Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8B5EB1A488511EC93B8A335D8A014CE.roa
File: D8B5EB1A488511EC93B8A335D8A014CE.roa (raw, json)
Hash identifier: zb9aG3GY17MDKnGk7h1rNJUZ+LPVfPzSBAISGZ7Ulgc=
Subject key identifier: 67:5C:5A:58:83:94:37:89:49:27:8C:2E:A5:E7:90:4C:DC:37:55:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0D44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8B5EB1A488511EC93B8A335D8A014CE.roa
Signing time: Thu 18 Nov 2021 15:40:25 +0000
ROA not before: Fri 19 Nov 2021 15:40:21 +0000
ROA not after: Sat 19 Nov 2022 15:40:21 +0000
asID: 139879
IP address blocks: 154.80.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3396 (0xd44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 15:40:21 2021 GMT
Not After : Nov 19 15:40:21 2022 GMT
Subject: CN=619673e8-9542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0a:87:a5:78:6e:b0:0e:b1:c3:1a:2c:d3:f6:
d3:06:98:49:be:d3:6e:20:1b:7b:ca:16:1d:c8:fc:
7a:1f:71:97:7f:89:08:92:29:da:08:99:d0:56:71:
24:be:f8:5a:5a:c3:ec:e2:a6:9b:4c:3a:ff:7b:ff:
35:93:33:3a:11:fb:6a:5e:58:7e:46:6b:3e:86:66:
5d:36:da:36:b9:77:58:f8:23:07:f9:7c:57:70:d9:
4e:b4:7a:42:bb:a1:cd:ad:6e:e1:88:3a:6a:8b:81:
e6:a1:c8:d8:55:3f:0d:aa:6d:ca:83:73:71:f5:e1:
bd:ef:f0:78:2c:26:60:0d:82:57:5f:8d:e8:eb:b1:
6c:5f:86:7d:63:54:3a:cb:b1:ad:c0:9b:21:1f:c4:
fd:78:9b:23:48:54:57:c2:a9:1b:41:ff:89:73:78:
d8:e2:ab:0b:3a:fe:0f:32:37:b3:87:65:47:c3:6a:
5a:0a:cc:b0:29:dd:f1:7b:a7:37:42:c8:3d:de:12:
01:60:0d:31:b9:74:57:97:a9:18:15:cb:2b:31:21:
41:4e:55:64:33:49:5a:6c:47:1d:25:1b:1e:01:5c:
66:83:90:ce:1d:35:0f:e3:ca:93:3c:73:47:91:28:
ee:ac:97:39:09:03:5b:08:fa:de:50:56:87:69:b5:
56:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5C:5A:58:83:94:37:89:49:27:8C:2E:A5:E7:90:4C:DC:37:55:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8B5EB1A488511EC93B8A335D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.28.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f5:1a:60:c4:32:6c:53:ef:74:13:57:c9:de:e5:dc:e8:8d:
96:11:86:0d:59:9d:54:e2:76:7d:75:48:8b:5b:c2:76:ab:18:
b4:14:55:2f:71:87:bf:ef:ad:ce:76:83:c0:a6:84:b3:42:dc:
7b:6f:d7:a7:22:e5:6e:d9:bc:b2:46:bb:60:19:61:30:a0:16:
e4:5f:9e:06:16:10:37:8a:91:b9:e0:76:33:85:66:c0:7f:d4:
7e:e3:fa:fb:32:0d:18:3c:92:83:6a:dc:38:a4:f6:6e:c8:23:
05:85:b5:8a:da:07:8b:e6:f9:dd:94:6d:d6:43:58:a7:66:b0:
70:c3:08:b4:32:0d:9d:a4:da:6b:47:31:2c:c6:c9:a0:b8:79:
3d:ed:12:af:22:73:5c:d8:4c:dc:90:a9:84:87:77:3b:17:d1:
64:c0:5c:9a:a0:e5:60:69:55:cc:be:32:e6:6b:fe:20:38:f0:
e3:24:1d:b2:ce:cf:87:16:c4:c4:26:99:88:dc:0f:6e:8b:2a:
10:71:cf:16:4a:35:2e:29:0b:20:b4:f0:d3:1c:cd:68:b0:7d:
ec:93:21:7e:c2:44:b3:9c:da:11:9c:5f:41:dd:2c:8d:e4:0f:
20:af:ae:c7:1d:18:60:25:8d:0f:64:a1:f7:76:11:2e:6e:01:
82:74:11:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-ams.rpki-client.org