Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E94A98B48D6311EB877DC75FF8AEA228.roa
File: E94A98B48D6311EB877DC75FF8AEA228.roa (raw, json)
Hash identifier: ENiqvRXD5rlj3e6M5+V+ZyjRUQL5T5x7Ur//nrLBcQg=
Subject key identifier: 6C:54:6C:35:A6:E0:62:95:24:1B:21:72:4C:0A:3F:B0:91:DD:46:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0568
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E94A98B48D6311EB877DC75FF8AEA228.roa
Signing time: Thu 25 Mar 2021 12:16:22 +0000
ROA not before: Thu 25 Mar 2021 12:16:17 +0000
ROA not after: Fri 18 Nov 2022 12:16:17 +0000
asID: 10103
IP address blocks: 154.197.32.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1384 (0x568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 25 12:16:17 2021 GMT
Not After : Nov 18 12:16:17 2022 GMT
Subject: CN=605c7f16-bae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:e2:bb:76:0c:f2:84:53:11:ad:b4:42:9c:
bd:19:b6:7a:00:4d:af:fa:f3:4f:2f:1d:52:65:42:
b7:9f:fb:6a:5c:56:95:03:c6:91:53:92:6e:4c:5f:
cd:82:e1:06:c0:a4:92:3d:cb:94:59:bc:8c:00:7f:
30:6c:53:1c:a3:fb:04:1e:cc:06:2f:15:9c:9e:73:
f2:e5:ca:cc:16:db:16:8c:bd:e6:08:e9:f7:10:55:
24:fc:26:3d:9f:b1:a2:ba:e4:34:14:6d:54:8f:af:
eb:fb:95:ca:62:97:3e:d2:b3:97:49:8a:bb:bc:90:
27:e4:c0:a6:e8:46:6e:e9:cf:a0:7b:37:4f:a4:ff:
bf:f1:b1:53:9a:3c:55:61:7d:44:9e:15:27:ec:ed:
03:8b:47:0f:ad:1a:c2:c4:a9:c1:77:77:0e:5e:3a:
85:bc:f0:55:9d:e9:37:15:91:27:98:e3:84:d2:5e:
af:8a:77:28:62:6c:62:0d:f5:78:9c:6b:25:0c:fd:
fb:bc:63:a2:de:14:1e:d1:26:c1:7d:05:cb:28:55:
97:17:01:e0:fc:b8:b8:8b:23:94:43:f8:f6:42:83:
4d:86:94:47:56:73:d5:b7:84:aa:78:67:75:99:fb:
3f:92:92:f1:ca:8b:aa:d8:fd:77:df:92:e9:cc:1a:
45:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:54:6C:35:A6:E0:62:95:24:1B:21:72:4C:0A:3F:B0:91:DD:46:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E94A98B48D6311EB877DC75FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.32.0/23
Signature Algorithm: sha256WithRSAEncryption
86:48:65:05:34:71:ba:4d:7b:07:19:be:3a:1f:74:d3:e7:21:
21:fc:3b:73:b5:02:91:7e:ae:5a:84:2d:d0:53:1e:b6:eb:31:
32:0f:85:5d:5f:13:88:57:ca:14:74:17:a0:0d:b0:f8:b4:83:
9f:01:ba:9c:00:2e:92:2b:c9:66:e0:b2:30:4e:c2:ed:cb:d3:
1b:b9:b8:ad:6e:40:a3:9e:e2:2a:be:0e:a3:20:ff:f6:de:38:
e3:c4:88:64:06:3c:6d:6e:40:27:32:37:69:35:f8:cd:bf:19:
e9:d2:93:a0:ad:aa:86:8a:18:93:53:82:ec:dd:92:d8:c0:4e:
9e:28:eb:d4:73:87:80:24:21:d5:0c:e3:c6:cc:b6:7e:92:c7:
b5:1f:8a:ad:5e:93:c6:00:c4:b6:b6:3d:13:99:78:d0:26:4a:
a1:04:20:24:64:f4:86:25:17:7c:e1:d2:45:7c:de:b5:7c:89:
dc:3d:9d:79:2a:81:76:a6:4f:de:33:0e:47:a0:1a:d8:01:8f:
cf:a6:57:0d:6c:ce:13:83:fd:f2:b7:29:28:17:fc:47:f5:04:
9f:c1:46:ce:40:3f:02:e1:17:4c:34:53:4c:c6:26:49:17:e8:
7c:bd:41:a9:0d:cc:57:7f:20:29:3f:5c:33:6f:af:a7:15:3e:
6e:3a:cf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:13 2023 by rpki-client on console-ams.rpki-client.org