Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E49F0692E57E11EBA7D9342CF8AEA228.roa
File: E49F0692E57E11EBA7D9342CF8AEA228.roa (raw, json)
Hash identifier: aRQ3fTgNGIsVDFgVBm65WuToJ1lpCdlHFyjjPBVocpw=
Subject key identifier: 45:2C:81:BC:64:A1:5A:1E:56:5A:69:E3:A8:C3:AC:06:0C:F4:C8:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 07D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E49F0692E57E11EBA7D9342CF8AEA228.roa
Signing time: Thu 15 Jul 2021 15:11:13 +0000
ROA not before: Thu 15 Jul 2021 15:11:09 +0000
ROA not after: Sat 09 Jul 2022 15:11:09 +0000
asID: 397630
IP address blocks: 154.202.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2000 (0x7d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:11:09 2021 GMT
Not After : Jul 9 15:11:09 2022 GMT
Subject: CN=60f05011-eab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d4:df:83:85:21:cf:24:65:89:63:5d:f9:6b:
1b:38:fd:83:41:d2:7a:8e:b2:45:9d:71:e0:b3:8c:
74:3b:98:53:bd:c7:3d:e2:f7:1a:3a:51:8a:8d:a7:
9c:09:63:d0:bd:fa:6f:08:4b:3e:44:25:2a:91:a2:
f0:a0:5d:87:b4:a7:f7:d4:14:de:8c:37:16:5e:d7:
b5:3f:60:56:cf:46:01:af:96:e3:79:84:75:7f:b3:
b3:40:f2:e6:e1:21:c1:f4:6b:80:e2:05:68:0c:df:
52:f3:0b:ea:72:48:a8:f1:f7:a4:eb:f4:a8:da:6d:
59:fa:b0:69:ff:8d:9a:61:ee:45:fc:6e:3e:64:ea:
9e:bc:21:99:d9:47:92:b0:b6:15:03:bf:53:9e:03:
e7:4e:ab:8b:36:23:a7:c3:fc:be:0f:43:ee:67:f2:
c0:a8:41:bd:dc:6f:55:4d:75:60:69:21:c1:e9:f9:
47:65:8a:ca:58:d3:28:ac:65:25:b6:06:19:ec:0f:
fb:cb:ee:b0:8e:16:0b:01:85:98:7a:d3:46:ed:7d:
61:91:b1:63:fa:46:89:7a:28:81:37:8f:55:78:e2:
42:d3:92:6c:a3:15:6d:57:32:27:51:e0:10:75:72:
fb:c1:9c:36:2f:12:de:61:0f:72:02:18:0b:4c:5b:
e6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2C:81:BC:64:A1:5A:1E:56:5A:69:E3:A8:C3:AC:06:0C:F4:C8:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E49F0692E57E11EBA7D9342CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.104.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:db:9b:b3:dd:3d:d2:d8:52:31:ed:6b:31:33:1d:54:66:38:
2c:90:7e:47:5e:ad:cb:60:7a:25:32:8d:38:e2:90:97:8f:e2:
98:e1:3b:17:00:1d:92:1d:c2:8c:a0:2c:de:ab:a1:00:52:0e:
0a:11:84:65:b8:fa:d3:e9:73:81:05:75:b0:27:27:92:ef:2b:
04:bb:bb:05:9b:40:4a:5e:25:bb:49:7d:c8:b4:53:e6:23:7c:
ee:c9:9e:63:7e:e7:47:e3:78:c4:d5:ad:6b:bd:78:f3:34:ba:
4c:bd:f5:47:7d:64:2c:57:41:5d:e0:a4:0b:f4:25:c3:c1:9d:
9e:50:03:55:b5:9f:6e:e7:ab:a1:13:97:65:c3:b3:51:f3:d4:
1e:e5:93:ee:24:0e:d9:46:f8:eb:9b:0e:73:18:68:d7:63:9e:
01:f5:1b:00:f1:53:37:0f:9a:de:e6:a0:d3:29:f7:7c:d0:6f:
77:af:04:c6:ca:ec:92:21:f3:a8:a7:43:65:57:56:e8:c5:14:
2c:80:38:7f:2f:ed:87:73:55:19:14:ca:a3:1c:33:06:8f:d4:
ad:0b:04:5c:ab:5d:66:3f:fb:42:a7:3c:c8:7f:10:8e:2d:66:
49:1a:60:78:6b:bc:33:8e:45:04:17:67:15:e3:be:2c:73:9d:
dd:a3:0c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-fra.rpki-client.org