Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7000167A5BBF11EC8761F8DC5A40D577.roa
File: 7000167A5BBF11EC8761F8DC5A40D577.roa (raw, json)
Hash identifier: X8GM0GoEbS6d66Bz588xqjsE3mpUH3+kPjPMLLPlv/Y=
Subject key identifier: 58:89:E3:27:F4:D0:2B:88:FF:AF:DB:89:87:28:9B:42:69:E2:0E:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 13D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7000167A5BBF11EC8761F8DC5A40D577.roa
Signing time: Mon 13 Dec 2021 02:50:32 +0000
ROA not before: Mon 13 Dec 2021 02:50:29 +0000
ROA not after: Fri 30 Dec 2022 02:50:29 +0000
asID: 135097
IP address blocks: 154.204.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5077 (0x13d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 02:50:29 2021 GMT
Not After : Dec 30 02:50:29 2022 GMT
Subject: CN=61b6b4f8-03a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:01:28:e9:3b:87:f3:ad:6a:b0:4e:39:ea:
31:b9:cc:44:c9:11:db:59:2e:2c:78:4b:27:1b:3f:
df:7b:5a:d7:17:0a:0d:0d:56:69:04:e6:a0:7e:67:
92:b2:b2:e9:bd:32:9d:5d:61:6d:e6:e1:96:55:45:
40:c1:3e:99:78:00:86:f4:16:79:43:0b:bc:c3:66:
cb:ae:42:52:8c:d2:32:e0:34:30:d3:6c:51:b4:b5:
ea:94:d6:b0:57:d6:7f:77:e7:99:61:bb:03:8b:65:
b5:8d:51:ce:eb:5d:d6:6e:4f:f4:b6:ed:03:f3:a9:
33:6c:62:e8:02:36:46:88:01:e9:d9:0f:8b:be:ea:
21:95:9a:88:d0:1b:63:dc:a8:f1:81:80:0e:67:5c:
ee:4f:6b:e2:ce:8f:92:1a:d8:a8:f2:89:7c:df:34:
b3:57:c9:20:f4:17:88:71:f4:a0:6a:30:d9:9a:3f:
91:92:58:f8:d1:33:37:60:09:5d:87:40:46:bb:10:
cf:64:61:35:df:b4:44:a5:29:03:15:09:7b:66:34:
76:fb:fe:06:14:68:79:40:1b:11:76:e7:e2:0b:44:
06:12:40:04:a6:a4:86:12:dc:94:dd:a1:25:89:76:
76:3f:83:d4:40:e6:e3:96:a7:2c:31:64:3b:4d:83:
c6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:89:E3:27:F4:D0:2B:88:FF:AF:DB:89:87:28:9B:42:69:E2:0E:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7000167A5BBF11EC8761F8DC5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.80.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:6d:53:f5:f9:1d:4d:cd:bf:5d:d5:ad:62:64:be:96:b1:e8:
6c:6b:e0:59:5b:82:69:f9:ad:84:51:38:c9:0b:b1:c5:87:0c:
86:15:32:f8:4d:9d:fe:09:8a:2a:8f:67:4f:75:1d:a4:e6:29:
49:72:41:16:84:05:e6:d0:e9:a8:4b:27:51:76:a4:cb:05:3b:
4a:a8:7a:fe:54:67:39:ed:e3:70:90:80:04:4c:67:46:5b:e4:
6d:29:8a:f4:e9:00:8a:7d:31:6c:20:9f:95:c0:e8:a0:0e:93:
ef:95:46:12:f3:98:98:23:ee:88:48:78:59:5a:d8:9a:ce:ec:
fe:43:47:33:99:8d:a8:40:2c:0f:66:86:4f:9c:f5:14:96:92:
17:a3:0a:d8:c7:44:ae:e8:fa:87:3c:db:93:16:d9:75:f2:17:
45:65:b9:e2:22:e5:0e:c4:af:9a:04:5c:60:77:f4:08:30:1c:
c8:f4:ad:34:a8:23:4d:80:52:a1:96:93:7d:99:e8:73:60:f5:
b8:d8:57:cc:7d:80:67:26:81:54:05:2b:72:e5:de:07:65:80:
03:d7:32:85:2d:6c:23:17:07:dc:09:b4:ea:8d:f5:d6:1e:a5:
8c:98:8f:a7:81:27:c8:1d:12:de:a0:34:24:c1:b0:d1:1f:7e:
9c:ad:b6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-ams.rpki-client.org