Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16891CDA476B11EC8B886A79D8A014CE.roa
File: 16891CDA476B11EC8B886A79D8A014CE.roa (raw, json)
Hash identifier: wN5t8c2z0gc1cyAFgp8HkH+4a85Wmu388Ffiv6emuNA=
Subject key identifier: 50:52:6D:BA:42:C3:67:76:74:CD:26:A5:6A:5F:11:EE:AD:2F:3E:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0CF2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16891CDA476B11EC8B886A79D8A014CE.roa
Signing time: Wed 17 Nov 2021 05:56:21 +0000
ROA not before: Wed 17 Nov 2021 05:56:17 +0000
ROA not after: Sat 17 Dec 2022 05:56:17 +0000
asID: 134428
IP address blocks: 154.222.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3314 (0xcf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 05:56:17 2021 GMT
Not After : Dec 17 05:56:17 2022 GMT
Subject: CN=61949985-3792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:34:84:4e:25:45:2a:68:b4:55:fe:3f:23:7c:
55:c9:0c:25:0f:40:ef:03:82:78:46:f2:1d:02:b6:
ae:e7:01:98:d6:15:6c:cd:d0:f5:b1:b6:59:b8:93:
a9:b3:ac:65:c2:c0:ba:83:da:25:a5:dd:11:6f:a9:
1b:5a:82:77:29:0d:2b:6f:c3:59:1c:96:4c:f4:98:
ae:dd:2a:d9:9a:d3:e7:8d:10:b5:50:0f:ce:ea:5b:
71:ff:5d:55:86:d8:42:ae:e3:4f:a2:12:1a:47:69:
ec:ae:64:4c:32:74:68:65:25:04:16:ed:7f:09:97:
f3:d0:06:a8:7f:3b:ce:36:ab:38:2b:87:92:31:76:
a6:97:7f:c2:23:74:a9:ff:75:e2:cb:d3:97:cb:7c:
5c:19:77:73:8f:24:d7:b1:bf:9e:67:19:80:01:35:
43:bf:c3:21:b3:53:99:52:8f:53:07:e9:5c:0d:64:
aa:a4:48:cf:94:5d:ac:cc:5a:9b:d3:dc:71:34:2a:
31:b3:60:e9:5d:13:a0:36:ae:d9:c4:c5:a4:d2:de:
37:86:68:a1:84:8e:cf:01:cf:66:b6:86:37:ff:ff:
15:e5:2c:0a:77:8b:9a:a3:66:77:46:bb:29:9c:bc:
70:fc:a5:49:bc:84:30:37:11:51:d0:a4:ea:a9:16:
26:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:52:6D:BA:42:C3:67:76:74:CD:26:A5:6A:5F:11:EE:AD:2F:3E:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16891CDA476B11EC8B886A79D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.47.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:9d:56:cf:3f:b7:9c:48:cb:07:cb:0d:f9:13:80:e5:3b:55:
c1:85:79:c4:69:46:07:6b:ab:19:67:92:ba:2a:3b:dd:e9:bb:
ec:a1:c7:5c:04:18:97:f2:42:cf:af:0e:c6:6a:d2:04:9a:31:
69:ff:49:4c:1e:36:45:c7:e2:29:29:29:4f:8f:d6:ca:01:25:
e4:44:d5:9a:be:e1:cf:56:41:4a:b7:26:4f:61:c6:df:a6:ec:
6f:36:ce:45:e9:53:25:28:80:98:8c:de:c4:76:0a:38:41:19:
cf:6b:c9:21:95:cc:3a:b9:8f:67:7b:85:e6:ec:fa:6a:01:fb:
64:72:d8:8d:a4:b5:56:c5:da:88:f6:05:3d:7e:59:af:d1:d4:
7d:6d:e7:39:50:6e:bc:d7:02:23:36:7a:63:d3:79:1f:9b:93:
ee:8d:46:ae:ee:85:a3:e5:b2:15:67:20:87:2e:44:55:83:1d:
d3:f6:de:39:5b:a7:6c:cb:4e:5c:e7:9c:29:f2:ba:31:b7:c7:
c9:16:1c:98:f8:c9:f5:6e:84:b5:e9:39:7d:a2:fe:93:2e:96:
af:c3:41:2e:0f:63:37:4e:11:cc:bb:60:ea:8a:3c:aa:f5:dc:
b4:be:41:30:8d:01:b0:37:f3:d7:8a:3d:10:5a:d5:29:07:5d:
17:80:ec:cb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDPIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTExMTcwNTU2MTdaFw0yMjEyMTcwNTU2MTdaMBgxFjAU
BgNVBAMMDTYxOTQ5OTg1LTM3OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCdNIROJUUqaLRV/j8jfFXJDCUPQO8DgnhG8h0Ctq7nAZjWFWzN0PWxtlm4
k6mzrGXCwLqD2iWl3RFvqRtagncpDStvw1kclkz0mK7dKtma0+eNELVQD87qW3H/
XVWG2EKu40+iEhpHaeyuZEwydGhlJQQW7X8Jl/PQBqh/O842qzgrh5IxdqaXf8Ij
dKn/deLL05fLfFwZd3OPJNexv55nGYABNUO/wyGzU5lSj1MH6VwNZKqkSM+UXazM
WpvT3HE0KjGzYOldE6A2rtnExaTS3jeGaKGEjs8Bz2a2hjf//xXlLAp3i5qjZndG
uymcvHD8pUm8hDA3EVHQpOqpFiaVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUUFJt
ukLDZ3Z0zSalal8R7q0vPmEwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzE2ODkxQ0RBNDc2QjExRUM4Qjg4NkE3OUQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa3i8wDQYJKoZIhvcNAQEL
BQADggEBAEudVs8/t5xIywfLDfkTgOU7VcGFecRpRgdrqxlnkroqO93pu+yhx1wE
GJfyQs+vDsZq0gSaMWn/SUweNkXH4ikpKU+P1soBJeRE1Zq+4c9WQUq3Jk9hxt+m
7G82zkXpUyUogJiM3sR2CjhBGc9rySGVzDq5j2d7hebs+moB+2Ry2I2ktVbF2oj2
BT1+Wa/R1H1t5zlQbrzXAiM2emPTeR+bk+6NRq7uhaPlshVnIIcuRFWDHdP23jlb
p2zLTlznnCnyujG3x8kWHJj4yfVuhLXpOX2i/pMulq/DQS4PYzdOEcy7YOqKPKr1
3LS+QTCNAbA389eKPRBa1SkHXReA7Ms=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:04 2023 by rpki-client on console-ams.rpki-client.org