Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4D40E04E58011EBA3727F2FF8AEA228.roa
File: D4D40E04E58011EBA3727F2FF8AEA228.roa (raw, json)
Hash identifier: ltqeCvoZUJAh5e6/nlkGNE5WeO5jcdLkGAGZP7j9+5E=
Subject key identifier: A0:30:47:AB:D7:23:C8:3E:B1:B7:74:54:8D:2E:5C:44:FC:CD:E7:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 080C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4D40E04E58011EBA3727F2FF8AEA228.roa
Signing time: Thu 15 Jul 2021 15:25:05 +0000
ROA not before: Thu 15 Jul 2021 15:25:01 +0000
ROA not after: Sat 09 Jul 2022 15:25:01 +0000
asID: 397630
IP address blocks: 154.83.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2060 (0x80c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:25:01 2021 GMT
Not After : Jul 9 15:25:01 2022 GMT
Subject: CN=60f05351-92f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:ed:3f:2a:8d:9d:39:a8:84:16:c2:a4:42:
50:05:67:c5:d7:f5:91:8b:6f:35:5d:3a:7e:cf:2f:
2c:ce:1d:ec:22:0e:95:ee:43:dc:74:03:fe:7a:6e:
02:ba:37:9d:27:f2:51:38:bb:cd:e8:0d:87:06:02:
a7:4f:78:ce:fa:8c:4b:8a:b2:7b:81:ef:85:a6:c4:
42:a6:99:3d:18:d9:7d:33:73:d7:ed:16:12:31:d7:
24:05:61:ed:a8:88:bb:8d:b4:f6:b7:13:71:81:3e:
08:a0:7d:31:65:b9:93:6f:c9:c7:f2:3f:83:3c:ca:
d5:3b:8c:26:ea:6d:80:a8:a2:96:e4:c7:b6:c3:53:
e3:3c:f7:d1:b7:f4:15:e4:78:63:11:80:ec:75:21:
21:3d:fa:84:c4:e7:60:c9:80:bb:b2:ed:19:41:e3:
44:35:d4:f3:4f:de:ac:55:db:1b:39:87:25:ac:56:
d0:61:6e:57:95:e4:b2:5d:b3:3b:3d:e4:44:e8:6e:
fb:bc:9a:3e:36:10:67:4f:19:d4:43:cf:c5:b8:c5:
c5:c0:ed:2f:65:eb:3a:a4:b2:e9:51:8a:a1:5b:9c:
8e:5e:b9:2a:71:02:ec:c6:f6:8e:30:93:bc:13:0d:
e3:8e:af:ba:b1:14:07:03:38:3b:06:13:d5:9c:95:
f7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:30:47:AB:D7:23:C8:3E:B1:B7:74:54:8D:2E:5C:44:FC:CD:E7:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4D40E04E58011EBA3727F2FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.11.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:35:e6:88:0c:23:db:cb:62:9b:1c:d8:8d:a3:60:d9:2e:88:
e9:e4:75:12:92:65:73:a4:9c:22:ce:5d:c4:4c:05:c3:8a:ea:
c4:36:2e:ae:3a:97:69:20:a5:11:12:a9:87:e4:1d:cb:76:ee:
d0:0b:a0:21:0b:5d:57:3a:60:ad:bf:f6:11:a3:59:16:be:27:
b4:0a:1a:70:d5:2f:c9:f0:25:93:50:64:4a:18:bb:cc:91:0b:
7b:5e:6b:42:66:f7:b4:53:65:c8:f1:36:00:a4:72:56:e9:f1:
da:a9:7b:7a:d5:83:ca:46:48:2f:09:6f:20:ea:ae:24:4e:cd:
4a:f9:82:86:7c:49:d1:d0:76:4a:ac:e3:c6:c8:65:2a:45:a8:
ba:5d:54:61:47:92:bb:d6:27:fd:91:79:81:b8:fc:68:4d:c1:
13:58:1e:b3:14:aa:bc:5f:36:6e:84:a7:d3:d6:1b:6b:cd:29:
e5:d1:03:c6:d6:4f:f1:e7:ea:9c:9b:67:d6:5e:88:d8:4a:5a:
d4:58:82:4f:36:f3:6a:1d:30:11:28:5c:0a:c6:23:08:ec:e4:
83:a5:34:99:ac:cf:f8:93:34:b4:ee:12:bd:a1:bc:a9:61:f8:
bb:7b:21:3e:c4:44:39:79:ea:35:cb:3a:97:3a:a0:36:15:c5:
2c:43:2f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-fra.rpki-client.org