Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5C0CA3EF9B711EB998BD852D8A014CE.roa
File: B5C0CA3EF9B711EB998BD852D8A014CE.roa (raw, json)
Hash identifier: 2k9PY08zaw4W349XGje8bKgA3+D0eqOv3oAnwWnQ9Io=
Subject key identifier: 9B:36:B8:7A:11:89:CD:C0:B9:96:3B:ED:D5:59:A5:F3:7E:1A:7A:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 089A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5C0CA3EF9B711EB998BD852D8A014CE.roa
Signing time: Tue 10 Aug 2021 08:48:58 +0000
ROA not before: Tue 10 Aug 2021 08:48:52 +0000
ROA not after: Mon 10 Oct 2022 08:48:52 +0000
asID: 398993
IP address blocks: 154.81.168.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2202 (0x89a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 10 08:48:52 2021 GMT
Not After : Oct 10 08:48:52 2022 GMT
Subject: CN=61123d7a-7de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:82:d4:a7:4c:39:16:f8:6d:b6:84:52:cc:
aa:6c:df:bf:bd:94:32:7d:ae:6b:e7:f4:bc:17:32:
95:87:77:59:13:17:97:92:42:77:33:5e:7a:ea:a9:
4d:c2:41:48:1b:27:07:46:ed:f9:01:21:23:0b:09:
da:0b:39:12:b4:fe:75:fa:1d:53:02:42:99:1b:d2:
55:62:8b:f0:2c:f4:b7:ca:7a:2f:53:2f:60:47:92:
1a:38:82:e2:8e:fa:00:92:51:27:68:a5:79:45:5f:
d2:50:86:e7:b3:ea:14:0b:b4:cb:e0:43:3e:ed:ae:
c4:6f:4c:d7:15:b7:0b:a1:e8:ed:c9:f4:cd:f1:4a:
30:d1:e2:db:fb:e0:30:f1:30:ca:66:cd:c8:68:f1:
99:96:c7:f1:88:49:33:bd:05:1f:be:21:32:93:ce:
88:49:aa:6f:a3:53:5c:01:da:99:33:19:61:0a:30:
e8:92:17:b6:54:4b:d1:2b:ea:03:d1:03:f9:96:98:
29:7c:42:45:a6:2f:56:cf:d7:9b:6f:57:43:a8:4b:
c8:16:f1:9b:43:17:b8:67:cb:99:11:73:10:99:19:
9c:d6:e3:5b:46:7e:fc:b4:3f:4a:00:a4:80:9e:22:
1b:f4:38:df:a8:9c:6e:79:3f:05:d3:f4:30:33:af:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:36:B8:7A:11:89:CD:C0:B9:96:3B:ED:D5:59:A5:F3:7E:1A:7A:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5C0CA3EF9B711EB998BD852D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.168.0/21
Signature Algorithm: sha256WithRSAEncryption
74:fe:bf:4b:95:d0:d0:08:6a:28:e7:1d:b4:3d:d1:c0:1b:a3:
29:2c:4e:95:c0:7c:c2:7b:13:01:72:99:3f:c9:66:76:93:03:
02:cb:76:f1:37:5c:03:c0:42:51:fa:da:06:23:8c:52:d0:a9:
67:34:c4:4a:b9:0c:a5:d5:82:27:8c:c5:fe:8f:fe:ca:77:cc:
96:28:cd:7f:f4:31:e3:80:1e:08:f7:dc:1a:ea:ea:9f:0d:63:
8c:aa:65:f4:43:c4:98:15:04:2d:34:d0:2e:04:02:f4:b4:aa:
01:81:d2:bd:8d:a7:6b:a5:9d:aa:73:6f:87:be:88:16:27:e6:
f5:39:9c:0f:bc:28:3f:1e:56:ac:71:49:b7:a6:99:c0:cc:1d:
37:72:14:35:c8:54:a5:5d:b1:9f:85:54:07:5d:2a:2e:44:46:
4a:24:49:18:b9:be:98:5f:d8:93:84:f5:5e:1d:6c:a0:96:41:
47:73:68:4a:b9:bb:53:90:76:08:4f:a4:02:d9:45:60:7e:0a:
bb:52:de:c5:57:e3:62:66:91:ca:63:ad:03:17:1c:fa:b6:e0:
ed:33:2e:9c:76:ab:52:5f:73:b7:8e:ae:f6:02:8c:39:68:3d:
51:79:e6:90:48:c0:71:79:67:1a:b4:89:e9:07:f5:28:ff:d4:
dc:59:24:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:13 2023 by rpki-client on console-fra.rpki-client.org