Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E037F95CF9D711EBA29DDF03D8A014CE.roa
File: E037F95CF9D711EBA29DDF03D8A014CE.roa (raw, json)
Hash identifier: HeA13gHt0TBnLhUEv942v6/NYuZYyvzSs/nkWurnIlI=
Subject key identifier: 64:1C:FB:4A:04:03:7D:2A:DB:BB:DD:30:21:DD:92:55:EC:D3:BC:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 08AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E037F95CF9D711EBA29DDF03D8A014CE.roa
Signing time: Tue 10 Aug 2021 12:39:13 +0000
ROA not before: Tue 10 Aug 2021 12:39:00 +0000
ROA not after: Mon 10 Oct 2022 12:39:00 +0000
asID: 9009
IP address blocks: 154.95.36.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2221 (0x8ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 10 12:39:00 2021 GMT
Not After : Oct 10 12:39:00 2022 GMT
Subject: CN=61127371-9c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2c:cd:60:56:bd:a9:9a:b2:60:5b:dc:96:8d:
00:65:9a:41:1a:25:3e:8b:7b:6d:4f:a3:45:af:b5:
ed:14:34:f3:8f:02:42:e6:10:06:e6:dc:a6:e1:1d:
83:8f:7e:21:4d:2b:d0:65:c5:22:14:f4:3d:c8:3c:
ef:e6:f2:d2:ab:05:f7:65:03:90:d6:cf:48:6d:55:
64:40:3d:4d:1f:43:1d:b5:ea:28:04:26:aa:fa:0b:
b3:c9:5d:d8:55:c8:c8:42:54:e2:5b:c6:f9:81:ff:
cd:63:be:24:9d:0f:3d:fb:d9:8f:27:00:70:ae:68:
9d:f1:d5:84:e8:c1:7e:6e:e3:b0:31:b7:20:1c:c3:
80:47:4e:b2:a3:8e:37:f1:84:fc:8a:af:51:54:a3:
c8:f4:68:4f:e6:4b:b6:20:6f:92:5b:17:ab:dc:fa:
61:b1:2b:46:d1:83:b9:8a:2e:6a:16:78:69:b6:b3:
80:4a:af:17:98:24:2a:62:30:ec:3f:e2:11:8f:ce:
4f:67:d9:cf:fd:f7:ff:76:d6:b0:ab:eb:12:86:01:
a6:56:31:bb:d9:64:ee:70:4d:41:9f:f1:1b:2d:3b:
12:d8:33:9c:19:eb:a8:f1:43:83:80:12:07:a3:51:
7d:68:ff:32:5b:fa:e4:2d:ca:33:b7:50:5b:01:5d:
85:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1C:FB:4A:04:03:7D:2A:DB:BB:DD:30:21:DD:92:55:EC:D3:BC:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E037F95CF9D711EBA29DDF03D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.36.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:9d:18:f6:97:48:f7:4d:ac:f2:a8:37:36:85:cc:a0:c1:33:
ee:e6:f8:14:4e:d1:b5:12:d1:57:d1:40:3d:b0:72:bb:fc:61:
1a:36:cd:60:02:af:7b:f3:f9:d5:68:41:d4:3c:9d:0e:70:2b:
16:42:04:88:5d:70:70:0e:51:48:7b:aa:6a:a0:e1:c7:cd:12:
09:fe:78:ac:e4:f7:65:c3:e1:b8:23:46:95:95:22:24:3f:ba:
bb:07:02:a0:bd:47:64:b3:2c:42:83:59:09:fe:ff:e0:b9:4c:
01:33:15:92:0d:da:2e:56:14:03:f9:7c:05:66:14:a0:2a:83:
07:0e:26:30:10:fc:e9:1d:8a:90:94:18:67:77:d2:60:44:89:
f0:a1:c3:8c:45:97:e2:65:ed:41:88:c5:be:a3:7f:3b:f0:b3:
8f:07:e9:80:88:fd:9e:90:5b:7f:31:bd:59:87:ea:14:0f:a2:
94:4d:eb:37:17:57:01:bb:f5:86:55:ba:14:c4:64:47:c9:1d:
5e:7e:bb:85:72:c5:f7:18:30:98:f1:6e:55:e0:90:2a:67:14:
66:d0:26:1d:cf:11:26:35:a9:45:1b:18:50:dd:af:5b:b0:52:
16:9a:5b:0b:37:af:c7:cd:b4:5d:77:d4:73:af:2c:8e:b8:68:
29:01:b5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-ams.rpki-client.org