Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F19021AAE57F11EB96E2F32DF8AEA228.roa
File: F19021AAE57F11EB96E2F32DF8AEA228.roa (raw, json)
Hash identifier: /QmUZSUiwbt3Toou2yuuVGythV9JhabMvjNlHJva86o=
Subject key identifier: FA:E8:3D:CF:85:73:D0:B9:1E:64:41:AE:47:66:29:DA:D2:2F:25:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 07F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F19021AAE57F11EB96E2F32DF8AEA228.roa
Signing time: Thu 15 Jul 2021 15:18:44 +0000
ROA not before: Thu 15 Jul 2021 15:18:40 +0000
ROA not after: Sat 09 Jul 2022 15:18:40 +0000
asID: 397630
IP address blocks: 154.202.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2032 (0x7f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:18:40 2021 GMT
Not After : Jul 9 15:18:40 2022 GMT
Subject: CN=60f051d4-48c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6d:ad:e5:45:bf:ad:13:3a:ed:e4:fa:9b:07:
52:a6:24:a1:d9:b6:0b:6c:22:d3:09:59:a7:67:89:
e0:ee:29:5c:5f:d7:b6:44:a0:5f:16:41:33:37:e8:
08:d3:b5:da:17:3f:5e:76:b4:22:cc:7c:7a:88:ba:
f0:7f:fb:9a:25:81:82:05:37:32:89:c6:11:c0:91:
1a:f7:6f:c1:8b:2f:a6:04:cd:7f:3b:93:92:cf:2b:
54:4b:75:bd:a0:8b:d7:1c:63:1e:61:46:1d:55:52:
a1:4f:68:9c:80:a2:47:fe:f7:d1:96:08:f0:6a:ac:
78:24:0e:d1:07:d0:a6:f1:63:f8:b2:7d:6c:b7:c9:
e7:3b:3c:65:7c:7c:9f:d9:29:37:8e:32:2a:f2:3a:
3a:78:24:56:c0:98:bd:4e:89:a6:d2:b8:0b:0f:a2:
9c:36:b5:b1:65:53:37:17:47:cb:da:49:55:80:da:
d3:2d:a5:da:a7:a3:77:66:58:1b:8b:07:65:8e:61:
b7:f3:b9:07:e4:7e:46:cb:a8:d3:c8:ce:f3:61:66:
6b:07:70:b5:95:ab:a9:11:9e:e1:ce:3b:82:23:1f:
9d:c3:ef:e2:be:36:ff:64:d3:fa:cd:dc:d8:bf:4f:
4b:84:26:dd:3f:9e:9f:f0:d8:50:5d:90:f7:3d:31:
9c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E8:3D:CF:85:73:D0:B9:1E:64:41:AE:47:66:29:DA:D2:2F:25:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F19021AAE57F11EB96E2F32DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.121.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:0f:e1:e2:d4:24:ef:74:4c:27:86:69:77:ee:15:57:9f:7c:
07:bf:f6:47:02:0b:f6:60:e6:01:95:d9:4a:b7:ca:fe:a5:6e:
cb:50:24:29:2d:34:10:05:06:49:66:23:e5:4b:6e:6c:09:5f:
18:78:4f:d9:b3:1a:a4:eb:1a:db:95:27:b8:e4:62:7e:6a:93:
84:9d:51:6d:3a:d4:f5:ed:1b:20:55:fa:b0:14:ff:1d:9f:6b:
87:67:88:94:a0:7e:c1:eb:ac:a6:75:41:3e:12:d7:34:86:1c:
52:23:59:7b:4f:9e:9a:a4:6f:fe:4c:0a:7c:53:f6:38:41:aa:
ee:d8:ea:b0:8f:e4:eb:99:ce:8b:a3:2a:d6:d4:9b:bb:e1:52:
01:e8:68:bf:44:c0:de:6c:19:e2:6d:26:82:0d:4e:ad:93:f6:
47:1d:29:0d:c9:ba:ff:79:37:3f:a2:b1:1b:ba:83:37:4d:7c:
0c:3e:d1:a7:ab:36:56:08:84:fa:a1:41:ad:f1:ab:1f:29:11:
ce:e0:0c:3d:c2:2e:f1:92:74:00:da:bb:fd:89:33:e3:14:53:
3c:f1:34:91:ae:89:24:7d:d4:16:a5:a7:eb:ad:f3:30:59:3d:
cd:aa:ea:0e:1b:3d:e3:16:2a:73:12:14:43:be:d1:16:5b:f4:
09:d8:e4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-fra.rpki-client.org