Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA1F4C54D11511ECBC0FA0ABF1222468.roa
File: CA1F4C54D11511ECBC0FA0ABF1222468.roa (raw, json)
Hash identifier: W4eJL5sqeb/UwkO4Apba0LaEHzWmKovrsGZkVP10zwk=
Subject key identifier: D9:1F:37:DC:AD:B7:B8:34:29:FC:B1:2D:38:DB:5F:2B:45:58:BB:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1632
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA1F4C54D11511ECBC0FA0ABF1222468.roa
Signing time: Wed 11 May 2022 10:33:26 +0000
ROA not before: Wed 11 May 2022 10:33:22 +0000
ROA not after: Wed 31 May 2023 10:33:22 +0000
asID: 132513
IP address blocks: 154.215.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5682 (0x1632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 10:33:22 2022 GMT
Not After : May 31 10:33:22 2023 GMT
Subject: CN=627b90f6-2473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:84:32:e9:98:26:5c:59:7a:b5:f1:50:77:
b0:66:64:68:f7:32:77:89:be:f6:fa:a8:d4:34:42:
e8:d1:e0:42:b4:e1:9c:ba:8f:10:bd:cd:e0:fa:77:
e1:d1:e0:bb:e0:c0:6e:8e:91:5c:42:02:2d:42:e0:
07:17:34:c1:b3:67:0e:87:45:56:90:f9:8b:93:ec:
c8:0c:19:e8:6c:65:e6:c7:51:8a:48:48:a4:66:6b:
6e:93:53:4a:7b:34:52:dd:29:25:a6:a4:6f:76:4c:
04:84:84:7b:2a:96:60:e0:45:4c:0b:cf:ec:94:a9:
bf:6a:57:5b:a2:a2:09:c0:1e:c9:8a:46:92:78:6b:
13:04:e9:4b:cb:63:da:8c:6b:cf:63:39:5b:c7:aa:
17:14:36:2a:3c:56:9b:41:8b:6d:33:2f:5d:7a:78:
bf:6d:e7:26:75:1e:84:23:89:7c:dd:92:d0:f9:59:
c3:a0:76:c6:fc:60:c5:64:46:6c:3f:d7:62:ad:f9:
e2:ca:79:1c:85:89:b7:79:ce:1c:14:cb:74:05:91:
4b:26:7f:9e:76:5f:a6:43:84:21:fe:b4:3f:ba:32:
86:67:d2:ca:d0:e1:a8:ee:8f:24:52:49:34:ca:7a:
84:6e:60:39:5b:55:75:b8:5e:60:a2:ae:56:7a:28:
e0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1F:37:DC:AD:B7:B8:34:29:FC:B1:2D:38:DB:5F:2B:45:58:BB:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA1F4C54D11511ECBC0FA0ABF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.15.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ef:31:ea:bb:98:8c:38:fc:c1:14:0f:58:1b:2c:7c:ca:05:
90:ed:d3:11:2e:a4:ec:bf:de:e0:e3:5a:ed:a4:b7:d3:24:dc:
7d:ab:74:63:d8:0c:7c:83:0a:cd:04:20:a3:1e:3d:4e:2d:61:
37:63:84:50:89:0f:66:4a:17:17:1e:db:32:d0:f2:58:a3:2e:
62:7f:cf:aa:61:13:f8:53:9e:89:d5:40:59:f9:71:f2:fe:c3:
f1:04:9f:08:76:c5:ef:2a:40:6a:37:b4:c7:4e:44:1b:97:68:
69:22:d9:c0:cf:1c:f4:3b:8f:37:62:c4:73:e1:4e:59:01:44:
20:b6:e1:53:8b:30:e7:05:d7:a3:1b:e0:75:1d:df:fc:fa:17:
ec:45:ea:89:24:c3:2d:e3:54:d8:b8:29:11:c4:d4:4c:2c:f9:
aa:e8:52:68:af:3a:8c:99:e5:69:8c:ce:90:20:9a:9a:0c:6b:
63:d1:3a:fc:6e:1f:66:b4:d9:42:c0:32:3b:bf:cf:f3:77:1d:
6c:4a:c4:98:e9:f5:0d:bc:6b:97:f6:de:31:7a:f0:9d:99:21:
d7:f9:d3:ca:a7:f4:58:12:07:71:6e:06:3b:43:31:f1:ac:5e:
b6:88:67:d3:96:c4:f2:3a:50:38:43:8e:17:c7:c8:2d:6f:da:
e4:da:69:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-ams.rpki-client.org