Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA6D102A3D7711EDB711D198F1222468.roa
File: AA6D102A3D7711EDB711D198F1222468.roa (raw, json)
Hash identifier: grHp+fIsK0cTHwLLc+9jQiTTqJkqr8ZQywBAfm6KtMY=
Subject key identifier: B4:57:41:89:E2:48:85:62:54:F2:22:5C:B2:E1:98:B0:07:27:8F:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 191C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA6D102A3D7711EDB711D198F1222468.roa
Signing time: Mon 26 Sep 2022 08:46:09 +0000
ROA not before: Mon 26 Sep 2022 08:46:05 +0000
ROA not after: Fri 30 Dec 2022 08:46:05 +0000
asID: 35916
IP address blocks: 154.94.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6428 (0x191c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 26 08:46:05 2022 GMT
Not After : Dec 30 08:46:05 2022 GMT
Subject: CN=633166d1-b8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:ad:33:91:0c:63:28:c9:03:e0:09:62:fc:
b8:45:6e:f4:1c:9d:bf:0f:d6:13:b7:f5:b5:31:6d:
4c:7b:d0:e2:bd:50:77:45:3c:ac:42:73:bf:23:7b:
3c:85:b7:0f:e1:fe:c9:ad:02:47:9e:6e:ee:0e:18:
a2:48:43:c6:f5:20:7d:b8:58:9e:1f:e4:06:25:32:
ab:9f:cf:9e:e9:bd:08:1a:46:93:86:e9:90:51:79:
e9:4c:26:a0:53:83:05:63:de:40:29:c7:60:82:a5:
dc:8f:b6:40:8a:a3:3f:e1:6b:d4:e9:62:c8:f7:3f:
25:c2:a1:ae:1b:dc:7f:06:38:c0:61:b0:08:11:22:
6d:be:27:12:57:37:ca:0a:05:3c:98:54:27:ea:ab:
14:05:76:ed:37:93:20:b2:dc:5b:91:04:46:0a:13:
20:3e:1f:3b:b3:65:a2:fb:25:f3:ed:60:0c:2c:d5:
2d:ef:32:eb:d8:25:6e:f3:bb:8f:e5:e8:b9:5a:be:
20:b2:03:01:12:d4:51:44:d2:d8:33:34:e8:11:90:
f7:84:d0:f5:8b:dc:d8:69:da:ae:c8:20:67:1c:ab:
31:74:0a:cb:25:e0:2c:85:c0:61:99:2f:fb:f4:9f:
8e:8c:08:29:1a:59:28:51:79:dc:54:3c:7b:13:88:
b2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:57:41:89:E2:48:85:62:54:F2:22:5C:B2:E1:98:B0:07:27:8F:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA6D102A3D7711EDB711D198F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.16.0/22
Signature Algorithm: sha256WithRSAEncryption
73:c7:cb:89:1d:28:85:76:62:42:3b:94:1f:47:11:0f:8e:52:
bf:86:ff:52:9c:8c:1c:60:99:87:c4:59:16:37:9a:fb:ac:b8:
89:4a:2c:9e:7b:9c:f5:33:bd:7d:ed:04:55:a6:4a:3b:a8:24:
e9:49:a0:99:a3:28:5f:42:4f:97:e9:ce:c2:7b:be:95:97:26:
f6:0b:a1:86:3c:ac:09:c7:40:3e:93:a8:28:80:a8:48:e4:76:
3d:33:2d:0c:91:bd:67:c4:8a:62:c3:24:11:02:38:ad:a7:f5:
41:28:69:3f:68:34:8c:0f:a5:4d:2d:b5:31:03:2c:81:b6:80:
55:00:de:cd:48:7f:ff:3d:fd:a7:00:c4:4f:dd:1d:a0:0d:a5:
18:5b:71:14:75:70:a3:f0:03:62:60:dc:04:46:56:77:27:68:
bf:ad:a9:38:02:4d:e1:7f:6d:bd:c7:da:56:15:91:61:a3:a4:
e0:13:3b:f5:9a:4c:a1:2b:d4:ae:4b:6c:0a:70:0f:d8:32:c8:
3e:b1:a1:8e:16:81:0e:aa:18:c2:22:2b:c2:3e:b7:9a:ed:ab:
a8:dd:23:44:2b:b0:8e:0e:7d:f7:b6:c7:b1:13:d6:44:46:04:
6a:06:48:d7:19:19:5a:ab:ad:17:0e:86:38:47:49:8c:8c:31:
f5:8e:fe:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-fra.rpki-client.org