Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB8BBF96BA1011EB95129A82F8AEA228.roa
File: BB8BBF96BA1011EB95129A82F8AEA228.roa (raw, json)
Hash identifier: AcVF9VRoX04gQnrxEtSO2jJumcNBVVa9JPE1Gu1i2SI=
Subject key identifier: 5B:80:41:5A:1D:12:E5:39:E3:17:7D:CF:67:0B:B7:32:A6:49:7B:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 060C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB8BBF96BA1011EB95129A82F8AEA228.roa
Signing time: Fri 21 May 2021 08:44:19 +0000
ROA not before: Fri 21 May 2021 08:44:15 +0000
ROA not after: Tue 19 Jul 2022 08:44:15 +0000
asID: 398823
IP address blocks: 154.90.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1548 (0x60c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 08:44:15 2021 GMT
Not After : Jul 19 08:44:15 2022 GMT
Subject: CN=60a772e3-209e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:91:ac:8e:b9:ab:6e:63:9e:03:7a:65:3d:
20:09:e5:94:9c:52:92:7a:23:e6:24:22:09:18:73:
a9:b1:30:56:21:e0:bb:41:e9:99:67:9f:24:0f:ae:
21:42:b2:1d:53:0b:95:39:0b:ee:aa:e3:e0:cf:61:
f9:ad:39:51:4d:25:b4:6b:37:4b:c3:d2:71:7e:cc:
41:e1:e4:12:3c:f7:c0:1c:31:c9:74:6a:17:45:c0:
68:bd:43:5d:3a:39:d8:aa:57:4f:c5:e5:a5:0a:9f:
6d:70:ee:65:82:d1:73:e9:ad:00:ca:20:0d:b0:68:
3d:fa:e3:1b:8e:5e:b1:5d:45:8d:0f:f4:93:6b:b9:
ce:6c:e2:ee:9d:df:2b:35:b4:d9:c4:76:73:a2:34:
3b:ed:40:03:c7:94:bf:33:48:6b:47:37:33:6e:d4:
27:74:92:6e:53:ee:5a:d7:24:dd:06:40:2b:dc:16:
59:29:5f:2b:29:56:45:1a:57:71:99:71:cc:38:c1:
0e:6c:2c:79:25:4e:96:a2:9e:68:92:a4:18:d0:da:
56:55:1b:f1:d6:18:ad:e8:a3:f9:a8:56:b8:d4:65:
72:32:ae:a0:a9:53:8f:16:29:a6:40:0a:68:63:0d:
9e:49:24:f2:c9:b9:13:cd:88:c3:4a:b7:5e:19:a7:
47:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:80:41:5A:1D:12:E5:39:E3:17:7D:CF:67:0B:B7:32:A6:49:7B:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB8BBF96BA1011EB95129A82F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.32.0/19
Signature Algorithm: sha256WithRSAEncryption
72:de:35:62:36:5e:87:bf:b5:41:1b:82:76:78:fe:a6:61:f1:
cc:5e:06:f3:8e:2e:75:c5:c6:36:f9:24:6a:d7:33:31:d2:80:
a0:b8:03:4a:7b:20:f1:7c:45:62:64:6e:47:41:48:db:67:3a:
65:fd:f2:ac:71:3c:f4:73:9f:c2:43:f5:72:c2:8c:c8:34:24:
6e:6a:4c:d0:b8:77:eb:21:4c:a7:c7:03:8b:76:2c:e4:d5:24:
77:fa:55:e2:66:d5:56:92:d5:06:d0:0d:64:97:71:8a:d9:6c:
0a:85:a3:b5:1a:26:25:67:b2:a7:fa:22:b6:17:f5:1e:2c:8c:
ea:25:e7:dd:c3:8f:f8:28:6a:ab:ac:5a:c6:f7:32:02:67:f8:
84:af:c8:9f:76:02:6d:7a:19:f7:58:56:14:c2:25:3f:e6:3e:
8d:b4:f9:6f:be:f5:75:c2:ed:34:7c:ad:96:7c:d2:21:54:48:
fe:f2:26:68:a9:08:7f:23:e9:ba:2d:68:5a:cf:59:ff:0f:2d:
7f:f5:8a:0e:4e:42:a1:b0:e6:4f:54:77:9c:12:b4:d7:dd:5d:
14:e0:c9:45:0f:48:54:c4:4a:f1:87:9e:6f:71:d1:b1:ca:cf:
fe:fc:28:32:0b:bf:6c:8e:e0:5f:b2:25:49:bc:b8:0e:6a:ab:
50:cf:02:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-ams.rpki-client.org