Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF6F9068488911EC81B2C03ED8A014CE.roa
File: FF6F9068488911EC81B2C03ED8A014CE.roa (raw, json)
Hash identifier: qhPYJ+IlLbIATauttc0ZdSv3fZfzb4TaCrvxwug6ONw=
Subject key identifier: 9B:83:3C:0E:82:6C:0D:89:4D:ED:E0:25:48:43:A9:AD:A5:33:49:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0D90
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF6F9068488911EC81B2C03ED8A014CE.roa
Signing time: Thu 18 Nov 2021 16:10:08 +0000
ROA not before: Fri 19 Nov 2021 16:10:04 +0000
ROA not after: Sat 19 Nov 2022 16:10:04 +0000
asID: 139879
IP address blocks: 154.80.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3472 (0xd90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 16:10:04 2021 GMT
Not After : Nov 19 16:10:04 2022 GMT
Subject: CN=61967adf-81da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:11:5e:98:b7:b0:5f:68:5e:ca:c7:de:81:
d7:a5:4d:d1:0b:7d:95:b9:a1:0d:91:1b:00:1a:72:
53:7c:40:c1:5d:b2:14:c2:07:4a:b7:26:00:91:c0:
3a:56:1c:88:de:c8:55:0f:37:b9:22:85:23:91:2c:
7a:30:c4:84:05:f9:10:4a:ea:7f:e5:46:26:d5:f0:
b1:8e:ba:26:b7:b3:83:7e:0d:54:e5:55:7e:10:da:
fe:59:47:93:3e:00:20:e8:aa:19:72:2f:8e:92:c1:
75:b0:ea:61:7b:b5:4b:c7:38:50:e0:75:54:5d:e2:
78:04:6c:d8:33:76:ae:98:5b:ae:e3:fe:25:58:f4:
bc:d2:9e:4e:8b:a4:fa:2a:6b:56:07:01:8d:ef:20:
33:23:7c:0e:8f:c7:d1:31:e2:40:b5:9a:3b:a8:01:
da:ea:32:35:c8:e5:73:80:83:8e:6d:bc:69:7d:6f:
8b:ee:ee:1d:12:e1:15:a7:bc:78:60:67:70:c6:4c:
d3:f0:fc:c0:45:0b:63:4b:d9:f5:3c:a1:89:2b:1b:
d7:b5:07:ae:ae:bd:59:82:ba:36:4d:4e:cd:f7:be:
75:78:cf:f9:b8:1a:60:28:c0:c6:e7:2d:e5:81:33:
3e:87:21:30:89:be:46:75:8c:ac:4e:66:8c:c9:d3:
43:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:83:3C:0E:82:6C:0D:89:4D:ED:E0:25:48:43:A9:AD:A5:33:49:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF6F9068488911EC81B2C03ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.66.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d5:15:00:29:88:ea:16:d4:38:84:4a:ac:62:73:ff:aa:ff:
e7:0d:58:9d:ef:cb:64:54:6c:d4:f4:bb:47:46:1a:d3:98:b6:
8f:15:bd:30:64:af:a3:64:58:e9:b0:2c:ee:02:66:51:a0:2e:
e2:b3:19:a2:89:9f:1a:37:55:19:01:ef:0e:38:59:3d:73:a7:
39:20:a0:e6:7d:5d:46:7f:b9:21:fc:12:5b:14:5d:74:e5:03:
e5:4f:8c:c8:5b:16:87:b7:54:b9:a0:27:95:89:29:6a:a6:76:
b8:96:9a:53:89:ca:6f:07:20:23:32:5e:92:80:f8:d1:e4:c0:
9b:29:c2:63:cd:59:78:86:88:e5:9e:73:99:68:02:da:2d:82:
40:e7:bd:c7:02:5d:64:38:46:db:6e:aa:1b:c8:58:bf:2d:06:
e9:b5:3d:b2:2a:4b:d7:a9:83:27:f3:4c:77:59:d0:b3:17:f3:
9a:da:90:d2:b5:57:79:0f:29:0f:b6:5d:15:0d:df:b9:82:d7:
09:7e:a5:d4:61:06:54:9c:6b:64:39:56:04:30:bc:4a:6e:8b:
83:03:30:51:0b:18:33:95:b8:1b:09:1f:38:ea:a8:32:49:16:
3f:98:e3:49:e6:2e:02:5e:b8:c5:62:6d:7d:62:0c:d8:e3:94:
bf:77:1c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-ams.rpki-client.org