Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/57041AF8E4A111EB9454847CF8AEA228.roa
File: 57041AF8E4A111EB9454847CF8AEA228.roa (raw, json)
Hash identifier: sekEwa3BkTiGK/kih30oevJyWlIN25D0W/01nvyI5ik=
Subject key identifier: BA:EB:D0:82:0C:95:20:BA:A7:38:3D:49:4B:C2:21:8B:9F:16:23:F9
Certificate issuer: /CN=F36472E5AF/serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D
Certificate serial: 0898
Authority key identifier: 86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/57041AF8E4A111EB9454847CF8AEA228.roa
Signing time: Wed 14 Jul 2021 12:45:17 +0000
ROA not before: Wed 14 Jul 2021 12:45:10 +0000
ROA not after: Fri 14 Jul 2023 12:45:10 +0000
asID: 36874
IP address blocks: 105.233.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2200 (0x898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36472E5AF/serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D
Validity
Not Before: Jul 14 12:45:10 2021 GMT
Not After : Jul 14 12:45:10 2023 GMT
Subject: CN=60eedc5d-1bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:73:b4:6c:c4:30:5f:77:df:b9:d5:5f:40:
46:02:bb:61:c2:74:3a:84:6a:58:99:fb:a8:3e:19:
7f:51:84:bc:e2:2a:1e:66:72:cb:1b:cc:f5:57:87:
6e:f9:66:85:51:b5:ea:5e:c5:47:6f:bf:5d:9e:7a:
70:24:91:47:8c:63:5b:01:e6:50:20:e1:e4:a7:35:
66:fb:42:18:65:14:e6:5d:2e:c1:e7:00:a3:b0:24:
7e:3d:98:d3:2c:f3:c7:ff:88:48:f6:0b:b2:32:14:
e1:35:c7:cb:41:6d:d6:13:83:5e:63:90:4a:b5:c6:
b6:76:e9:97:44:36:0c:42:14:f9:fc:f3:e8:7b:72:
0f:f2:f5:1b:d5:f2:30:3e:9b:27:38:69:b9:96:9c:
b6:22:7a:7a:0f:0b:d6:cd:64:6e:41:12:db:57:df:
4c:3e:d2:f4:77:05:0c:ae:0c:64:86:b1:6e:2f:13:
06:bd:85:b1:9f:1b:d2:3a:14:9c:c0:47:06:c6:ab:
b7:04:51:cb:73:b1:3a:77:30:5b:d3:05:3b:5f:8b:
88:d1:1c:5f:a2:b6:e8:43:c0:c6:d2:b8:01:d2:b4:
49:8c:8d:10:72:20:7e:c9:d7:43:8c:ff:9e:30:be:
1c:0f:be:25:44:24:5a:9f:1f:fe:50:e0:4f:30:22:
45:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EB:D0:82:0C:95:20:BA:A7:38:3D:49:4B:C2:21:8B:9F:16:23:F9
X509v3 Authority Key Identifier:
keyid:86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/57041AF8E4A111EB9454847CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.233.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:5e:77:d1:ff:96:eb:4d:ec:8a:69:89:c1:24:44:a6:bc:1d:
3c:7b:7f:09:2f:7c:1b:3f:29:53:4b:74:cc:34:e6:14:e6:5e:
4b:4c:76:06:08:d1:0b:5b:9a:c2:57:5c:29:7b:f5:8f:b6:5a:
7a:16:45:97:b5:be:73:ac:d6:45:dd:69:1e:e3:34:b3:f4:4f:
99:5e:78:e2:ed:3f:6d:76:ce:9f:f0:66:7d:12:a4:ca:65:26:
2e:4a:f4:c5:db:ea:a5:b9:ee:e5:df:cd:2e:81:30:c6:5f:45:
c2:cd:8a:f6:a0:ee:75:40:c7:b1:9d:b2:db:da:cd:43:d1:35:
1a:f0:02:1a:fa:e3:18:03:9c:5f:19:ee:54:21:77:15:e6:d0:
79:5d:35:a6:fc:63:1c:72:5b:ab:1d:4b:6b:3e:da:ef:17:43:
45:8d:86:86:d8:20:1a:e3:eb:81:26:a0:e6:f2:95:61:87:78:
cd:7e:93:50:d1:69:05:00:67:51:d6:86:e8:7c:ce:74:bc:60:
46:9e:c4:56:f8:45:1a:e9:7e:09:08:f2:b2:1d:2e:a7:bc:d7:
96:bb:21:9b:2f:43:51:8d:73:50:db:44:59:f6:8f:f4:a7:39:
6c:18:17:76:17:b8:e5:3e:53:3d:e6:1a:e9:67:4a:b8:38:59:
d1:5d:aa:7e
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICCJgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcyRTVBRjExMC8GA1UEBRMoODZGRUQyRUQxOUMyMDY3QTQ4MjIyMUI2NDVENjBD
NDVBNEQ1NkE5RDAeFw0yMTA3MTQxMjQ1MTBaFw0yMzA3MTQxMjQ1MTBaMBgxFjAU
BgNVBAMTDTYwZWVkYzVkLTFiYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCV63O0bMQwX3ffudVfQEYCu2HCdDqEaliZ+6g+GX9RhLziKh5mcssbzPVX
h275ZoVRtepexUdvv12eenAkkUeMY1sB5lAg4eSnNWb7QhhlFOZdLsHnAKOwJH49
mNMs88f/iEj2C7IyFOE1x8tBbdYTg15jkEq1xrZ26ZdENgxCFPn88+h7cg/y9RvV
8jA+myc4abmWnLYienoPC9bNZG5BEttX30w+0vR3BQyuDGSGsW4vEwa9hbGfG9I6
FJzARwbGq7cEUctzsTp3MFvTBTtfi4jRHF+ituhDwMbSuAHStEmMjRByIH7J10OM
/54wvhwPviVEJFqfH/5Q4E8wIkUBAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUuuvQ
ggyVILqnOD1JS8Ihi58WI/kwHwYDVR0jBBgwFoAUhv7S7RnCBnpIIiG2RdYMRaTV
ap0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MkU1LzhEQjY1NDdBNTZENzExRTU4NTM1NkQ2MEY4QUVBMjI4L2h2N1M3
Um5DQm5wSUlpRzJSZFlNUmFUVmFwMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2h2N1M3Um5DQm5wSUlpRzJSZFlNUmFUVmFwMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3MkU1LzhEQjY1NDdBNTZENzExRTU4NTM1NkQ2MEY4
QUVBMjI4LzU3MDQxQUY4RTRBMTExRUI5NDU0ODQ3Q0Y4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwBp6TANBgkqhkiG9w0BAQsF
AAOCAQEAL1530f+W603simmJwSREprwdPHt/CS98Gz8pU0t0zDTmFOZeS0x2BgjR
C1uawldcKXv1j7ZaehZFl7W+c6zWRd1pHuM0s/RPmV544u0/bXbOn/BmfRKkymUm
Lkr0xdvqpbnu5d/NLoEwxl9Fws2K9qDudUDHsZ2y29rNQ9E1GvACGvrjGAOcXxnu
VCF3FebQeV01pvxjHHJbqx1Laz7a7xdDRY2GhtggGuPrgSag5vKVYYd4zX6TUNFp
BQBnUdaG6HzOdLxgRp7EVvhFGul+CQjysh0up7zXlrshmy9DUY1zUNtEWfaP9Kc5
bBgXdhe45T5TPeYa6WdKuDhZ0V2qfg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org