Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89811466488A11EC9BD3D73FD8A014CE.roa
File: 89811466488A11EC9BD3D73FD8A014CE.roa (raw, json)
Hash identifier: JxZvt8QUU1Bc0E7s3VO2opgLEXZu5+o6YKEm5wZGckI=
Subject key identifier: 22:DA:91:21:F2:76:2A:42:97:E6:B0:9F:7E:C7:58:21:25:AD:66:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0D9A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89811466488A11EC9BD3D73FD8A014CE.roa
Signing time: Thu 18 Nov 2021 16:13:59 +0000
ROA not before: Fri 19 Nov 2021 16:13:56 +0000
ROA not after: Sat 19 Nov 2022 16:13:56 +0000
asID: 139879
IP address blocks: 154.80.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3482 (0xd9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 16:13:56 2021 GMT
Not After : Nov 19 16:13:56 2022 GMT
Subject: CN=61967bc7-69f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:ce:3f:ff:0c:dc:9e:d3:e6:cb:6c:0d:00:
79:0f:da:13:76:ab:0d:a2:6d:b8:8f:e7:f1:1c:8e:
3c:b1:53:99:9c:cc:75:7c:b4:11:11:6e:14:e5:1d:
37:a8:42:db:80:bb:2b:74:d2:f4:95:8e:bd:47:2f:
8e:c0:63:c5:ef:03:43:e2:45:ba:f1:34:59:18:6b:
f6:63:86:02:d8:c8:3e:9a:3b:8b:92:65:1b:d4:48:
3e:4b:55:88:67:45:5f:08:0b:5a:73:90:a6:01:aa:
d2:fe:e3:9e:9d:78:23:84:2c:e0:79:a9:bc:b4:8a:
6a:0b:57:9d:22:00:b6:a7:0a:6f:0b:27:33:9a:1f:
8a:18:1e:cd:f2:6d:46:15:5c:66:b4:11:26:81:cd:
bb:10:0a:c4:74:b9:da:67:09:f9:67:a8:69:08:b2:
28:cb:68:9a:28:98:31:4e:0a:a9:f1:95:f7:b0:bf:
16:bc:3f:7a:99:64:c9:81:b0:5c:8a:3d:3c:51:85:
b3:33:13:66:a8:31:03:6a:d1:8f:68:9c:e4:ed:46:
2b:2e:19:cd:b4:8c:7c:53:c3:ad:2a:0c:b0:51:b5:
d6:ff:03:64:a8:05:ed:a0:d8:5a:c9:fc:f6:70:42:
50:7d:74:6c:7b:18:9d:6f:d2:94:88:c2:42:e5:38:
d3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DA:91:21:F2:76:2A:42:97:E6:B0:9F:7E:C7:58:21:25:AD:66:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89811466488A11EC9BD3D73FD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.71.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:9c:3e:b9:31:bc:e9:be:a9:cc:ed:91:e5:40:b4:90:12:98:
61:bd:04:db:60:da:2a:b9:c5:e8:23:22:fa:42:04:df:c7:c2:
9e:15:15:a4:0d:78:68:30:f3:bb:89:39:31:14:78:ba:27:2d:
d3:df:dd:56:59:1b:07:bd:d1:b9:1b:ca:f6:4b:0e:1d:f2:b9:
5f:78:df:3b:f4:a9:c7:a6:e7:40:fa:10:82:46:67:c6:59:02:
2f:db:19:56:cc:b0:3b:8c:c9:3f:31:79:47:41:48:93:c6:0f:
e2:cb:09:da:0b:0f:34:36:19:4c:ec:f2:87:b0:f7:9f:ad:69:
95:0d:09:e3:39:34:ad:41:1b:fb:dd:b6:b9:70:e4:a1:43:d0:
be:e6:99:0c:17:89:b3:21:25:ac:7a:96:7b:6a:df:53:87:dc:
b3:88:b5:ce:69:91:6b:55:07:b4:02:0e:16:9b:37:60:eb:af:
52:4b:f0:fe:2f:48:88:67:c2:9b:23:3a:af:7a:72:06:f7:43:
ab:42:c9:f0:1b:b5:78:69:9d:16:90:d7:c1:29:fe:ad:f2:55:
49:e8:c5:f9:4a:ed:08:c6:f8:b8:17:1f:64:c0:92:98:c0:51:
58:e3:f6:24:ec:60:49:5b:7d:70:8b:8f:c4:5f:f3:b5:90:a5:
d3:47:88:ea
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDZowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTExMTkxNjEzNTZaFw0yMjExMTkxNjEzNTZaMBgxFjAU
BgNVBAMMDTYxOTY3YmM3LTY5ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCqs4//wzcntPmy2wNAHkP2hN2qw2ibbiP5/EcjjyxU5mczHV8tBERbhTl
HTeoQtuAuyt00vSVjr1HL47AY8XvA0PiRbrxNFkYa/ZjhgLYyD6aO4uSZRvUSD5L
VYhnRV8IC1pzkKYBqtL+456deCOELOB5qby0imoLV50iALanCm8LJzOaH4oYHs3y
bUYVXGa0ESaBzbsQCsR0udpnCflnqGkIsijLaJoomDFOCqnxlfewvxa8P3qZZMmB
sFyKPTxRhbMzE2aoMQNq0Y9onOTtRisuGc20jHxTw60qDLBRtdb/A2SoBe2g2FrJ
/PZwQlB9dGx7GJ1v0pSIwkLlONNXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUItqR
IfJ2KkKX5rCffsdYISWtZiAwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4Lzg5ODExNDY2NDg4QTExRUM5QkQzRDczRkQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaUEcwDQYJKoZIhvcNAQEL
BQADggEBAE6cPrkxvOm+qcztkeVAtJASmGG9BNtg2iq5xegjIvpCBN/Hwp4VFaQN
eGgw87uJOTEUeLonLdPf3VZZGwe90bkbyvZLDh3yuV943zv0qcem50D6EIJGZ8ZZ
Ai/bGVbMsDuMyT8xeUdBSJPGD+LLCdoLDzQ2GUzs8oew95+taZUNCeM5NK1BG/vd
trlw5KFD0L7mmQwXibMhJax6lntq31OH3LOItc5pkWtVB7QCDhabN2Drr1JL8P4v
SIhnwpsjOq96cgb3Q6tCyfAbtXhpnRaQ18Ep/q3yVUnoxflK7QjG+LgXH2TAkpjA
UVjj9iTsYElbfXCLj8Rf87WQpdNHiOo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-fra.rpki-client.org