Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3F9200A251811EDAE241094F1222468.roa
File: C3F9200A251811EDAE241094F1222468.roa (raw, json)
Hash identifier: 4OBP6/fV39UXHc7PgjvBkysmyeMAcmo8RmW1NNI6O34=
Subject key identifier: D7:B0:94:43:E3:9A:AD:6D:6A:AC:EE:D4:DC:43:63:17:2E:71:5F:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 186D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3F9200A251811EDAE241094F1222468.roa
Signing time: Fri 26 Aug 2022 08:26:22 +0000
ROA not before: Fri 26 Aug 2022 08:26:18 +0000
ROA not after: Fri 30 Dec 2022 08:26:18 +0000
asID: 35916
IP address blocks: 154.197.40.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6253 (0x186d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 26 08:26:18 2022 GMT
Not After : Dec 30 08:26:18 2022 GMT
Subject: CN=630883ae-59fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:af:2b:97:4b:84:dc:08:f7:7e:79:07:6d:
9b:c6:cf:a9:07:1e:ec:06:af:29:51:f3:19:5d:20:
4e:44:ed:dc:11:4c:35:67:47:8d:99:d2:7e:98:c1:
62:94:4e:72:49:4a:08:a9:b6:16:a3:ba:33:eb:43:
b2:19:7a:65:32:97:15:2e:16:52:80:14:1f:23:95:
25:a0:25:63:d2:36:f6:46:8f:8e:a8:8f:b8:7f:32:
2b:ee:e0:8c:cf:9a:7e:7b:68:29:46:0d:36:2f:db:
ab:f9:7d:e7:77:6a:36:4b:be:64:e8:f9:98:bb:bf:
70:90:2d:36:d2:4d:89:35:0b:ea:61:50:77:79:52:
b4:ec:48:b1:b4:fe:4a:2c:9a:25:32:80:14:ba:c7:
48:eb:5c:d5:28:ff:6c:d4:db:53:74:db:f7:c2:5b:
e2:43:9a:16:27:9b:56:20:b7:8b:e3:0d:13:66:d6:
2f:86:72:98:4e:52:1d:0a:c1:88:c3:4d:0e:e2:c9:
92:fb:4e:4e:5d:9a:90:ad:62:5e:c9:47:7a:cf:99:
16:27:74:ef:3a:c8:6d:06:b8:be:ef:ae:2d:fc:0d:
4c:b3:dd:96:e7:69:75:da:ae:0f:2e:99:f8:6b:0e:
5c:1a:a4:44:d6:27:e4:52:db:22:b8:1a:61:d1:ba:
96:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B0:94:43:E3:9A:AD:6D:6A:AC:EE:D4:DC:43:63:17:2E:71:5F:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3F9200A251811EDAE241094F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.40.0/21
Signature Algorithm: sha256WithRSAEncryption
44:16:06:03:bf:ac:1d:fd:e2:98:65:47:db:65:f7:0e:e7:57:
af:96:ef:86:e3:aa:7a:25:39:b7:8f:4b:5c:e1:b8:7b:f3:6b:
be:e9:d6:b1:86:76:d3:28:c1:12:56:ff:c0:22:82:b1:c5:44:
0e:d2:82:bf:44:de:25:93:10:7a:26:91:7d:8e:e4:6e:ec:fa:
3a:50:2d:d5:f0:14:97:a4:55:1b:be:15:10:ad:6f:31:0e:da:
2c:80:2f:2b:f3:16:f7:54:49:4e:57:de:1e:40:f5:84:18:f1:
f7:59:09:4b:49:93:26:9d:ed:14:cf:6e:77:60:eb:42:e6:1b:
b8:3b:52:58:53:41:c5:b8:ed:f5:5a:69:b3:3b:e1:69:05:8d:
5e:ae:54:d2:29:e4:21:8d:c0:e1:b7:fc:d7:a2:2e:b1:52:28:
0e:71:81:59:aa:47:31:e7:03:12:4e:f6:41:bd:7c:bb:5b:b0:
90:4b:51:d2:5d:5c:7b:b1:77:e2:47:7f:6f:fb:b1:fb:9d:aa:
c0:58:47:c0:52:00:f1:b5:7e:13:3c:82:c7:32:6f:08:39:74:
af:fb:c2:75:31:6e:f2:7f:a5:e1:8e:c2:a2:0b:df:4a:2c:c3:
19:52:e7:ee:4a:9f:c5:7f:d5:ba:64:ec:b2:26:25:b8:ed:2c:
1e:08:0a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-fra.rpki-client.org