Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1F82E0A488911ECA6487C3ED8A014CE.roa
File: E1F82E0A488911ECA6487C3ED8A014CE.roa (raw, json)
Hash identifier: aiqUf7W7G4Rlfvv4aZFVVik/c7XfVWP0k1pXP1AdYuM=
Subject key identifier: B6:0D:BD:9B:7D:42:77:D2:28:9D:61:F9:19:12:99:72:B8:8D:5C:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0D8E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1F82E0A488911ECA6487C3ED8A014CE.roa
Signing time: Thu 18 Nov 2021 16:09:18 +0000
ROA not before: Fri 19 Nov 2021 16:09:15 +0000
ROA not after: Sat 19 Nov 2022 16:09:15 +0000
asID: 139879
IP address blocks: 154.80.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3470 (0xd8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 16:09:15 2021 GMT
Not After : Nov 19 16:09:15 2022 GMT
Subject: CN=61967aae-59e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:eb:2d:f2:21:85:39:48:4a:9a:aa:3e:ab:
6b:10:45:77:1a:c8:47:fc:70:06:4d:7f:81:15:46:
69:64:07:af:60:58:b9:84:0b:84:b8:8e:91:3f:bf:
89:2a:a4:41:57:82:9a:5c:db:2c:d3:b5:01:d2:6a:
a8:4c:3e:2a:c7:26:68:2c:e8:e7:2d:b7:93:43:43:
3c:f8:03:3f:80:7d:fb:20:ce:05:f8:57:d7:60:b1:
a4:0c:03:26:78:c6:3b:17:9b:7b:57:33:77:55:64:
5a:af:54:bd:6f:d3:b5:05:ff:37:05:67:10:f3:8c:
84:a1:d7:d6:4b:15:9d:81:e6:f9:cb:bd:d2:42:cd:
8f:15:75:ed:38:e8:54:d1:29:80:00:44:7c:49:55:
d7:c7:14:08:fe:03:75:cd:2a:55:c9:45:28:0f:b7:
68:e1:3e:6f:db:40:e3:ae:a2:b3:3f:71:08:2a:02:
88:24:5c:88:9f:6f:4b:6a:ab:d7:c9:46:e6:fc:b6:
e7:ed:89:2e:51:da:a5:b3:f0:ac:8c:21:dc:dd:28:
1e:57:6d:b0:a9:eb:69:76:65:93:8d:6f:e0:dc:7a:
b6:c8:47:62:6d:6b:9f:50:3f:cb:42:63:c3:a3:40:
51:bf:4b:81:93:98:65:a6:37:21:34:85:ad:0d:93:
94:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0D:BD:9B:7D:42:77:D2:28:9D:61:F9:19:12:99:72:B8:8D:5C:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1F82E0A488911ECA6487C3ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.65.0/24
Signature Algorithm: sha256WithRSAEncryption
21:75:a8:8a:3a:6c:21:2d:06:ea:5b:67:ee:f4:4d:78:4f:b6:
98:71:3d:0a:90:14:c7:9d:08:c8:89:ba:86:57:f7:1e:bc:f6:
3d:1d:31:50:d2:ed:71:a6:17:0e:7d:92:85:96:a7:4f:a1:12:
69:5c:15:89:e0:71:39:fd:da:f4:e4:ef:d1:93:41:55:0e:ef:
ac:9a:72:c4:1a:c3:08:80:4f:69:0b:8d:6c:fc:70:d9:c3:bd:
e9:c3:d8:f1:98:de:44:ce:5d:a9:c3:40:d2:77:88:f2:88:ca:
a4:65:14:e8:58:8e:57:11:95:ca:b9:39:55:b3:d8:8c:1a:ae:
89:4d:c1:87:a1:08:12:31:d6:02:d2:a7:95:f3:d1:76:13:1a:
0d:8f:24:25:04:08:49:67:6e:86:e4:43:d5:76:b2:96:b7:0f:
ac:32:23:96:35:b0:c0:a1:db:f3:1b:e8:21:71:d8:5e:cd:9b:
b4:b5:b3:31:72:94:2d:d3:55:e5:17:0c:e4:a6:cd:6a:c8:86:
b6:bd:87:46:ea:34:cc:bd:62:38:8b:66:e3:02:a7:bd:ce:46:
b8:cc:f2:09:98:3a:d6:88:bc:53:75:69:49:cd:5b:33:41:53:
af:3e:e4:93:3a:fe:3b:4f:5f:fb:1a:cd:b9:f1:34:93:7e:62:
6f:20:d0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-fra.rpki-client.org