Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1728AA68E58011EB9D89242EF8AEA228.roa
File: 1728AA68E58011EB9D89242EF8AEA228.roa (raw, json)
Hash identifier: Jj2RdPMrKFbCEeVJgwEpsNILBNHMkf4ijKefjEVePRM=
Subject key identifier: 1F:B3:96:8F:A3:DE:70:0C:6E:F2:3D:F3:79:20:71:96:F9:43:77:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 07F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1728AA68E58011EB9D89242EF8AEA228.roa
Signing time: Thu 15 Jul 2021 15:19:47 +0000
ROA not before: Thu 15 Jul 2021 15:19:43 +0000
ROA not after: Sat 09 Jul 2022 15:19:43 +0000
asID: 397630
IP address blocks: 154.202.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2036 (0x7f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:19:43 2021 GMT
Not After : Jul 9 15:19:43 2022 GMT
Subject: CN=60f05213-fca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:71:20:9f:6e:10:8f:ae:f8:f8:13:ea:4f:66:
85:40:45:cd:64:62:48:09:37:82:ab:82:16:8b:5e:
33:60:9b:44:e4:b2:5d:0f:bc:27:33:2e:c2:af:6d:
d4:4e:1d:b7:79:73:73:02:88:00:d4:e8:fb:9f:87:
c4:f9:c5:31:6e:c6:44:1a:55:af:4f:08:75:1f:3b:
33:bc:92:06:ca:fe:bc:2f:d9:de:18:e9:c3:72:0c:
aa:72:84:85:cc:60:9e:32:8d:43:96:dc:ee:3f:b3:
26:04:5c:f8:f0:59:4c:37:c5:6c:22:ba:b7:e0:88:
3a:12:16:28:e1:97:1f:73:15:11:e8:79:1d:45:6d:
db:7e:3d:c1:6b:7a:d8:66:f5:10:43:7e:35:a7:7c:
04:a5:ca:5f:31:09:97:c8:67:7d:5e:a6:b9:6d:67:
51:a4:8c:fd:4f:da:ce:5f:d3:4c:c4:d8:8e:c3:ae:
38:60:af:42:6b:98:5d:2c:c7:e8:59:5b:a0:c1:b0:
96:70:df:2e:94:b5:75:c3:96:4b:54:48:f7:3b:a0:
dc:ab:00:3e:80:8c:26:cc:3a:ea:a1:46:13:58:0e:
59:74:79:80:34:b1:65:9e:00:63:d5:03:3f:2f:f6:
1a:9f:70:75:7b:6a:75:63:67:5b:4a:c6:7d:2b:8e:
2e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B3:96:8F:A3:DE:70:0C:6E:F2:3D:F3:79:20:71:96:F9:43:77:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1728AA68E58011EB9D89242EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.123.0/24
Signature Algorithm: sha256WithRSAEncryption
38:76:c9:3e:96:a1:6b:3b:18:c2:b6:ed:23:6e:0d:35:bf:aa:
f2:94:f1:04:e8:be:84:0c:00:15:52:0a:ec:7e:79:6e:e8:15:
b3:9a:0e:fa:59:56:0b:74:43:36:48:c0:bd:07:07:a3:22:f3:
54:fa:0d:ea:ca:6b:23:a5:91:80:76:e4:68:68:64:cf:b8:3b:
0f:57:bb:46:74:6b:95:8f:54:e9:87:80:e4:b0:09:b2:f0:9a:
91:61:6f:5e:84:f0:33:b0:f9:cd:aa:fa:08:af:f7:20:4e:69:
27:4f:83:b5:ca:be:83:f6:b0:c0:23:ce:eb:45:af:99:12:85:
43:e2:63:9c:8c:0e:61:97:96:e8:27:4a:04:c2:4c:02:c0:50:
77:41:d3:e0:d5:8b:f6:d1:41:66:1c:8b:20:2a:4f:6b:af:d2:
6d:4e:fb:53:27:7d:6e:5c:f7:d0:1b:40:fc:6f:a0:70:6d:64:
8c:98:78:5e:84:22:c7:d8:9c:82:72:c7:f5:d7:bc:f8:62:ee:
d1:aa:a4:b3:a0:cb:3b:bd:88:77:3e:64:6d:8d:e6:cb:9d:c2:
2c:3d:27:b6:f9:21:26:4c:17:c9:0c:98:8a:e6:7e:df:c9:af:
9c:e5:2a:e1:69:78:df:4f:4a:37:ae:9f:6d:48:0a:9d:82:71:
29:ae:19:94
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB/QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTA3MTUxNTE5NDNaFw0yMjA3MDkxNTE5NDNaMBgxFjAU
BgNVBAMTDTYwZjA1MjEzLWZjYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOcSCfbhCPrvj4E+pPZoVARc1kYkgJN4KrghaLXjNgm0Tksl0PvCczLsKv
bdROHbd5c3MCiADU6Pufh8T5xTFuxkQaVa9PCHUfOzO8kgbK/rwv2d4Y6cNyDKpy
hIXMYJ4yjUOW3O4/syYEXPjwWUw3xWwiurfgiDoSFijhlx9zFRHoeR1Fbdt+PcFr
ethm9RBDfjWnfASlyl8xCZfIZ31eprltZ1GkjP1P2s5f00zE2I7Drjhgr0JrmF0s
x+hZW6DBsJZw3y6UtXXDlktUSPc7oNyrAD6AjCbMOuqhRhNYDll0eYA0sWWeAGPV
Az8v9hqfcHV7anVjZ1tKxn0rji5tAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUH7OW
j6PecAxu8j3zeSBxlvlDdy8wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzE3MjhBQTY4RTU4MDExRUI5RDg5MjQyRUY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaynswDQYJKoZIhvcNAQEL
BQADggEBADh2yT6WoWs7GMK27SNuDTW/qvKU8QTovoQMABVSCux+eW7oFbOaDvpZ
Vgt0QzZIwL0HB6Mi81T6DerKayOlkYB25GhoZM+4Ow9Xu0Z0a5WPVOmHgOSwCbLw
mpFhb16E8DOw+c2q+giv9yBOaSdPg7XKvoP2sMAjzutFr5kShUPiY5yMDmGXlugn
SgTCTALAUHdB0+DVi/bRQWYciyAqT2uv0m1O+1MnfW5c99AbQPxvoHBtZIyYeF6E
IsfYnIJyx/XXvPhi7tGqpLOgyzu9iHc+ZG2N5sudwiw9J7b5ISZMF8kMmIrmft/J
r5zlKuFpeN9PSjeun21ICp2CcSmuGZQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-fra.rpki-client.org