Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D7E04DCE24F11ECB779EBD7F1222468.roa
File: 0D7E04DCE24F11ECB779EBD7F1222468.roa (raw, json)
Hash identifier: RKkwv9g1V0W7D0u9ZEBymFRBVONgxKcQieX7MpeqKWw=
Subject key identifier: 67:32:A0:66:3C:C2:53:BC:0D:F8:32:08:74:16:93:0A:51:84:59:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1692
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D7E04DCE24F11ECB779EBD7F1222468.roa
Signing time: Thu 02 Jun 2022 08:36:10 +0000
ROA not before: Thu 02 Jun 2022 08:36:06 +0000
ROA not after: Fri 30 Dec 2022 08:36:06 +0000
asID: 141216
IP address blocks: 154.84.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5778 (0x1692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 2 08:36:06 2022 GMT
Not After : Dec 30 08:36:06 2022 GMT
Subject: CN=6298767a-30ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:f4:5d:12:2b:20:58:0a:7c:e4:96:4c:6a:
66:84:b2:7c:2c:6e:04:c7:cd:a1:2a:35:98:2c:e0:
cc:af:56:31:8a:e9:83:84:e9:7c:80:4e:be:d5:16:
41:4a:32:7b:7b:a9:af:24:00:cf:0c:af:fe:2c:f7:
f3:db:ab:bd:b6:99:35:2b:75:de:cb:c6:11:8d:4c:
e7:ee:d1:6d:3d:9b:6e:fe:aa:a2:87:77:20:71:db:
a6:07:86:69:10:41:1f:fd:95:52:45:3b:97:48:b8:
36:d6:29:e3:54:3e:70:b4:02:34:c3:95:a8:05:7b:
9f:a1:d0:8f:0f:92:a7:bb:29:df:d7:65:b8:1a:14:
d0:7e:1b:fb:89:cd:74:cd:1d:06:28:2f:97:ae:9b:
d4:f8:5f:50:c1:3f:c2:9d:09:d2:0d:95:ca:00:f6:
20:0e:09:56:be:ac:56:c4:67:2b:57:bc:b7:c6:08:
25:72:18:fb:52:9b:07:f9:83:3b:dd:f8:ad:99:8b:
9e:f3:70:cc:50:92:f3:03:53:9c:b8:cb:a5:37:da:
ba:de:25:ee:c7:ab:23:5e:9b:d1:8d:d3:2e:9f:a7:
7b:74:a2:9a:19:8a:ea:5f:5f:46:d6:8f:2e:89:2a:
ec:0c:8d:74:f2:42:b9:7a:98:05:7e:48:05:bb:ba:
06:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:32:A0:66:3C:C2:53:BC:0D:F8:32:08:74:16:93:0A:51:84:59:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D7E04DCE24F11ECB779EBD7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.165.0/24
Signature Algorithm: sha256WithRSAEncryption
33:69:d1:28:e7:01:f2:d9:bd:ce:33:c0:f0:9f:4d:44:8a:60:
2d:36:91:9e:db:7f:13:46:9a:73:38:04:ac:1b:82:81:9e:d2:
1f:06:89:86:9c:e5:49:65:f3:0a:0e:53:f5:f0:36:b0:71:c3:
6d:1c:e8:08:ff:52:9a:b3:18:0f:e2:f0:f1:2c:4e:78:b7:62:
14:e1:04:3b:89:3c:9b:48:14:a5:2b:3b:31:d1:6a:e7:67:22:
51:66:a0:7e:10:1e:4a:e5:86:8b:ce:38:28:92:03:c1:d8:26:
ec:dc:79:96:c6:c2:05:71:aa:10:d6:f1:86:eb:72:45:11:5b:
2b:24:6e:a9:60:3b:fe:81:84:1b:b5:ce:e6:68:26:59:37:80:
66:44:78:fc:a3:12:f0:64:55:05:c0:1b:c0:50:98:c5:65:16:
a4:f1:b2:01:d9:6d:f1:fa:4d:41:fa:75:fb:15:1d:18:d2:7a:
7c:71:6b:83:d4:29:0d:48:bf:7e:27:e9:13:31:7f:3b:50:fc:
a3:f5:9c:66:38:14:2a:cc:dc:b8:5b:82:f9:0a:93:1c:a0:09:
ed:03:3a:b6:46:f1:c1:ab:26:33:79:3a:76:e7:26:d9:3c:3d:
9c:b5:ae:90:39:8c:e4:1a:5e:d5:df:08:ac:3d:00:0b:c7:6f:
e0:b2:16:05
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFpIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA2MDIwODM2MDZaFw0yMjEyMzAwODM2MDZaMBgxFjAU
BgNVBAMMDTYyOTg3NjdhLTMwY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuCvRdEisgWAp85JZMamaEsnwsbgTHzaEqNZgs4MyvVjGK6YOE6XyATr7V
FkFKMnt7qa8kAM8Mr/4s9/Pbq722mTUrdd7LxhGNTOfu0W09m27+qqKHdyBx26YH
hmkQQR/9lVJFO5dIuDbWKeNUPnC0AjTDlagFe5+h0I8Pkqe7Kd/XZbgaFNB+G/uJ
zXTNHQYoL5eum9T4X1DBP8KdCdINlcoA9iAOCVa+rFbEZytXvLfGCCVyGPtSmwf5
gzvd+K2Zi57zcMxQkvMDU5y4y6U32rreJe7HqyNem9GN0y6fp3t0opoZiupfX0bW
jy6JKuwMjXTyQrl6mAV+SAW7ugbpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZzKg
ZjzCU7wN+DIIdBaTClGEWbowHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzBEN0UwNERDRTI0RjExRUNCNzc5RUJEN0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaVKUwDQYJKoZIhvcNAQEL
BQADggEBADNp0SjnAfLZvc4zwPCfTUSKYC02kZ7bfxNGmnM4BKwbgoGe0h8GiYac
5Ull8woOU/XwNrBxw20c6Aj/UpqzGA/i8PEsTni3YhThBDuJPJtIFKUrOzHRaudn
IlFmoH4QHkrlhovOOCiSA8HYJuzceZbGwgVxqhDW8YbrckURWyskbqlgO/6BhBu1
zuZoJlk3gGZEePyjEvBkVQXAG8BQmMVlFqTxsgHZbfH6TUH6dfsVHRjSenxxa4PU
KQ1Iv34n6RMxfztQ/KP1nGY4FCrM3LhbgvkKkxygCe0DOrZG8cGrJjN5OnbnJtk8
PZy1rpA5jOQaXtXfCKw9AAvHb+CyFgU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-fra.rpki-client.org