Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2B639E4391C11ECB368336CD8A014CE.roa
File: E2B639E4391C11ECB368336CD8A014CE.roa (raw, json)
Hash identifier: DDTb4Qc9kASFeaU/lCB8JxR3YxpuMhQbNGHxL+FHsVA=
Subject key identifier: 61:EF:AE:0C:FA:8E:35:48:21:B6:75:BC:50:E3:D8:A8:18:FF:72:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0CB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2B639E4391C11ECB368336CD8A014CE.roa
Signing time: Sat 30 Oct 2021 01:01:17 +0000
ROA not before: Sat 30 Oct 2021 01:01:13 +0000
ROA not after: Sun 30 Oct 2022 01:01:13 +0000
asID: 139879
IP address blocks: 154.206.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3254 (0xcb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 30 01:01:13 2021 GMT
Not After : Oct 30 01:01:13 2022 GMT
Subject: CN=617c995d-4577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:29:77:7f:20:05:89:53:b1:12:5b:de:70:d1:
7c:af:3b:eb:c9:df:34:dd:9a:23:15:25:16:7d:49:
9c:77:56:c0:d3:f1:16:fa:f2:34:83:46:ec:39:5b:
53:6b:c9:be:fa:e1:d2:2c:45:36:c3:53:ab:88:5d:
be:2c:6d:10:88:6a:d2:33:18:18:bf:3f:33:80:24:
24:05:fc:1f:ce:ee:dd:aa:77:1a:a6:fd:9a:57:2b:
ef:56:e1:ff:30:36:ba:cf:76:3b:4c:73:da:e7:bb:
90:5d:0d:c6:98:b9:30:99:f2:7a:32:bd:56:b5:95:
50:90:76:51:a0:cc:46:c5:f6:91:1a:5b:0f:5b:b5:
6a:b1:47:56:01:4c:04:d7:e7:c8:6f:6c:32:9c:90:
8c:9a:2b:62:c0:98:28:48:bc:99:d8:ac:da:3a:06:
ca:c4:ce:2a:a3:37:35:28:4f:7c:ed:e6:86:77:77:
ae:4f:4a:ed:33:d4:70:b5:59:4b:bf:37:04:54:20:
8d:f9:ea:39:78:d7:20:1a:78:0d:57:5f:1a:ae:a8:
21:2b:ca:d4:4e:c6:1d:66:45:c8:0b:46:14:48:e0:
20:98:94:a1:6e:c9:e9:18:9c:7c:76:e5:60:4c:30:
22:23:47:24:13:25:1d:21:2b:fc:f0:b7:33:65:b5:
68:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EF:AE:0C:FA:8E:35:48:21:B6:75:BC:50:E3:D8:A8:18:FF:72:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2B639E4391C11ECB368336CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.128.0/17
Signature Algorithm: sha256WithRSAEncryption
78:bf:bd:6a:0a:dd:32:19:b5:b4:df:49:0d:f9:93:e4:3b:2b:
1c:74:74:9c:20:e5:9f:72:73:98:db:c9:31:f8:56:d7:85:cb:
54:e2:e6:07:f1:a3:d7:b4:0d:de:c6:6c:10:06:8d:41:c9:1c:
db:08:59:4a:24:ed:cc:37:8e:34:2a:3b:2a:f4:f9:84:89:68:
6a:76:04:c6:81:c4:75:d8:99:3b:5a:04:2d:56:e0:8e:05:4c:
a4:2e:67:1d:08:83:de:37:a1:41:38:d8:2c:51:86:79:03:20:
18:d2:37:98:c6:3d:9b:88:38:d2:26:65:e2:f2:bc:ab:07:85:
09:12:44:2b:f9:8f:79:7a:a5:af:82:d6:f6:21:64:5d:97:dd:
4b:f7:77:48:7e:1f:1f:ca:8a:b1:27:01:63:60:1e:31:d6:23:
0f:32:bf:16:fd:5b:21:5d:26:2c:d0:49:3e:a6:09:86:8d:d5:
15:40:20:56:86:3b:0f:48:34:d0:9e:52:58:56:ca:36:71:d4:
03:63:ce:b5:60:bb:e6:3e:4b:8f:ff:4e:8e:ca:14:45:b7:de:
ec:65:f6:00:be:9b:cb:d6:27:05:1a:59:5f:38:92:b0:b5:08:
f8:37:b3:e0:9c:0b:7b:ee:65:c3:a8:e0:83:6a:d6:7d:f1:88:
7e:2c:49:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-fra.rpki-client.org