Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7B1EF18A44311EC861FB9CD5A40D577.roa
File: F7B1EF18A44311EC861FB9CD5A40D577.roa (raw, json)
Hash identifier: 3du+ADcFGgv7V5q+P1imcOCSrsgjpgqMKgBistlEhZY=
Subject key identifier: 25:1A:6E:54:6B:29:A7:49:68:22:9F:77:7F:16:03:DF:4A:53:EA:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1534
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7B1EF18A44311EC861FB9CD5A40D577.roa
Signing time: Tue 15 Mar 2022 09:40:37 +0000
ROA not before: Tue 15 Mar 2022 09:40:28 +0000
ROA not after: Sat 31 Dec 2022 09:40:28 +0000
asID: 133201
IP address blocks: 154.205.32.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5428 (0x1534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 15 09:40:28 2022 GMT
Not After : Dec 31 09:40:28 2022 GMT
Subject: CN=62305f15-08a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5c:55:eb:00:d5:c8:f6:4d:d1:27:0b:c3:2e:
5c:9b:ed:ee:53:b2:3d:84:db:c5:b5:a9:83:b7:f7:
ac:f8:f3:0f:ad:ec:1c:f3:6c:b8:58:56:17:a5:f3:
1f:0a:09:07:a7:fb:ce:8f:d7:e0:88:3e:30:c5:01:
73:96:08:28:f4:64:4c:d8:ef:30:52:f6:7b:e4:22:
57:38:a8:6f:a7:9d:18:56:ba:bd:5b:7c:32:c7:02:
25:14:e0:71:1d:5f:31:55:d9:ce:c9:24:2f:81:ef:
9f:ea:ca:af:88:75:57:b7:e0:82:51:36:0c:14:92:
d5:0e:99:9f:53:61:28:5c:60:5d:2b:6e:71:0b:9f:
06:63:e9:68:44:c4:9e:7d:5c:88:3b:72:b5:74:ee:
ec:b1:32:8e:d5:f6:d4:cf:6e:7d:56:3d:89:51:74:
dc:fa:64:2d:c0:13:a9:77:b6:c2:21:bd:9f:61:6f:
09:fb:fd:35:93:d6:78:f2:df:94:20:e7:45:da:89:
9c:ae:31:57:d8:f6:3a:76:68:c5:11:06:a7:1b:60:
cd:ff:76:f8:b3:a4:41:51:2c:79:38:db:94:eb:35:
05:9e:92:fa:f5:11:f4:65:45:41:de:30:36:46:45:
7c:d4:d0:f5:47:9d:3d:33:c1:7a:ce:76:1e:7b:3d:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1A:6E:54:6B:29:A7:49:68:22:9F:77:7F:16:03:DF:4A:53:EA:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7B1EF18A44311EC861FB9CD5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.32.0/21
Signature Algorithm: sha256WithRSAEncryption
53:9e:bf:1a:a9:5e:69:3e:2d:21:0d:1a:a6:e4:9b:42:12:27:
ba:ad:d3:a7:18:8f:81:7b:f5:90:a3:76:e1:d7:19:91:7c:91:
ba:0c:ef:47:6d:b3:c2:54:a6:56:a4:f9:3f:60:6d:af:42:9c:
75:ee:9c:8e:d0:08:3c:0d:c0:81:88:b4:7c:60:4c:59:f4:3c:
d0:6a:09:a0:64:12:67:8b:2c:ff:42:64:1a:98:cc:b2:46:26:
0f:35:ba:db:73:54:1b:8d:58:c5:62:da:f9:28:d2:e2:ef:ef:
9d:a4:1d:e3:0e:b8:71:23:fa:c0:b5:ce:5f:c7:7a:ed:21:91:
09:2a:cf:ec:80:cc:c8:4b:56:52:b3:d1:69:18:64:84:ab:20:
d8:b8:12:fc:b7:55:a0:ff:b5:fa:fa:c2:fc:64:c7:53:c8:73:
ad:9e:e9:09:a5:20:1c:a5:7a:71:4e:a5:0d:fe:9f:45:67:5d:
11:dd:e1:0a:19:1c:57:42:3b:69:ac:fa:15:11:39:d4:15:79:
cd:fe:09:91:8c:69:af:f0:1e:8b:8c:71:bb:5a:64:3a:c7:ca:
e1:c9:b6:44:ea:ef:83:de:16:b8:06:7e:eb:89:c8:fc:d9:e2:
c4:eb:6c:af:8e:1a:e6:b7:85:8b:d7:57:bf:e4:30:f9:a5:e6:
c5:b4:d1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-fra.rpki-client.org