Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C407AAF0E57F11EB9FD5AF2DF8AEA228.roa
File: C407AAF0E57F11EB9FD5AF2DF8AEA228.roa (raw, json)
Hash identifier: bsBvqu9qogf+sv0Lp1vj/0SpoAQbSr3Cx8ZKP/HqP8Q=
Subject key identifier: 3A:AC:CF:9F:FB:5F:94:D2:F8:ED:1A:F0:85:93:DC:C5:C2:19:15:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 07EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C407AAF0E57F11EB9FD5AF2DF8AEA228.roa
Signing time: Thu 15 Jul 2021 15:17:28 +0000
ROA not before: Thu 15 Jul 2021 15:17:23 +0000
ROA not after: Sat 09 Jul 2022 15:17:23 +0000
asID: 397630
IP address blocks: 154.202.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2026 (0x7ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:17:23 2021 GMT
Not After : Jul 9 15:17:23 2022 GMT
Subject: CN=60f05188-7b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:21:66:94:14:61:7a:e7:04:2d:62:92:18:fc:
f0:43:b1:c3:2d:fd:1e:0b:96:73:93:11:c0:bc:04:
33:79:35:a7:dd:32:68:e7:e6:1e:07:28:51:5c:85:
e1:10:d9:40:48:ce:5d:8d:70:fa:8c:83:fd:ac:e7:
3a:9d:52:bb:a2:86:2e:26:87:7b:a1:51:bc:a1:03:
e9:3c:8c:7c:0a:64:61:15:f0:07:19:1d:b8:e7:4a:
2c:a3:96:e1:16:82:b9:cb:0a:67:5d:1f:2a:17:08:
6b:a0:0d:e7:0e:fd:d8:67:6c:17:2d:ae:00:80:93:
a6:66:e4:c6:ec:88:6f:9a:b5:5a:fe:e7:b9:4f:77:
ec:22:8b:fa:2a:c0:47:1b:ff:45:b1:c5:a0:26:7e:
b8:83:b4:01:37:4f:76:38:bf:82:88:f6:ef:ed:60:
a0:0f:59:90:98:36:49:9f:ef:c6:da:9e:3e:33:d4:
61:1d:d3:00:e3:82:33:ff:be:53:dc:32:49:3a:65:
9d:18:1b:b0:71:1f:70:a2:d7:c3:66:d5:41:3d:a0:
11:a9:6c:29:9f:69:6e:e9:fe:a0:6b:d5:f1:ab:e9:
e4:04:ca:4f:85:fe:1c:17:46:23:f2:26:99:d0:fa:
bf:1a:c8:5a:69:59:3e:81:e9:46:8c:eb:47:94:26:
45:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AC:CF:9F:FB:5F:94:D2:F8:ED:1A:F0:85:93:DC:C5:C2:19:15:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C407AAF0E57F11EB9FD5AF2DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.118.0/24
Signature Algorithm: sha256WithRSAEncryption
25:4a:ca:80:18:7c:96:db:f1:68:4a:74:78:e3:a7:8a:4d:a3:
28:ee:10:a4:36:c7:8a:2e:53:69:70:c3:4c:df:05:1d:e8:c5:
3d:27:7e:ba:ce:38:fe:06:be:98:d5:cd:bf:33:ae:8c:20:b5:
1c:19:db:80:66:aa:84:04:ff:e0:5f:a7:fb:25:05:33:1d:74:
97:ab:bc:97:bf:6e:2d:e1:ae:e8:59:64:65:9e:b6:aa:64:2f:
63:cc:80:9b:26:0e:00:a7:66:8d:67:60:86:f7:b8:cb:4d:a0:
19:ea:f2:23:46:74:c4:3c:c7:5c:05:c1:ba:bf:fc:a0:7d:d9:
91:ae:b0:c9:32:30:dc:d1:b4:cf:5a:23:dc:e1:ac:74:6d:ec:
0f:48:4c:c8:c0:f9:2a:27:03:90:e5:f1:f2:02:3a:23:96:98:
f0:f5:de:72:bc:84:e8:a4:3d:f3:7d:9a:a7:af:76:ba:b6:12:
05:b5:cf:40:f2:81:3f:62:88:b3:75:71:f8:72:bb:cf:7c:3e:
b9:66:c6:07:b4:21:63:66:33:9b:d2:29:e8:39:b3:36:17:92:
70:a2:f6:fe:61:69:f6:74:0d:9e:1d:08:5c:7d:28:ba:1e:5f:
c7:95:a0:73:5f:36:7c:b0:70:6d:11:81:60:af:60:1e:25:0a:
0a:86:bc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-fra.rpki-client.org