Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8B7B6CEE57B11EBA637A327F8AEA228.roa
File: D8B7B6CEE57B11EBA637A327F8AEA228.roa (raw, json)
Hash identifier: ER2uzOoWbpEYdGwjhi7SO2W2+y7DFZ8OxQ7qCDGDOkI=
Subject key identifier: D7:82:E8:83:75:04:7A:BB:C3:C7:7E:AE:5C:00:71:10:EA:7A:A9:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 07AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8B7B6CEE57B11EBA637A327F8AEA228.roa
Signing time: Thu 15 Jul 2021 14:49:24 +0000
ROA not before: Thu 15 Jul 2021 14:49:20 +0000
ROA not after: Sat 09 Jul 2022 14:49:20 +0000
asID: 397630
IP address blocks: 154.201.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1962 (0x7aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 14:49:20 2021 GMT
Not After : Jul 9 14:49:20 2022 GMT
Subject: CN=60f04af4-05a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ec:2e:84:e2:5d:31:9c:67:65:cb:64:8a:1d:
6a:16:45:13:38:ab:9e:17:f6:db:94:4b:0c:0f:ac:
15:6a:68:9d:cd:1e:d5:16:02:1a:d6:86:df:10:63:
b1:96:30:e5:ea:38:96:b1:39:48:0a:5f:18:b1:12:
82:a7:b2:61:21:dd:66:48:9b:0c:ee:a3:26:82:02:
81:1a:40:e6:c4:79:07:1e:d3:42:a1:35:1c:b5:6b:
7f:7c:1f:28:1d:a9:13:4b:05:f0:f6:aa:a6:84:b9:
8f:d0:6b:8a:d2:40:3f:e9:25:39:f5:66:74:c0:70:
79:71:3a:b6:d4:61:5e:2e:f4:9c:6c:e0:24:af:ca:
84:38:b0:ae:fe:5e:13:5c:5e:5f:55:f7:4d:d4:4f:
c3:0e:cc:29:be:c6:52:8b:76:fa:c7:29:54:b4:59:
68:58:db:74:bf:e2:82:cb:03:a1:79:a9:b6:a7:a6:
12:8c:87:50:af:1f:06:2f:e3:be:7c:d8:0c:9d:5b:
50:ab:5b:26:44:52:bb:f6:7f:ee:09:dc:d1:e2:43:
45:10:fb:c5:1e:15:41:b0:cf:7c:eb:d1:f3:59:86:
85:f8:56:bc:1f:f3:57:9e:fc:2f:a4:c7:fd:cf:50:
79:04:5e:0b:06:21:c1:14:fd:78:91:9a:b2:7b:82:
1c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:82:E8:83:75:04:7A:BB:C3:C7:7E:AE:5C:00:71:10:EA:7A:A9:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8B7B6CEE57B11EBA637A327F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.41.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:80:05:bf:8b:8b:0d:eb:60:95:6c:bd:23:54:7a:89:50:24:
c7:b8:61:a8:10:a5:98:b9:ef:27:7d:20:9d:0f:5d:f7:5b:4a:
fd:44:f2:c7:f2:c2:14:66:59:62:4d:5c:c3:0e:77:7a:97:ce:
73:c8:c7:e9:1c:d2:31:c6:d9:bd:a4:11:d6:1e:bc:73:e0:ae:
9f:82:df:01:ef:d7:cf:0f:c7:2c:03:31:3c:ae:6a:37:46:a1:
e8:83:fb:a7:f3:73:e7:49:16:ef:51:f6:e7:08:2d:1d:9e:84:
91:51:c8:42:e8:97:85:ba:ce:d2:e3:cb:cc:3e:61:22:c7:05:
c7:9b:9a:e5:9a:78:6a:3a:49:3b:98:c8:49:39:60:07:80:91:
f4:e9:c8:02:c9:58:09:6c:f3:78:0e:77:80:db:d9:f6:77:6f:
7f:99:23:4c:85:f2:e9:c9:c3:19:31:d5:37:53:03:4f:19:c5:
5d:c4:b0:c7:ab:cd:41:6b:c4:3f:38:ab:bf:75:fd:29:a8:ee:
a4:ef:de:e7:aa:0a:d6:48:52:3b:98:2d:f7:06:9f:34:72:4a:
30:19:c6:a5:47:7b:d5:8e:8b:21:dd:13:19:09:a7:20:a5:74:
89:7c:d8:b1:6d:a3:f3:68:af:af:66:5b:a5:ef:8d:99:db:eb:
1b:95:64:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-ams.rpki-client.org