Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/659F7B265BBF11ECAF94E8DC5A40D577.roa
File: 659F7B265BBF11ECAF94E8DC5A40D577.roa (raw, json)
Hash identifier: wqXhbCF2j6QsDaNn92/TMpuUkgN+rSnl3InAcM290fA=
Subject key identifier: D6:C7:DB:42:85:58:09:3E:CB:3B:2B:15:2B:6C:54:9E:B5:FB:59:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 13D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/659F7B265BBF11ECAF94E8DC5A40D577.roa
Signing time: Mon 13 Dec 2021 02:50:14 +0000
ROA not before: Mon 13 Dec 2021 02:50:10 +0000
ROA not after: Fri 30 Dec 2022 02:50:10 +0000
asID: 133201
IP address blocks: 154.204.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5075 (0x13d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 02:50:10 2021 GMT
Not After : Dec 30 02:50:10 2022 GMT
Subject: CN=61b6b4e6-8548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:ed:96:5a:be:72:05:aa:21:3f:f3:1c:6e:
92:da:56:88:06:74:ab:9f:99:41:6e:3e:88:66:3e:
45:60:13:4d:9f:b2:6d:7a:ad:31:75:a7:94:fb:68:
f0:22:40:21:19:84:43:c8:92:0c:73:3a:a0:45:92:
da:d6:66:7c:fd:01:8d:c2:d7:d8:24:d9:b1:d3:87:
f6:01:52:81:69:58:28:b6:9e:b0:f0:22:1b:aa:a6:
e7:7e:97:ef:9c:c8:86:d3:ad:b3:9d:b0:46:83:93:
8e:65:9f:93:78:94:04:26:09:c4:58:5d:2b:cb:7c:
14:58:9c:59:a9:6d:bd:1a:1a:2e:4b:73:d6:b7:f1:
d3:36:63:ac:d3:f3:2a:9f:45:b7:a6:d0:03:4d:ba:
0b:e0:e0:b1:83:44:be:b4:00:a8:d3:40:93:d4:3b:
24:aa:51:70:31:7b:19:7f:d5:a5:15:12:5d:57:28:
28:6c:11:fc:70:64:20:d9:01:82:4b:c1:9c:b6:93:
ad:42:46:f5:68:ec:ac:0f:97:cd:29:4a:96:0b:aa:
d0:9b:b7:c6:5f:9e:5e:55:26:37:29:7e:f0:59:9a:
27:63:0e:69:c3:24:ee:4f:e5:86:27:40:28:3b:e9:
55:28:08:4d:df:ac:c6:7c:27:c6:8f:5d:80:bb:91:
41:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C7:DB:42:85:58:09:3E:CB:3B:2B:15:2B:6C:54:9E:B5:FB:59:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/659F7B265BBF11ECAF94E8DC5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.80.0/24
Signature Algorithm: sha256WithRSAEncryption
74:66:71:98:32:5d:01:bf:df:d4:5b:24:f7:ca:ab:c5:35:a9:
d6:c1:e6:10:72:05:1e:11:94:97:38:6c:1c:f9:52:27:97:cb:
21:98:70:5d:01:f0:92:2c:34:a3:94:05:65:d4:4e:15:7f:9f:
b2:ed:fc:5e:76:ee:0d:3a:44:f9:79:e9:34:20:b9:5f:1c:7b:
18:05:7b:9f:96:ee:ff:2f:5e:c4:59:76:fb:a4:ff:4a:a9:4b:
cc:f2:84:af:0c:c6:8b:77:cc:5b:1e:3d:c1:eb:be:14:7e:45:
00:6a:8e:2d:93:c2:54:a9:15:fa:8d:c4:d0:0d:e7:3f:2b:8d:
3d:36:e7:53:44:79:b8:57:7c:c0:8c:fa:ea:1f:3e:b1:18:e7:
49:74:69:b2:a8:f3:0b:3f:a8:12:26:b8:40:89:e2:60:7b:19:
f2:85:5d:6d:2f:07:bb:7b:14:94:dd:93:b0:6a:9b:2a:dd:0e:
9c:03:13:04:3d:14:8b:5d:42:4e:27:4c:87:d5:b3:39:34:4b:
a4:9e:53:0f:6e:6a:73:82:d5:bc:bb:86:91:ea:32:03:8d:95:
68:fe:44:fa:15:c5:56:d7:8e:ce:ab:fc:42:25:f7:14:ff:7f:
49:1d:4e:9a:3b:a4:83:5e:33:c1:29:c1:53:db:d8:a8:50:3b:
80:5a:8d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-fra.rpki-client.org