Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2809DD02E7D711EC8A5FEDE4F1222468.roa
File: 2809DD02E7D711EC8A5FEDE4F1222468.roa (raw, json)
Hash identifier: zc1E0wuJcSKlsO93z9CvPzFB+MTlSELnbX5622OqE/M=
Subject key identifier: 0E:5F:DB:05:C4:05:39:5F:FA:4A:13:66:DD:A5:02:B9:D7:A4:FD:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 16C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2809DD02E7D711EC8A5FEDE4F1222468.roa
Signing time: Thu 09 Jun 2022 09:33:02 +0000
ROA not before: Thu 09 Jun 2022 09:32:59 +0000
ROA not after: Wed 30 Aug 2023 09:32:59 +0000
asID: 133199
IP address blocks: 154.204.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5832 (0x16c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 09:32:59 2022 GMT
Not After : Aug 30 09:32:59 2023 GMT
Subject: CN=62a1be4e-e823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:57:9e:54:28:3e:e6:d7:ce:17:4e:ad:bc:
42:c6:88:23:a4:ee:38:38:e6:48:8e:8e:26:bb:b5:
5d:83:f7:ef:db:ca:23:f1:7e:a3:d0:c3:aa:5d:df:
a2:06:88:79:6e:b3:18:92:f6:c8:f3:63:10:51:37:
d4:f4:0e:16:e8:9a:e1:16:f8:40:5d:c4:6b:5d:f4:
0d:d3:fa:0b:ad:f0:29:8c:ac:d1:22:8b:70:55:fa:
79:0f:37:ad:47:54:0a:7a:b5:8b:9f:37:93:88:7c:
2f:6d:cd:7e:98:42:26:71:79:a7:aa:6e:14:66:15:
5d:52:c7:20:7a:de:9d:d2:57:34:89:63:a8:1b:f6:
ff:ad:96:65:76:11:9d:24:41:3d:a7:1f:0a:78:2b:
da:35:45:77:43:81:f0:be:ff:32:a8:88:66:72:27:
23:16:a8:ca:44:ee:da:f7:11:df:f3:35:69:aa:80:
93:0c:7c:b2:c5:d5:4a:72:df:37:1a:58:3e:b2:6f:
f1:21:b6:8e:4f:e4:5d:ce:f6:ec:3e:75:f0:5c:d7:
02:75:52:9d:01:05:7e:fb:ac:9c:a1:a7:5b:0e:cd:
38:bb:75:32:c9:88:48:06:0e:53:ab:6e:49:cb:c9:
c4:5c:19:83:08:ac:62:f3:73:f2:2c:d3:ba:7f:20:
8e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5F:DB:05:C4:05:39:5F:FA:4A:13:66:DD:A5:02:B9:D7:A4:FD:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2809DD02E7D711EC8A5FEDE4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.55.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:75:b9:63:cc:e3:50:fc:59:c2:26:90:5d:45:90:29:dd:de:
ba:34:52:9a:6d:8a:dc:8b:02:40:08:4b:57:38:37:39:ae:80:
6f:7c:d5:f1:6d:76:19:be:32:7c:2b:b9:5f:ec:76:57:22:0b:
64:65:f1:c7:95:dc:dd:c4:3a:e7:b3:74:72:03:9f:ab:40:04:
4c:77:42:09:be:16:f7:89:24:06:0c:ea:ac:d8:76:b9:d4:51:
70:51:37:20:11:06:ac:40:c0:a1:f0:80:62:69:3e:92:bd:2c:
8d:76:89:ad:94:6d:ba:1f:1e:39:11:9f:16:d7:eb:f0:ec:1a:
ef:ea:11:9c:d1:d4:85:f6:7e:43:ed:37:31:4b:d8:ce:f5:91:
5b:7c:0b:a2:2e:50:0f:c1:22:47:74:e3:20:7c:f8:d0:7d:c4:
86:eb:d3:a1:74:69:eb:57:f2:87:0d:fa:c7:2a:f6:ee:09:f5:
5e:05:8e:40:68:9f:29:9c:55:06:f1:58:f6:c9:66:2a:bd:e6:
75:22:dd:66:59:cc:0d:72:b3:18:d0:98:9a:ec:0e:fe:3b:14:
56:d0:d2:8a:a6:98:89:19:a0:7d:6e:d3:c2:47:ec:05:73:51:
31:06:76:4e:33:f3:d5:d2:de:43:22:d8:0c:21:af:e3:df:41:
8e:69:54:c7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFsgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA2MDkwOTMyNTlaFw0yMzA4MzAwOTMyNTlaMBgxFjAU
BgNVBAMMDTYyYTFiZTRlLWU4MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCukFeeVCg+5tfOF06tvELGiCOk7jg45kiOjia7tV2D9+/byiPxfqPQw6pd
36IGiHlusxiS9sjzYxBRN9T0DhbomuEW+EBdxGtd9A3T+gut8CmMrNEii3BV+nkP
N61HVAp6tYufN5OIfC9tzX6YQiZxeaeqbhRmFV1SxyB63p3SVzSJY6gb9v+tlmV2
EZ0kQT2nHwp4K9o1RXdDgfC+/zKoiGZyJyMWqMpE7tr3Ed/zNWmqgJMMfLLF1Upy
3zcaWD6yb/Ehto5P5F3O9uw+dfBc1wJ1Up0BBX77rJyhp1sOzTi7dTLJiEgGDlOr
bknLycRcGYMIrGLzc/Is07p/II5XAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUDl/b
BcQFOV/6ShNm3aUCudek/YMwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzI4MDlERDAyRTdENzExRUM4QTVGRURFNEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazDcwDQYJKoZIhvcNAQEL
BQADggEBAGx1uWPM41D8WcImkF1FkCnd3ro0UpptityLAkAIS1c4NzmugG981fFt
dhm+MnwruV/sdlciC2Rl8ceV3N3EOuezdHIDn6tABEx3Qgm+FveJJAYM6qzYdrnU
UXBRNyARBqxAwKHwgGJpPpK9LI12ia2UbbofHjkRnxbX6/DsGu/qEZzR1IX2fkPt
NzFL2M71kVt8C6IuUA/BIkd04yB8+NB9xIbr06F0aetX8ocN+scq9u4J9V4FjkBo
nymcVQbxWPbJZiq95nUi3WZZzA1ysxjQmJrsDv47FFbQ0oqmmIkZoH1u08JH7AVz
UTEGdk4z89XS3kMi2Awhr+PfQY5pVMc=
-----END CERTIFICATE-----
Generated at Wed Aug 30 13:18:04 2023 by rpki-client on console-fra.rpki-client.org