Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/249B6854125511ED9FFD3DE8F1222468.roa
File: 249B6854125511ED9FFD3DE8F1222468.roa (raw, json)
Hash identifier: np7st+43pj8LyE/6/nw2ci6oMvj9vVbn5NBwuiXMhDA=
Subject key identifier: 5B:B9:EE:9E:DF:71:5C:A3:ED:A0:7B:AD:52:73:57:28:20:9D:15:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 17FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/249B6854125511ED9FFD3DE8F1222468.roa
Signing time: Tue 02 Aug 2022 11:20:41 +0000
ROA not before: Tue 02 Aug 2022 11:20:37 +0000
ROA not after: Thu 10 Aug 2023 11:20:37 +0000
asID: 133861
IP address blocks: 154.204.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6138 (0x17fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 11:20:37 2022 GMT
Not After : Aug 10 11:20:37 2023 GMT
Subject: CN=62e90889-0791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:42:74:ba:e0:12:b3:37:c9:d3:ab:fa:7e:
d7:6d:3b:91:93:8f:f7:8e:96:dd:86:89:18:ea:1d:
5c:fd:d0:04:9c:f8:87:1a:14:aa:56:68:f0:e0:ad:
79:0e:a3:a9:ec:0a:c7:71:97:ab:11:ee:8c:06:b5:
43:5b:9b:3a:9d:7c:62:e2:81:83:80:5b:7c:ac:70:
d9:84:84:bd:a3:97:ee:fe:ca:6d:b0:4c:2d:20:8c:
1e:3d:fc:51:29:3b:47:69:95:8f:d8:52:d5:00:d1:
19:e0:02:60:fc:19:29:e2:5c:46:67:8e:5c:fc:55:
84:b2:43:a6:1c:62:9e:dc:db:c6:03:ce:17:72:52:
78:da:2f:02:c1:60:6a:46:8c:84:5e:aa:f6:ec:35:
8a:f9:48:91:83:78:22:ef:91:0f:8e:91:2d:d6:32:
29:21:ec:63:22:ee:52:74:35:5b:af:a7:17:90:55:
f7:a0:3f:88:7c:48:0d:b2:16:80:a4:96:6a:12:5d:
ad:95:36:04:ed:6e:d5:59:ba:d8:2b:78:42:2a:98:
8b:f0:77:c6:55:53:78:b0:60:59:01:0d:8a:2d:45:
0f:2e:2e:56:1a:7d:91:21:4d:9b:7b:48:fd:26:ca:
2c:88:b1:b5:de:f4:37:d2:f4:94:d1:48:d0:68:11:
6c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B9:EE:9E:DF:71:5C:A3:ED:A0:7B:AD:52:73:57:28:20:9D:15:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/249B6854125511ED9FFD3DE8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.45.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:29:50:07:b3:d8:a6:44:f4:64:9a:ea:6e:3e:90:e1:b1:af:
ab:64:28:09:bd:c7:47:c8:60:e8:8e:41:04:b1:52:be:2d:20:
6a:22:59:20:d2:38:ce:6e:1a:22:f5:40:fe:de:98:45:e5:4e:
2a:39:49:9e:08:33:75:68:78:bd:04:dc:e1:e5:52:82:35:01:
99:ac:05:09:e9:5c:40:ac:7c:72:2f:9e:80:84:53:bc:bd:c4:
16:8a:22:95:a7:ab:52:bb:2f:8b:30:5d:68:1c:ec:82:7b:30:
1f:4d:1d:9b:78:c2:96:95:3a:b2:e0:33:3d:20:ef:d2:a3:3d:
a7:25:a0:06:d5:76:18:0e:d7:e4:ae:61:43:4f:5a:91:20:74:
e1:0b:c9:e8:82:ca:a4:d9:7f:13:83:46:23:1a:b8:9c:f8:8e:
41:a1:92:94:f9:5f:2c:e9:d3:03:6b:09:dc:1b:11:5e:b6:3b:
05:93:21:ef:3f:ed:4c:37:59:18:13:70:ca:2c:16:ce:45:08:
03:a6:fc:42:0a:1f:67:b1:14:23:62:04:ff:2b:12:9a:50:ff:
72:89:57:b2:0f:71:90:22:fe:f2:8a:7b:38:5e:f7:53:85:b7:
85:fa:e9:3d:e7:50:8e:47:dd:85:77:67:c4:eb:05:19:64:35:
de:34:09:a7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICF/owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA4MDIxMTIwMzdaFw0yMzA4MTAxMTIwMzdaMBgxFjAU
BgNVBAMMDTYyZTkwODg5LTA3OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIHEJ0uuASszfJ06v6ftdtO5GTj/eOlt2GiRjqHVz90ASc+IcaFKpWaPDg
rXkOo6nsCsdxl6sR7owGtUNbmzqdfGLigYOAW3yscNmEhL2jl+7+ym2wTC0gjB49
/FEpO0dplY/YUtUA0RngAmD8GSniXEZnjlz8VYSyQ6YcYp7c28YDzhdyUnjaLwLB
YGpGjIReqvbsNYr5SJGDeCLvkQ+OkS3WMikh7GMi7lJ0NVuvpxeQVfegP4h8SA2y
FoCklmoSXa2VNgTtbtVZutgreEIqmIvwd8ZVU3iwYFkBDYotRQ8uLlYafZEhTZt7
SP0myiyIsbXe9DfS9JTRSNBoEWx3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUW7nu
nt9xXKPtoHutUnNXKCCdFdQwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzI0OUI2ODU0MTI1NTExRUQ5RkZEM0RFOEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazC0wDQYJKoZIhvcNAQEL
BQADggEBAKApUAez2KZE9GSa6m4+kOGxr6tkKAm9x0fIYOiOQQSxUr4tIGoiWSDS
OM5uGiL1QP7emEXlTio5SZ4IM3VoeL0E3OHlUoI1AZmsBQnpXECsfHIvnoCEU7y9
xBaKIpWnq1K7L4swXWgc7IJ7MB9NHZt4wpaVOrLgMz0g79KjPacloAbVdhgO1+Su
YUNPWpEgdOELyeiCyqTZfxODRiMauJz4jkGhkpT5Xyzp0wNrCdwbEV62OwWTIe8/
7Uw3WRgTcMosFs5FCAOm/EIKH2exFCNiBP8rEppQ/3KJV7IPcZAi/vKKezhe91OF
t4X66T3nUI5H3YV3Z8TrBRlkNd40Cac=
-----END CERTIFICATE-----
Generated at Fri Aug 11 01:11:55 2023 by rpki-client on console-ams.rpki-client.org