Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618F6D/EF68296832EC11EB887FBC3BF8AEA228/E4255D9C32F011EB8BE9BF3FF8AEA228.roa
File: E4255D9C32F011EB8BE9BF3FF8AEA228.roa (raw, json)
Hash identifier: jEVJ0X0ksDed2hZj8oWKZHRq8lgZsY9YRpN7B0PTLTg=
Subject key identifier: 13:FC:4C:A6:AE:20:C3:4A:57:CA:C1:8E:95:0A:49:BF:BF:EE:1D:41
Certificate issuer: /CN=F3618F6DAF/serialNumber=5BAB25E8220990D573CC75C7B9A2B0A9BF75E360
Certificate serial: 02
Authority key identifier: 5B:AB:25:E8:22:09:90:D5:73:CC:75:C7:B9:A2:B0:A9:BF:75:E3:60
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/W6sl6CIJkNVzzHXHuaKwqb9142A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3618F6D/EF68296832EC11EB887FBC3BF8AEA228/E4255D9C32F011EB8BE9BF3FF8AEA228.roa
Signing time: Mon 30 Nov 2020 09:46:17 +0000
ROA not before: Mon 30 Nov 2020 09:46:10 +0000
ROA not after: Thu 30 Nov 2023 09:46:10 +0000
asID: 327725
IP address blocks: 154.72.13.0/24 maxlen: 24
154.72.14.0/24 maxlen: 24
154.72.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3618F6DAF/serialNumber=5BAB25E8220990D573CC75C7B9A2B0A9BF75E360
Validity
Not Before: Nov 30 09:46:10 2020 GMT
Not After : Nov 30 09:46:10 2023 GMT
Subject: CN=5fc4bf69-f4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:90:f6:21:c6:73:dc:88:ff:ef:d2:e5:f3:
40:9e:aa:e0:14:77:19:60:97:7c:52:d4:ad:9b:2f:
3e:38:55:fa:22:7c:c2:09:57:7b:a0:65:68:0a:3b:
18:66:01:a7:19:f5:3b:85:da:0c:41:05:2f:a9:08:
3a:d8:11:c2:73:c8:d6:a0:13:c4:c7:6f:5e:3b:32:
14:59:a7:ae:ef:d5:28:19:98:d8:4d:87:3b:a6:3f:
c5:43:a6:e0:82:a5:f4:52:3d:72:53:7b:28:a0:8f:
5b:c7:51:9a:eb:71:78:6a:bd:ac:67:5b:a0:28:3d:
6d:0d:74:1e:b6:24:5a:28:e2:fa:10:a6:c8:05:45:
ce:25:8a:40:f0:99:11:0b:a0:39:bf:60:a9:72:cd:
a2:81:12:53:8d:97:4b:6f:31:72:33:00:77:c2:7c:
42:1a:48:78:b9:4b:98:6e:57:7b:2d:7a:ec:06:57:
0c:23:bf:c7:fb:31:ab:35:a9:0c:aa:bd:42:68:c3:
90:78:e4:cd:c2:3a:c8:f2:7f:1d:b8:bc:d4:ef:51:
c1:a6:03:e7:e3:e0:49:0a:1c:d8:8f:ce:cc:ee:8a:
d2:81:60:45:a9:96:39:ef:72:6b:72:49:10:c6:c1:
89:70:2d:27:b4:08:ce:3e:be:fa:6c:98:3d:6b:9a:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FC:4C:A6:AE:20:C3:4A:57:CA:C1:8E:95:0A:49:BF:BF:EE:1D:41
X509v3 Authority Key Identifier:
keyid:5B:AB:25:E8:22:09:90:D5:73:CC:75:C7:B9:A2:B0:A9:BF:75:E3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3618F6D/EF68296832EC11EB887FBC3BF8AEA228/W6sl6CIJkNVzzHXHuaKwqb9142A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/W6sl6CIJkNVzzHXHuaKwqb9142A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618F6D/EF68296832EC11EB887FBC3BF8AEA228/E4255D9C32F011EB8BE9BF3FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.13.0-154.72.15.255
