Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/006BD64CF5C011EB9937D924D8A014CE.roa
File: 006BD64CF5C011EB9937D924D8A014CE.roa (raw, json)
Hash identifier: Y+WPQiO04LkXp2Tu+kVBzs0J0uUwdWgLaFthT4NFgKQ=
Subject key identifier: 8C:93:39:9C:13:04:94:67:50:6D:E6:E8:61:E8:3B:A3:DE:34:DF:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0882
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/006BD64CF5C011EB9937D924D8A014CE.roa
Signing time: Thu 05 Aug 2021 07:38:07 +0000
ROA not before: Thu 05 Aug 2021 07:38:03 +0000
ROA not after: Fri 04 Nov 2022 07:38:03 +0000
asID: 36365
IP address blocks: 154.223.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2178 (0x882)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 5 07:38:03 2021 GMT
Not After : Nov 4 07:38:03 2022 GMT
Subject: CN=610b955f-8a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7a:e4:06:2c:42:68:a0:b6:b2:4e:72:02:4b:
2d:dc:63:d3:30:fa:b3:84:bc:64:c8:ea:fd:b0:c1:
cd:c8:9d:4d:8f:d6:72:63:ba:c8:5f:6f:1a:85:51:
ed:44:58:b8:21:36:c0:0b:f2:d8:eb:b9:38:55:0b:
58:b8:42:46:a0:77:98:02:b3:22:7b:97:1b:3e:53:
dc:4e:f5:f0:d3:5a:be:a3:75:13:55:ad:00:ff:df:
70:ef:70:f1:66:9c:de:ed:a8:9f:94:e3:b6:08:26:
cf:02:97:cd:9f:ca:54:67:7b:31:ee:2c:cc:26:5c:
2c:ea:8e:a3:35:12:b6:4c:d8:3c:2a:5b:53:d7:f5:
d7:82:81:a5:d5:8d:8c:84:e3:ac:97:98:1b:ba:a7:
30:93:aa:62:d8:99:85:a9:79:c7:e2:33:4a:04:1d:
9e:df:78:0b:26:d3:73:4f:d9:ca:30:96:f9:a4:05:
29:bc:40:a2:04:91:6f:cd:a4:de:56:ac:79:b0:6b:
58:4e:23:29:9b:93:89:f3:88:99:08:9e:db:24:01:
62:22:ab:b4:9c:10:e5:39:41:89:81:04:c2:e9:b8:
1e:5f:45:6b:d6:91:51:66:66:34:18:6f:44:94:1b:
ae:bc:0c:f3:2b:1a:76:f0:54:30:2c:03:c3:15:dc:
44:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:93:39:9C:13:04:94:67:50:6D:E6:E8:61:E8:3B:A3:DE:34:DF:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/006BD64CF5C011EB9937D924D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.0.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a9:36:bd:33:24:8f:e0:7b:c2:d4:ef:b8:71:ba:6d:5e:13:
57:dc:97:fc:c0:61:ee:ec:5c:67:10:8e:a7:d1:be:7c:7f:7c:
0d:83:84:ec:2c:36:87:2d:78:d3:d2:62:51:9e:31:40:ba:64:
c7:29:b7:62:9c:ae:55:da:65:cb:e9:82:aa:b2:35:9f:31:1b:
61:46:2d:7b:a7:b1:1e:7c:8f:4c:a2:ac:ad:70:51:27:2c:20:
53:52:3f:ef:e5:b7:3f:ab:02:af:cf:84:38:66:9a:48:a0:a7:
3b:96:34:e5:58:9c:ca:41:ba:e3:9d:3e:85:45:8d:09:b2:34:
9e:5c:f2:73:8d:da:19:5d:83:ab:86:0b:64:34:bc:9b:f9:fb:
bd:b2:a9:fd:d0:02:ed:01:b8:ab:a3:32:9c:10:5f:e1:07:bd:
37:b6:89:36:b0:f4:91:da:6b:3c:21:f2:e7:74:09:81:22:c5:
fc:6e:02:7f:f3:81:3c:17:38:1a:d3:fc:88:b4:15:46:84:33:
79:13:15:c8:06:3b:5b:86:44:47:c9:3a:94:a7:35:3c:59:64:
5c:72:88:cc:f8:d3:5d:09:76:ad:02:2a:99:f2:84:a7:38:2f:
5a:43:1c:12:77:59:36:7f:43:67:d1:ed:37:4b:38:4a:cd:28:
f9:2e:20:81
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCIIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTA4MDUwNzM4MDNaFw0yMjExMDQwNzM4MDNaMBgxFjAU
BgNVBAMMDTYxMGI5NTVmLThhNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIeuQGLEJooLayTnICSy3cY9Mw+rOEvGTI6v2wwc3InU2P1nJjushfbxqF
Ue1EWLghNsAL8tjruThVC1i4Qkagd5gCsyJ7lxs+U9xO9fDTWr6jdRNVrQD/33Dv
cPFmnN7tqJ+U47YIJs8Cl82fylRnezHuLMwmXCzqjqM1ErZM2DwqW1PX9deCgaXV
jYyE46yXmBu6pzCTqmLYmYWpecfiM0oEHZ7feAsm03NP2cowlvmkBSm8QKIEkW/N
pN5WrHmwa1hOIymbk4nziJkIntskAWIiq7ScEOU5QYmBBMLpuB5fRWvWkVFmZjQY
b0SUG668DPMrGnbwVDAsA8MV3ERNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUjJM5
nBMElGdQbeboYeg7o94030QwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzAwNkJENjRDRjVDMDExRUI5OTM3RDkyNEQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa3wAwDQYJKoZIhvcNAQEL
BQADggEBAF2pNr0zJI/ge8LU77hxum1eE1fcl/zAYe7sXGcQjqfRvnx/fA2DhOws
NocteNPSYlGeMUC6ZMcpt2KcrlXaZcvpgqqyNZ8xG2FGLXunsR58j0yirK1wUScs
IFNSP+/ltz+rAq/PhDhmmkigpzuWNOVYnMpBuuOdPoVFjQmyNJ5c8nON2hldg6uG
C2Q0vJv5+72yqf3QAu0BuKujMpwQX+EHvTe2iTaw9JHaazwh8ud0CYEixfxuAn/z
gTwXOBrT/Ii0FUaEM3kTFcgGO1uGREfJOpSnNTxZZFxyiMz4010Jdq0CKpnyhKc4
L1pDHBJ3WTZ/Q2fR7TdLOErNKPkuIIE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-ams.rpki-client.org