F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.46.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:85:15:8e:ed:49:a9:e4:47:76:e8:e3:49:46:29:ec:79:d3:
39:f8:78:07:c0:6b:61:0c:e7:d5:5e:20:74:fe:92:2f:7f:70:
e4:2a:ff:ef:e1:4d:ea:01:f1:67:14:5b:12:71:a7:a1:16:8b:
8c:fc:a0:91:f9:e0:ab:d2:bb:4c:34:67:c0:ba:44:5b:ad:eb:
f8:54:db:4e:12:9f:29:db:7a:ec:e0:9d:88:9e:03:db:a6:25:
90:b2:b7:99:ff:6b:f0:bc:29:f0:ae:a5:89:d0:d1:46:b4:9a:
73:eb:18:d0:e8:f4:0e:e9:ea:76:5d:62:34:ae:d3:35:b5:1b:
63:bd:ac:84:f5:2d:19:ab:58:5d:a9:87:47:57:29:04:ed:06:
28:a7:ba:c1:c2:21:d9:98:ba:e1:c9:fe:b5:48:ca:22:1e:33:
68:e4:8d:05:4b:92:06:8a:12:8b:91:fe:8a:20:d0:bb:df:f1:
2a:7f:46:b1:d7:d1:a1:f3:f2:2d:25:1b:e3:d9:82:7a:fd:5e:
34:c1:14:6a:a1:f9:11:e8:04:c2:f4:19:e0:b8:08:95:9e:d0:
e7:0e:8d:61:03:ff:82:db:cd:ef:52:54:73:b8:89:f1:31:4e:
80:23:09:5b:1d:4f:3e:e5:78:b9:fe:17:2e:81:b0:bb:5a:df:
82:5c:70:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-ams.rpki-client.org