Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C55AB98490AA11EC863AB5B95A40D577.roa
File: C55AB98490AA11EC863AB5B95A40D577.roa (raw, json)
Hash identifier: R/T/8ApbgP7vA5A7JUPNoAcRTOqqSekr+GTzjNqjuQk=
Subject key identifier: F6:C6:47:78:34:34:3D:D9:B1:F4:21:8C:9A:B2:1C:8D:09:56:BB:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 14D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C55AB98490AA11EC863AB5B95A40D577.roa
Signing time: Fri 18 Feb 2022 11:06:07 +0000
ROA not before: Fri 18 Feb 2022 11:06:04 +0000
ROA not after: Fri 30 Dec 2022 11:06:04 +0000
asID: 137951
IP address blocks: 154.209.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5334 (0x14d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 18 11:06:04 2022 GMT
Not After : Dec 30 11:06:04 2022 GMT
Subject: CN=620f7d9f-92fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:16:1f:7f:df:7d:37:a1:ab:3a:76:4e:d3:36:
0a:e0:f6:22:b4:55:4c:56:14:cd:26:ab:6c:d9:68:
5f:c7:bf:26:b7:e9:4a:6a:64:6b:88:22:cc:8b:7c:
56:76:27:8c:f7:39:cd:e5:5a:5a:f2:18:5d:82:9d:
92:5b:9a:dc:d3:e8:50:10:93:d3:cb:94:b7:70:74:
9a:f5:e9:ef:d0:38:b2:f7:6a:79:ba:99:38:d7:91:
da:33:cb:a7:80:5a:69:00:3c:d8:ae:18:ec:1e:17:
7a:66:b5:63:36:b6:da:2d:3c:98:e7:73:71:ff:98:
ca:e4:ca:dd:46:49:f8:c4:09:d8:48:b5:fc:b5:4c:
06:06:41:a8:43:8f:4a:72:3f:38:7a:4e:a3:6c:b1:
e9:1f:17:c1:ed:f9:6b:0d:5c:c1:5e:a8:23:b0:ea:
b0:4f:af:fe:66:6a:d2:00:a5:eb:9b:98:7c:c6:67:
d4:19:ce:a2:6f:b5:89:fc:f2:50:c3:f0:ac:26:02:
e6:4d:d1:75:0b:d6:5a:62:79:cb:69:8e:76:41:38:
4b:29:44:92:f0:05:f8:6d:51:3a:0c:84:45:2d:14:
67:16:6f:7f:6b:f1:cc:1c:fc:07:e2:17:17:13:bd:
60:0f:2f:95:f9:87:8c:ab:bc:f8:ea:66:3f:83:08:
85:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C6:47:78:34:34:3D:D9:B1:F4:21:8C:9A:B2:1C:8D:09:56:BB:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C55AB98490AA11EC863AB5B95A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.186.0/24
Signature Algorithm: sha256WithRSAEncryption
68:b9:ac:e2:64:38:54:7b:22:be:d4:0b:19:90:a3:f7:65:7c:
ef:95:00:39:be:91:47:a8:ca:1f:8f:e1:21:2a:65:a6:57:15:
60:fa:eb:f8:7f:ef:86:0e:c6:a2:06:e9:57:92:cc:2b:63:58:
83:f9:02:9d:00:ee:04:bc:4b:64:da:6b:63:d5:d4:de:7e:3e:
90:a2:0d:06:67:3b:59:ea:ca:d3:ae:a1:ec:18:54:ff:10:47:
0c:c5:e1:d5:b3:7a:c7:66:6e:48:8c:73:36:5a:d7:60:68:9b:
48:b0:58:88:c7:24:41:fd:00:8c:74:35:30:3e:19:25:a7:1f:
32:3e:83:e9:46:f2:53:3b:95:7e:76:74:55:9b:44:e8:ed:17:
91:a8:88:af:4b:e6:92:56:26:fd:1b:58:2a:93:7c:21:f6:98:
80:75:de:a3:b8:47:16:8e:9d:0a:21:bd:83:f0:63:1f:91:54:
53:c9:1d:58:86:65:38:5b:ad:d7:8f:1d:c5:0c:e4:4b:50:f3:
c3:db:34:29:a4:8b:c7:3d:b8:f4:ad:aa:15:3c:4b:ee:c8:03:
03:2a:7f:a1:8e:8a:f9:f2:04:ca:12:2e:cf:23:6a:24:d3:df:
92:8f:76:be:0d:7e:94:a8:17:10:77:b8:f8:95:93:4b:04:6c:
2d:6e:82:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-fra.rpki-client.org