Signature Algorithm: sha256WithRSAEncryption
c4:a1:fa:a6:76:0f:b7:f0:72:ae:06:01:3c:59:d5:1f:04:e3:
77:67:a4:cd:b5:10:e0:48:58:df:e3:aa:1d:36:a2:4b:6a:b6:
d1:17:55:d7:7f:d5:6b:68:72:e3:e3:d4:e4:40:b2:49:52:35:
53:68:ba:d1:f9:c0:55:a9:ff:eb:a1:4f:53:70:de:9e:4f:b9:
3a:4e:2e:0d:e0:35:31:e2:ed:7b:f1:76:e5:ed:46:f4:03:d8:
88:11:3b:68:64:73:13:44:90:82:41:95:a3:9a:3c:76:c5:55:
a2:db:87:17:73:37:fa:14:87:f3:9d:55:32:94:d0:81:ea:4f:
49:fc:b8:eb:13:05:44:ab:5c:8b:13:78:7c:b4:59:50:7f:0c:
b6:f5:50:8f:b1:a3:4c:36:70:35:51:78:d3:49:94:ca:ce:07:
c6:35:bc:3d:79:c6:ee:0c:e6:72:20:55:21:f4:fe:87:00:b4:
b0:c9:49:9f:e9:b3:3d:bb:19:e3:70:cb:f5:65:7a:c4:21:24:
a8:7e:da:6b:c6:f4:6a:05:40:40:44:6c:34:91:cd:11:ca:22:
43:87:c0:b6:81:e7:ef:8a:0d:05:b8:0e:db:5e:b0:4a:75:45:
f6:74:6d:7c:bd:98:5f:2c:6f:41:98:be:0d:5e:2a:dd:ca:27:
e7:83:07:ff
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
OEY2REFGMTEwLwYDVQQFEyg1QkFCMjVFODIyMDk5MEQ1NzNDQzc1QzdCOUEyQjBB
OUJGNzVFMzYwMB4XDTIwMTEzMDA5NDYxMFoXDTIzMTEzMDA5NDYxMFowGDEWMBQG
A1UEAxMNNWZjNGJmNjktZjRhNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMDRkPYhxnPciP/v0uXzQJ6q4BR3GWCXfFLUrZsvPjhV+iJ8wglXe6BlaAo7
GGYBpxn1O4XaDEEFL6kIOtgRwnPI1qATxMdvXjsyFFmnru/VKBmY2E2HO6Y/xUOm
4IKl9FI9clN7KKCPW8dRmutxeGq9rGdboCg9bQ10HrYkWiji+hCmyAVFziWKQPCZ
EQugOb9gqXLNooESU42XS28xcjMAd8J8QhpIeLlLmG5Xey167AZXDCO/x/sxqzWp
DKq9QmjDkHjkzcI6yPJ/Hbi81O9RwaYD5+PgSQoc2I/OzO6K0oFgRamWOe9ya3JJ
EMbBiXAtJ7QIzj6++myYPWuaSyMCAwEAAaOCAq0wggKpMB0GA1UdDgQWBBQT/Eym
riDDSlfKwY6VCkm/v+4dQTAfBgNVHSMEGDAWgBRbqyXoIgmQ1XPMdce5orCpv3Xj
YDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MThGNkQvRUY2ODI5NjgzMkVDMTFFQjg4N0ZCQzNCRjhBRUEyMjgvVzZzbDZD
SUprTlZ6ekhYSHVhS3dxYjkxNDJBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVzZzbDZDSUprTlZ6ekhYSHVhS3dxYjkxNDJBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MThGNkQvRUY2ODI5NjgzMkVDMTFFQjg4N0ZCQzNCRjhB
RUEyMjgvRTQyNTVEOUMzMkYwMTFFQjhCRTlCRjNGRjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAmkgNAwQEmkgAMA0GCSqG
SIb3DQEBCwUAA4IBAQDEofqmdg+38HKuBgE8WdUfBON3Z6TNtRDgSFjf46odNqJL
arbRF1XXf9VraHLj49TkQLJJUjVTaLrR+cBVqf/roU9TcN6eT7k6Ti4N4DUx4u17
8Xbl7Ub0A9iIETtoZHMTRJCCQZWjmjx2xVWi24cXczf6FIfznVUylNCB6k9J/Ljr
EwVEq1yLE3h8tFlQfwy29VCPsaNMNnA1UXjTSZTKzgfGNbw9ecbuDOZyIFUh9P6H
ALSwyUmf6bM9uxnjcMv1ZXrEISSoftprxvRqBUBARGw0kc0RyiJDh8C2gefvig0F
uA7bXrBKdUX2dG18vZhfLG9BmL4NXirdyifngwf/
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org