Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA5196524B9111ECB30D910ED8A014CE.roa
File: FA5196524B9111ECB30D910ED8A014CE.roa (raw, json)
Hash identifier: QQfdVMoUTkz8L2gmDVTasKUmQyIe5l8Zo5x6EaCG6zs=
Subject key identifier: 86:64:98:0B:3C:FC:01:0A:C2:3A:5F:ED:A1:64:D6:6E:3A:8E:D7:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 121E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA5196524B9111ECB30D910ED8A014CE.roa
Signing time: Mon 22 Nov 2021 12:44:49 +0000
ROA not before: Mon 22 Nov 2021 12:44:45 +0000
ROA not after: Sat 19 Nov 2022 12:44:45 +0000
asID: 9009
IP address blocks: 154.92.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4638 (0x121e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 12:44:45 2021 GMT
Not After : Nov 19 12:44:45 2022 GMT
Subject: CN=619b90c1-2b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:25:0a:20:52:4a:be:d1:ed:0b:3e:b4:f3:23:
61:a9:02:6a:a0:69:d4:68:77:94:a4:42:54:72:91:
d7:a5:ff:d3:95:54:a6:09:12:4a:5b:e6:bb:fd:c9:
46:f0:08:fc:7d:c4:64:00:37:f5:07:18:3f:ff:d1:
e6:85:40:6c:b4:9b:36:c7:4f:44:58:33:94:e5:9c:
7f:ae:f6:50:30:3a:e4:43:1d:a6:37:04:0c:b3:41:
75:c1:df:4f:db:98:88:60:ea:06:a3:fd:41:85:e2:
00:94:f2:63:92:52:e9:85:e6:3d:dc:65:27:f1:5c:
0a:97:91:8e:ba:a6:8d:57:d6:17:1b:6b:5d:3e:3b:
ad:6f:ac:54:ad:99:d2:64:4f:4f:ed:05:13:45:b6:
f2:77:58:24:4b:98:9d:b5:71:87:c8:ff:a7:71:5d:
df:cf:8f:c0:f3:3e:21:93:a0:e2:bb:cf:54:d4:02:
f0:f4:9c:d8:17:00:af:8b:bf:af:8a:a4:e0:48:d0:
70:30:93:d4:9f:00:d8:1e:17:50:7c:e1:44:dc:ab:
66:74:42:e1:bf:c2:5a:a1:37:f4:c1:58:91:b3:79:
46:06:7a:a0:ef:60:88:67:f3:78:5d:3c:e4:d6:f2:
e9:ad:ce:b1:38:5f:41:1b:b9:7f:01:ef:de:0e:5e:
0e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:64:98:0B:3C:FC:01:0A:C2:3A:5F:ED:A1:64:D6:6E:3A:8E:D7:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA5196524B9111ECB30D910ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.117.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:46:f2:e1:f0:39:c9:0e:c1:36:7f:49:75:b2:98:36:f8:07:
ff:12:58:8f:31:8d:e0:1f:bd:73:59:e0:a6:4e:20:12:09:80:
70:77:e0:77:8d:bf:39:40:c3:32:f5:e4:12:af:12:39:cf:b6:
52:82:fa:4c:bf:52:89:71:c5:32:74:9b:15:6f:1b:d7:88:63:
07:d0:f9:04:5c:16:26:8e:db:0e:c4:9b:66:4d:db:71:9d:bd:
e7:40:bd:a0:ad:2e:b7:1e:fe:05:2b:e2:b7:1d:6b:b8:26:b4:
c3:15:3d:07:a1:db:5e:a1:c7:a2:e0:5d:06:72:43:31:7f:f8:
02:fc:c5:19:d8:b2:2f:b8:45:7f:11:a8:c1:54:8d:00:12:a1:
a3:2b:eb:a7:51:3c:dc:d4:db:c7:a3:29:ca:3b:38:27:4f:26:
f2:be:7d:69:7d:09:7f:51:a4:58:0c:b4:ed:53:2a:13:89:cd:
a2:45:43:c4:04:29:d2:a8:91:2a:fa:03:8f:c1:bc:07:97:a7:
68:d1:e4:52:25:b2:96:6b:6d:67:d7:ee:6b:ec:17:5e:a0:60:
ae:d2:d4:6c:bf:5f:cf:bd:4e:00:18:64:1f:1a:e4:a6:11:40:
c0:5e:cd:71:19:f4:85:5c:74:c6:37:a9:fa:c7:59:bf:ba:af:
d3:69:6b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-fra.rpki-client.org