Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07F2B220A44611ECAEA9C2D35A40D577.roa
File: 07F2B220A44611ECAEA9C2D35A40D577.roa (raw, json)
Hash identifier: 1EZ/IEKLAWtv5ABAFumEQBaLJhNBF/KxRjvw617Ixss=
Subject key identifier: 2F:72:B5:AD:1D:30:53:8A:12:4D:76:9E:A5:03:28:2B:E8:1B:A7:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1548
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07F2B220A44611ECAEA9C2D35A40D577.roa
Signing time: Tue 15 Mar 2022 09:55:23 +0000
ROA not before: Tue 15 Mar 2022 09:55:19 +0000
ROA not after: Sat 31 Dec 2022 09:55:19 +0000
asID: 133201
IP address blocks: 154.205.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5448 (0x1548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 15 09:55:19 2022 GMT
Not After : Dec 31 09:55:19 2022 GMT
Subject: CN=6230628b-0fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:76:4c:c1:82:6e:05:4e:2e:e2:c1:2b:83:c2:
ae:64:da:8b:2d:d2:d0:ae:3c:10:29:92:94:88:c7:
33:3b:0e:69:12:2e:a4:46:b8:74:73:90:e9:7b:ea:
9e:f1:07:88:91:93:6d:25:31:2d:a6:e2:9a:e4:44:
8c:6b:7c:f4:6b:ac:b6:fb:6a:dc:46:30:06:08:fb:
66:dd:8c:71:09:07:58:81:2e:65:67:03:40:ec:5a:
13:f2:a2:ed:ab:90:21:60:da:4f:a4:a6:3d:c8:77:
dd:1a:7b:f4:b8:63:98:d5:2d:b6:e7:8d:3e:e8:8b:
50:c1:14:55:06:4c:41:7e:e1:76:cb:3d:d0:9f:25:
15:a8:89:89:cc:1c:74:b6:1c:c5:db:35:ee:6e:3d:
82:96:1c:75:f1:15:a4:4a:a0:71:5c:0b:d4:de:a0:
60:bf:a1:e0:72:e7:81:46:da:f2:e2:47:96:35:51:
83:a2:5a:6d:19:e5:f0:fd:4d:fc:ad:2e:a6:88:83:
f4:5a:01:b8:15:e8:0f:18:cc:3b:dd:79:e5:01:2a:
8f:e4:07:72:bd:d4:eb:61:ea:11:55:6d:9c:4e:e3:
49:a5:08:db:46:8b:b8:e9:71:4e:1d:dd:f0:58:04:
31:b5:50:3c:91:a8:14:ea:a8:70:5a:c1:55:46:89:
d9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:72:B5:AD:1D:30:53:8A:12:4D:76:9E:A5:03:28:2B:E8:1B:A7:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07F2B220A44611ECAEA9C2D35A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.44.0/22
Signature Algorithm: sha256WithRSAEncryption
10:b4:b9:cf:38:6f:34:bf:85:85:12:d9:c5:1c:e1:6c:46:86:
be:41:02:d2:09:98:f0:38:5b:47:1d:a2:35:b3:58:97:e3:75:
ee:2e:22:3d:74:3b:a7:e5:9a:aa:de:9a:77:db:bc:bf:c0:86:
76:b0:57:21:69:67:08:13:16:b4:06:62:44:43:16:d5:5d:a3:
7d:3c:d0:3d:af:89:6c:33:0f:be:30:71:10:04:5e:27:f6:f7:
2e:23:37:4c:d2:a2:fc:38:18:08:84:dc:7b:bf:4a:fd:c3:e6:
76:90:de:e7:bd:e0:44:71:d8:39:c8:94:02:65:c7:3a:d3:7e:
ba:1c:55:19:f0:05:df:44:46:39:a9:31:91:94:17:93:91:2f:
90:1f:c2:cd:0e:78:0f:ec:9d:4f:da:e1:07:af:7a:c4:c7:53:
69:8c:d1:cf:41:5c:49:08:97:9e:1a:c2:c4:96:72:01:7f:bf:
71:b7:1d:af:18:7a:ce:ce:b1:2e:d3:7e:23:04:60:a3:04:90:
7d:d3:da:16:c9:55:f2:b2:93:0c:6c:08:48:88:7b:30:63:0f:
df:96:5b:e7:fb:89:d2:e7:15:76:65:fa:b1:7a:55:bc:8d:a9:
50:03:60:4d:4b:64:12:0c:f8:57:fd:cb:78:7d:ac:64:0a:66:
03:26:38:7c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFUgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjAzMTUwOTU1MTlaFw0yMjEyMzEwOTU1MTlaMBgxFjAU
BgNVBAMMDTYyMzA2MjhiLTBmYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXdkzBgm4FTi7iwSuDwq5k2ost0tCuPBApkpSIxzM7DmkSLqRGuHRzkOl7
6p7xB4iRk20lMS2m4prkRIxrfPRrrLb7atxGMAYI+2bdjHEJB1iBLmVnA0DsWhPy
ou2rkCFg2k+kpj3Id90ae/S4Y5jVLbbnjT7oi1DBFFUGTEF+4XbLPdCfJRWoiYnM
HHS2HMXbNe5uPYKWHHXxFaRKoHFcC9TeoGC/oeBy54FG2vLiR5Y1UYOiWm0Z5fD9
TfytLqaIg/RaAbgV6A8YzDvdeeUBKo/kB3K91Oth6hFVbZxO40mlCNtGi7jpcU4d
3fBYBDG1UDyRqBTqqHBawVVGidlrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUL3K1
rR0wU4oSTXaepQMoK+gbp7EwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzA3RjJCMjIwQTQ0NjExRUNBRUE5QzJEMzVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKazSwwDQYJKoZIhvcNAQEL
BQADggEBABC0uc84bzS/hYUS2cUc4WxGhr5BAtIJmPA4W0cdojWzWJfjde4uIj10
O6flmqremnfbvL/AhnawVyFpZwgTFrQGYkRDFtVdo3080D2viWwzD74wcRAEXif2
9y4jN0zSovw4GAiE3Hu/Sv3D5naQ3ue94ERx2DnIlAJlxzrTfrocVRnwBd9ERjmp
MZGUF5ORL5Afws0OeA/snU/a4QevesTHU2mM0c9BXEkIl54awsSWcgF/v3G3Ha8Y
es7OsS7TfiMEYKMEkH3T2hbJVfKykwxsCEiIezBjD9+WW+f7idLnFXZl+rF6VbyN
qVADYE1LZBIM+Ff9y3h9rGQKZgMmOHw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:04 2023 by rpki-client on console-ams.rpki-client.org