Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF64212A5BBF11ECBF16DBDD5A40D577.roa
File: BF64212A5BBF11ECBF16DBDD5A40D577.roa (raw, json)
Hash identifier: /L7oRZW07VrvxKMV7IFtLQI5CzUCmSJ4IpTv6ne/R3s=
Subject key identifier: 4D:72:26:47:8C:49:7B:9E:2F:D9:E1:1C:48:CD:85:AE:3E:FD:15:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 13DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF64212A5BBF11ECBF16DBDD5A40D577.roa
Signing time: Mon 13 Dec 2021 02:52:45 +0000
ROA not before: Mon 13 Dec 2021 02:52:41 +0000
ROA not after: Fri 30 Dec 2022 02:52:41 +0000
asID: 133201
IP address blocks: 154.204.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5083 (0x13db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 02:52:41 2021 GMT
Not After : Dec 30 02:52:41 2022 GMT
Subject: CN=61b6b57d-2feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:ed:0b:aa:c9:a5:59:0f:42:46:59:82:74:
56:e7:93:51:a7:3f:ea:b9:3e:be:d3:97:45:51:90:
e4:a7:91:94:b1:fc:43:8e:23:c7:5b:6a:c4:da:dd:
53:44:ca:a5:7a:2d:62:7d:0c:c1:79:f3:f1:3d:e6:
1f:cb:20:eb:d3:cd:b7:06:11:ef:82:18:e6:62:6b:
c9:16:b5:2c:65:d9:4b:0a:ec:4a:f5:43:fc:0c:c3:
f3:1a:44:2d:04:21:bc:c2:c0:a3:6e:df:f8:77:51:
aa:19:88:50:b9:6c:f8:a4:87:56:6a:14:6b:c4:3e:
5f:ce:cb:ae:7d:49:15:40:6f:79:6d:2d:bf:b1:3e:
31:32:63:01:00:d8:3c:23:ff:36:36:e9:97:d0:74:
3a:00:4c:a5:12:5d:6f:93:08:3e:ff:7c:cd:fa:5b:
ba:8d:f2:a0:71:85:b4:62:47:42:51:71:6f:ae:c6:
eb:00:44:6e:7c:32:66:c5:5a:9b:4d:06:5d:50:d6:
36:66:a6:73:05:c8:4d:cc:2f:c9:d8:d7:f6:6f:e7:
d9:6d:f0:2f:2c:d6:80:af:7c:46:f2:0d:27:da:e3:
ea:80:f9:56:86:58:35:07:88:51:0d:4e:e2:23:d1:
80:4b:6a:c0:21:ca:1e:ed:df:06:fc:d2:bb:3d:95:
b7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:72:26:47:8C:49:7B:9E:2F:D9:E1:1C:48:CD:85:AE:3E:FD:15:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF64212A5BBF11ECBF16DBDD5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.82.0/24
Signature Algorithm: sha256WithRSAEncryption
66:1d:3a:ca:e4:d4:91:30:61:f5:2d:32:7b:02:42:fb:6e:4d:
89:ba:0f:a3:bc:9d:18:4e:ac:44:18:6f:64:66:38:0f:cc:f1:
6a:63:a7:42:1a:a6:8b:a2:8c:e1:7b:62:1e:75:c6:35:5f:cc:
5c:4c:50:0d:fe:cf:18:ca:1f:a5:a8:06:d8:39:70:af:a2:d8:
69:38:54:aa:08:53:06:fa:1e:95:0a:ae:ee:2f:83:1a:4e:0e:
c4:72:7f:07:6c:e8:fe:43:8c:9e:8f:1a:f8:61:df:09:ce:61:
57:32:6e:33:c1:38:c9:5f:e4:52:81:59:8a:11:d0:6e:db:7b:
5e:84:b3:f4:d1:90:90:e8:4a:17:13:a6:a5:80:57:da:d9:47:
43:c5:a3:88:e0:17:15:9d:c1:7c:6d:7d:ca:22:2e:c5:5c:0c:
5c:aa:96:e5:b6:a2:b3:48:b3:8a:1a:a9:fc:f1:19:2d:a0:fc:
51:81:c0:e6:9d:90:42:72:f5:8a:50:10:d3:89:44:5f:ba:e7:
22:1c:17:53:5b:c2:4a:61:70:75:dd:5e:4e:6d:d0:be:7f:3a:
4a:a0:21:55:62:8f:15:cf:3a:51:c6:83:e8:68:86:4b:90:09:
99:2a:c6:47:d4:0a:f0:41:45:4d:80:31:7d:c8:cb:1b:0d:f4:
04:c0:ce:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:13 2023 by rpki-client on console-fra.rpki-client.org