Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBF63944F9B711EB940C3D53D8A014CE.roa
File: FBF63944F9B711EB940C3D53D8A014CE.roa (raw, json)
Hash identifier: 1vgM7M299rfHMWVjF+n0ytiCoA52FeTjFmBHqsf6cvU=
Subject key identifier: 4C:35:8F:6F:2C:D0:3F:31:F6:F4:41:54:88:80:8B:B4:4A:4B:4A:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 089E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBF63944F9B711EB940C3D53D8A014CE.roa
Signing time: Tue 10 Aug 2021 08:50:56 +0000
ROA not before: Tue 10 Aug 2021 08:50:35 +0000
ROA not after: Mon 10 Oct 2022 08:50:35 +0000
asID: 398993
IP address blocks: 154.195.80.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2206 (0x89e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 10 08:50:35 2021 GMT
Not After : Oct 10 08:50:35 2022 GMT
Subject: CN=61123df0-935a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:e6:fb:da:fc:fa:f5:e4:5a:6e:b2:58:70:
65:df:23:f8:e5:da:7d:60:3d:73:38:00:18:4a:a1:
04:c2:65:9c:43:a5:44:aa:eb:1b:bd:09:79:25:f6:
79:c2:10:24:8c:83:68:60:e5:ed:ee:2a:cb:6a:b5:
95:a8:dd:89:d1:98:b2:b7:3d:e2:43:24:c0:86:7b:
8d:83:46:0c:82:59:b2:76:04:87:1e:c2:3e:94:53:
07:8c:45:21:45:37:b9:72:c7:57:15:8f:24:b1:e7:
9d:2c:60:dc:25:ad:49:ad:3d:48:b3:66:0b:16:9d:
f6:d9:d3:4a:fc:1c:50:51:87:06:0c:58:4a:3b:bf:
11:4e:90:05:50:a5:91:88:3c:c3:32:f3:db:22:a4:
0a:93:20:e7:19:f1:38:90:91:b6:96:a6:80:7e:e7:
b1:af:82:19:07:6e:16:7f:7c:22:50:97:85:ca:c9:
8a:d7:8c:e2:17:6c:c3:3e:9b:82:21:ee:29:a2:36:
a0:1b:11:ef:78:a9:c8:9b:59:20:06:c8:17:db:c6:
a2:e2:5d:11:13:7b:76:24:55:68:a8:a0:7a:33:f8:
f1:f1:e2:95:01:a9:6b:ef:fd:8d:79:e9:47:16:50:
16:1f:90:c8:63:fc:d3:e6:a3:e2:44:2a:f5:ee:10:
a9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:35:8F:6F:2C:D0:3F:31:F6:F4:41:54:88:80:8B:B4:4A:4B:4A:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBF63944F9B711EB940C3D53D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.80.0/20
Signature Algorithm: sha256WithRSAEncryption
c9:c1:24:fd:e9:24:4a:c5:ab:7b:b4:ef:44:5e:ea:e2:98:9b:
bb:90:e1:b6:85:95:0b:d7:20:50:3a:77:7b:64:47:d8:95:19:
48:8a:ed:3c:46:65:00:cb:33:d5:12:61:3c:ff:92:22:32:e7:
ba:bc:ba:29:2f:16:96:de:2b:79:14:2b:33:24:e6:b9:fd:c0:
59:7b:93:d5:91:1d:81:5b:8a:45:3f:a2:28:11:97:77:f4:c7:
db:1c:d5:c8:cf:e8:95:ae:bf:3d:76:29:02:ab:14:da:7e:46:
70:62:af:ea:54:45:0a:4f:6e:17:e9:15:6d:01:0a:23:c9:b6:
55:78:7f:d5:58:9a:11:95:eb:fe:55:09:49:05:b3:16:b3:e2:
43:3a:58:79:20:0f:ce:8f:d5:7c:c2:4d:63:ae:b8:3b:db:87:
c5:26:11:b1:0a:f3:7f:df:f5:cc:bb:36:25:b7:1c:ec:a4:60:
be:db:10:49:66:3e:57:a8:12:87:1a:28:46:18:58:43:a3:15:
cd:73:6a:fa:cf:51:e0:27:84:bf:1c:14:b0:02:f9:d1:55:54:
38:49:3d:86:0e:95:3d:56:39:26:ed:14:3f:4b:ba:a6:c8:8d:
1e:0a:7e:92:58:7d:e9:4e:56:30:2c:00:14:5d:d5:9f:da:99:
07:6f:bf:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-fra.rpki-client.org