Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/678D12FE488711ECAE07EE38D8A014CE.roa
File: 678D12FE488711ECAE07EE38D8A014CE.roa (raw, json)
Hash identifier: ivCLOXMBubsFSTbEoRpC4QAy3VnUHiVHMF674anEWv0=
Subject key identifier: 23:8A:23:AB:00:AA:B2:41:25:37:C9:A5:C4:60:46:AC:D1:0A:95:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0D60
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/678D12FE488711ECAE07EE38D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:51:34 +0000
ROA not before: Fri 19 Nov 2021 15:51:30 +0000
ROA not after: Sat 19 Nov 2022 15:51:30 +0000
asID: 139879
IP address blocks: 154.80.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3424 (0xd60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 15:51:30 2021 GMT
Not After : Nov 19 15:51:30 2022 GMT
Subject: CN=61967686-364a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c7:f6:b8:72:7d:01:d3:2e:48:45:34:ce:7e:
1b:b7:1a:82:11:39:b6:06:03:ad:f8:d1:69:72:95:
26:6d:e0:68:b2:11:e1:97:3a:03:87:a8:c2:54:7b:
1a:bf:5f:39:f7:2c:fa:e2:8f:f1:9d:16:bb:49:e4:
26:3f:5e:df:6d:4d:6e:ca:38:81:d4:87:47:86:6c:
68:a7:0f:25:a7:a7:7e:72:76:f4:73:62:b6:6f:5c:
70:ca:4e:e6:e4:d3:3c:39:62:32:28:9f:89:5b:9f:
5e:eb:b4:a4:d8:eb:21:44:77:c4:bb:04:c2:81:a3:
a1:2f:af:31:48:aa:a0:ff:28:64:e9:4c:32:56:7d:
a9:36:83:f1:21:75:33:9a:a9:59:f3:90:95:dc:09:
cc:9d:e2:93:6a:a9:29:df:74:e8:4c:d9:6b:0a:5c:
b1:1b:40:d7:66:96:57:4e:06:57:67:bc:87:e5:0d:
cc:15:e7:87:2e:e7:eb:fa:f7:99:d6:5e:cc:d5:02:
31:52:fd:76:4d:01:89:17:27:bd:52:69:98:03:2d:
25:f1:20:4d:ab:ed:96:a1:48:72:c9:6a:b8:68:d3:
54:12:07:4b:7f:a4:51:f7:e8:6a:00:6a:7d:1e:3d:
a6:24:9d:4e:dd:ab:e4:cc:c5:58:98:26:55:34:8a:
3d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8A:23:AB:00:AA:B2:41:25:37:C9:A5:C4:60:46:AC:D1:0A:95:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/678D12FE488711ECAE07EE38D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.42.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:e2:d7:e5:29:b3:53:71:3e:f0:bb:2e:8b:82:46:8a:7e:11:
a0:2a:6a:4a:bb:ec:11:d4:0d:27:6f:da:23:39:3f:7d:87:58:
2c:28:a9:d2:6d:31:40:21:3f:eb:48:7f:fc:66:83:6a:11:19:
97:d5:89:80:22:c8:a2:e9:c4:5e:3f:9a:54:f5:87:21:95:ab:
6a:5c:3c:be:6a:79:12:42:f8:d1:95:4f:34:be:24:f4:28:05:
46:bf:6e:61:3a:0c:04:c1:3e:ef:67:02:9c:77:a4:ef:9b:ce:
78:ed:66:77:8e:50:60:16:6b:57:ee:e0:49:23:57:00:d9:90:
05:43:5a:b9:27:95:4b:a8:c3:4d:6e:f9:19:87:a3:c0:bc:0b:
a8:7d:38:8f:1f:12:96:75:10:09:e3:cd:35:fc:2b:7a:0c:98:
01:01:8d:b8:84:d4:2d:a0:b3:13:e7:77:b1:f0:a4:69:7f:f4:
91:3f:09:8e:c5:66:7c:3b:74:03:2a:f8:b8:c6:b2:d8:9e:b3:
59:b2:c0:8c:13:8e:20:61:e6:e6:b4:fc:fe:1f:ba:02:7f:3a:
34:9d:a3:74:b1:5f:f4:ef:c4:e5:0e:47:30:36:24:13:dc:e3:
c9:5e:52:2d:69:d3:cf:ac:09:c6:02:05:8c:36:cc:46:70:78:
79:d4:30:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-ams.rpki-client.org