Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80DC5ECA144011ECBDC8227DD8A014CE.roa
File: 80DC5ECA144011ECBDC8227DD8A014CE.roa (raw, json)
Hash identifier: MqrB5MlPRyedNnYIAbbOYpRTnuD/BHZQk7F5bfHBF38=
Subject key identifier: 45:AF:F7:0B:08:C8:16:F0:93:7C:97:A9:1B:51:B7:33:80:14:66:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0C38
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80DC5ECA144011ECBDC8227DD8A014CE.roa
Signing time: Mon 13 Sep 2021 03:13:01 +0000
ROA not before: Mon 13 Sep 2021 03:12:58 +0000
ROA not after: Sun 13 Nov 2022 03:12:58 +0000
asID: 135600
IP address blocks: 154.91.40.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3128 (0xc38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 13 03:12:58 2021 GMT
Not After : Nov 13 03:12:58 2022 GMT
Subject: CN=613ec1bd-fe07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:5b:05:f5:72:e3:eb:f6:17:d2:5e:12:57:
88:34:46:f0:bc:44:a2:88:54:6c:64:b0:41:ce:e5:
c7:2c:f0:7d:d6:60:4d:46:bf:46:f5:df:bb:43:e4:
9e:da:2b:ee:48:dd:c4:17:6d:89:87:2b:b9:0e:b4:
4c:13:c1:0f:01:45:53:3b:2f:ab:d5:c3:76:44:bc:
3b:7d:4e:cf:09:09:d4:9b:d4:3d:41:95:d5:5a:63:
cb:73:93:a5:ae:25:86:f4:de:b1:a1:21:9b:aa:ac:
8f:db:ee:30:0c:f8:f6:8a:91:0b:3e:e7:9b:8c:a6:
0e:ab:91:31:d9:9a:3f:09:a4:3a:3a:1b:a8:1d:51:
4b:41:1d:c4:32:a7:42:32:31:06:12:4f:7a:1e:5d:
db:dd:07:e0:87:b1:52:5d:bd:3c:42:ec:cc:79:d3:
9c:a1:3d:81:78:22:56:fc:12:62:fa:dd:4e:9c:f4:
83:c0:c9:bc:e4:95:cd:73:cc:66:a7:d9:f7:67:86:
6b:80:93:87:59:8a:3c:84:55:46:6d:7a:90:a6:25:
6a:8f:f9:b7:16:ca:76:0f:a4:14:66:45:80:3e:90:
83:1e:da:0d:b7:71:f7:8c:6c:ea:7e:dc:05:1b:32:
91:be:ce:62:a7:30:61:ef:64:ac:a3:ed:5e:35:cf:
0b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AF:F7:0B:08:C8:16:F0:93:7C:97:A9:1B:51:B7:33:80:14:66:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80DC5ECA144011ECBDC8227DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.40.0/21
Signature Algorithm: sha256WithRSAEncryption
10:ea:d3:12:1c:db:2a:de:c8:82:3a:b1:19:9d:87:bd:ce:92:
4d:5b:05:f7:dc:95:cc:4b:52:e1:75:6a:8f:fe:0d:08:f9:b8:
9c:ed:4c:e1:1b:09:12:98:e0:a1:5f:27:14:47:37:7e:ea:f8:
01:07:76:c0:40:70:5a:ed:a2:0a:11:31:c9:21:e6:d2:b6:92:
bd:c7:b7:b4:a2:3d:19:c4:53:39:e9:f2:7d:a3:2f:b4:6b:0e:
2f:6c:fe:f7:a2:ec:36:1d:2e:7e:24:9a:86:9f:8f:eb:f3:00:
3e:72:fb:c8:43:c7:49:c7:f6:a0:c3:f1:51:70:ab:19:88:6e:
60:00:b3:fa:fa:8e:d8:6b:55:d5:c1:60:27:91:63:c6:9e:22:
d9:5e:c8:d4:eb:f7:7d:c2:b0:24:e6:40:9b:1f:40:8e:9b:10:
21:66:e8:d0:4b:5b:19:f0:70:76:f3:09:d1:3a:44:bd:af:12:
34:d6:7d:92:de:af:6b:e3:50:64:37:78:f5:85:c1:94:98:bb:
1d:34:93:9c:0a:34:d1:75:f3:02:9b:18:0f:4b:81:6e:cc:fd:
12:53:13:68:b0:a2:97:6e:c2:3d:6b:30:66:59:e5:f2:af:e4:
82:57:ff:96:c9:a8:96:82:6c:02:2a:7f:03:96:b9:d7:0b:ea:
03:0e:0f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-fra.rpki-client.org