Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4F1695A5BEA11EC89F25BDD5A40D577.roa
File: D4F1695A5BEA11EC89F25BDD5A40D577.roa (raw, json)
Hash identifier: ZxeFDenZx8pxMbtKjlwKGvIA/xkM3W/xUi7hoYWRQSo=
Subject key identifier: 69:42:26:59:53:67:0A:19:27:D4:10:1D:52:CB:37:DF:D5:B7:83:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 13E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4F1695A5BEA11EC89F25BDD5A40D577.roa
Signing time: Mon 13 Dec 2021 08:01:10 +0000
ROA not before: Mon 13 Dec 2021 08:01:05 +0000
ROA not after: Mon 30 Jan 2023 08:01:05 +0000
asID: 399077
IP address blocks: 154.91.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5093 (0x13e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 08:01:05 2021 GMT
Not After : Jan 30 08:01:05 2023 GMT
Subject: CN=61b6fdc6-af5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c7:19:93:e0:39:1c:98:d4:30:68:0c:ef:05:
14:b8:70:38:a3:e2:79:e7:7b:cf:0c:5f:42:63:39:
56:32:70:6b:a7:1f:43:83:3d:7f:bd:4b:2a:4a:0b:
a3:5c:0f:54:43:d8:6d:6d:78:d3:f3:2b:28:f5:e7:
00:6c:45:a9:0a:ad:d2:b8:e3:fa:38:fe:cf:25:d8:
2c:43:ac:cf:a8:46:b8:90:22:a8:55:90:bb:e9:2c:
0f:df:7d:50:af:94:b3:39:7c:91:6b:0d:69:6f:31:
de:45:06:82:1b:a5:2e:01:43:e4:f4:87:cb:9b:e3:
29:d5:7f:0e:bf:8d:41:d7:27:c7:f9:55:b1:33:04:
98:62:54:f5:9e:fd:e6:b3:3d:5b:5c:7a:05:c4:44:
98:95:48:94:61:c5:c5:b9:97:77:44:d0:99:2a:59:
f4:2b:7f:bc:60:87:f0:40:be:43:1a:f4:6b:09:7f:
92:1d:1a:25:e0:c7:62:af:78:3d:f3:84:82:43:d9:
bd:46:b3:57:f1:95:07:f7:84:0f:68:7f:8e:fe:0d:
f4:33:02:ae:8e:72:8f:5b:9f:3d:ca:48:48:a2:93:
6c:d0:b0:59:e8:c7:fe:5e:a2:fb:5b:d2:99:91:48:
85:c3:11:3d:8e:09:5d:05:30:d9:1a:9e:d7:e7:c0:
8f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:42:26:59:53:67:0A:19:27:D4:10:1D:52:CB:37:DF:D5:B7:83:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4F1695A5BEA11EC89F25BDD5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1e:5a:57:8e:19:c1:e5:73:6c:1d:35:e8:8b:9d:20:67:ca:0e:
4f:a5:3e:8d:e9:24:39:e9:cf:61:f6:0b:0f:b4:77:91:92:c7:
3a:7d:44:36:b1:cf:10:1e:02:7f:6e:53:ba:f5:a1:bc:29:13:
bf:f6:fe:ab:c7:52:4e:52:cd:71:bb:cb:0c:d2:3f:45:36:60:
7a:5e:e7:5f:3d:82:3d:43:f5:d7:f8:b9:90:d1:19:2c:83:b4:
d5:bb:2b:8e:b0:40:47:c1:d1:6d:2a:ea:e9:f9:2c:b3:4d:99:
09:dc:71:b5:e5:2e:d0:c8:30:c8:80:45:c1:a0:a5:90:a8:9e:
7b:43:7f:7e:46:fa:18:e9:4d:9e:2f:7c:05:f6:06:19:8f:79:
32:5c:09:08:59:b0:5b:8f:95:09:03:90:5b:56:e6:9e:54:cd:
8e:07:50:36:b3:98:d0:3f:28:32:4c:60:9b:f9:d0:a3:d7:9b:
4a:d2:97:dc:e5:0a:b0:1c:25:6a:33:b9:19:1e:42:9f:ae:69:
e7:45:81:08:7f:38:8a:d8:49:25:06:07:3f:c8:67:61:32:59:
45:56:12:c3:4a:93:9a:7f:56:a1:1e:61:ca:78:aa:d9:bb:41:
57:f8:1a:87:e8:60:4a:54:4c:54:9e:25:3a:2a:75:75:ca:61:
7e:93:d4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-ams.rpki-client.org