Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDE82F06E57F11EBB678132EF8AEA228.roa
File: FDE82F06E57F11EBB678132EF8AEA228.roa (raw, json)
Hash identifier: wySoAyjuACK8KnFQmOwjwKib9gwI9IekTH7lXxUW6aE=
Subject key identifier: 7F:96:E4:8E:FF:7F:C7:22:E8:D2:FA:53:A1:54:B2:AB:8A:2E:6F:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 07F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDE82F06E57F11EBB678132EF8AEA228.roa
Signing time: Thu 15 Jul 2021 15:19:05 +0000
ROA not before: Thu 15 Jul 2021 15:19:01 +0000
ROA not after: Sat 09 Jul 2022 15:19:01 +0000
asID: 397630
IP address blocks: 154.202.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2034 (0x7f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:19:01 2021 GMT
Not After : Jul 9 15:19:01 2022 GMT
Subject: CN=60f051e9-9f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:77:99:9f:10:f3:77:c5:b9:71:18:d9:af:
23:c2:7b:bc:7f:e1:01:c5:cc:cd:7b:12:1c:e7:aa:
95:9c:bb:04:5c:6b:6b:aa:33:71:4e:6f:c2:b3:d3:
36:76:98:be:44:01:27:91:00:f9:c8:63:fa:e2:9a:
76:e2:c6:52:89:3a:f6:f3:81:fe:17:a5:c9:1d:36:
73:20:67:ca:6e:5d:0d:99:b2:9c:33:ea:18:63:0c:
8c:ca:cb:f6:9e:ef:79:fb:99:54:99:39:bf:a1:c9:
c9:a5:1f:bb:58:90:cf:a6:1e:87:3e:57:86:a2:e8:
7b:bb:de:0b:40:5b:8a:15:77:ca:a5:5a:e7:1b:c1:
db:34:03:ee:da:1f:04:80:01:0c:a7:a0:7a:e0:f6:
4f:44:84:0b:c7:81:0b:14:35:e1:be:d0:98:c2:3b:
64:d0:2a:a6:43:83:30:52:65:09:af:b4:9b:af:1f:
33:f9:0e:00:a6:b7:76:c4:25:40:c6:18:f0:ea:01:
ae:95:73:d8:4b:32:16:57:82:ca:d2:ea:df:55:8e:
13:dc:58:4e:3d:ce:d2:23:6a:ef:f2:eb:b6:eb:80:
d6:ed:41:81:0e:c4:1c:91:82:49:25:0a:5a:c3:02:
74:53:b2:d3:f0:99:7b:a4:d0:cc:b7:6e:f7:a6:17:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:96:E4:8E:FF:7F:C7:22:E8:D2:FA:53:A1:54:B2:AB:8A:2E:6F:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDE82F06E57F11EBB678132EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.122.0/24
Signature Algorithm: sha256WithRSAEncryption
08:09:8b:d5:00:a2:b0:78:ba:99:d4:f1:f8:43:ad:68:13:64:
3a:26:46:31:e3:56:bb:d7:7e:c3:aa:fd:35:b9:db:3a:f8:da:
37:1a:e9:3c:9a:2f:11:d5:76:a6:e5:3f:a0:30:c4:d3:a6:e6:
a0:f5:b9:be:24:23:c7:23:d1:59:7f:8a:98:7a:fb:17:82:b0:
c4:71:0d:12:ef:cf:85:39:0e:5a:4b:7b:0f:d8:3d:3c:0d:7c:
2c:73:a3:64:a0:a3:c9:30:ae:17:05:f2:4e:1d:9a:d1:fa:e5:
58:5c:a9:2b:52:32:97:01:10:be:c3:87:80:22:fb:10:a9:98:
2e:7f:dc:f2:31:46:de:ae:6e:49:54:64:d6:72:c2:58:bc:58:
15:ae:47:28:e6:c5:3b:df:b3:a8:68:71:e5:11:ca:05:e1:f6:
f4:93:16:06:98:e4:72:c6:fe:6a:86:13:54:ae:a1:c1:d5:73:
eb:bd:4b:02:56:48:7e:a3:75:a1:52:79:8f:01:ba:70:25:4c:
2c:bd:74:e1:32:c1:d1:2c:51:af:72:22:f0:c6:0b:73:a7:9a:
12:1a:a4:74:f8:36:55:d7:54:6a:6e:98:b9:91:43:80:b3:cb:
ea:78:45:2b:15:99:ae:16:bb:50:e1:ac:35:a8:05:79:c8:e1:
a2:6a:fe:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-ams.rpki-client.org