Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28E730B65BB511EC9E461FBF5A40D577.roa
File: 28E730B65BB511EC9E461FBF5A40D577.roa (raw, json)
Hash identifier: ckQmTVgdSNx7ra76MVfpcfBzLPLkBoVNzuFDQiH83kE=
Subject key identifier: 88:56:B3:84:62:FB:5F:F1:1B:BE:A7:D7:8C:E4:6E:2C:43:47:52:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1397
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28E730B65BB511EC9E461FBF5A40D577.roa
Signing time: Mon 13 Dec 2021 01:36:58 +0000
ROA not before: Mon 13 Dec 2021 01:36:54 +0000
ROA not after: Fri 30 Dec 2022 01:36:54 +0000
asID: 133201
IP address blocks: 154.204.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5015 (0x1397)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 01:36:54 2021 GMT
Not After : Dec 30 01:36:54 2022 GMT
Subject: CN=61b6a3b9-d45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:de:37:3b:d5:6b:84:1d:cb:7c:90:65:17:
7b:e5:20:73:5d:17:35:7b:69:e5:a8:d4:55:d9:c9:
e7:11:20:c9:90:96:58:fc:9d:8a:0d:d5:91:87:e2:
ed:64:67:f1:e9:50:08:de:a0:cf:65:cc:9a:0f:74:
2b:31:a2:8d:9e:cd:37:7b:20:61:cd:6b:8c:20:55:
61:47:14:28:72:5b:6e:fb:74:68:9e:59:1b:f4:cf:
8d:8b:e3:3b:20:7c:30:4d:06:68:44:3e:89:91:7a:
f1:6f:8f:f3:7f:c4:ec:56:f4:2e:01:cc:52:a4:49:
49:ac:84:58:3b:8c:f9:7a:8e:91:a9:b3:b0:2c:cd:
54:8d:26:9d:99:ad:85:b3:07:01:be:52:46:28:d0:
e3:4b:a1:95:e3:8e:a8:38:e0:0b:a8:59:bd:78:88:
df:07:a2:92:7a:2d:db:56:b9:ad:80:69:a8:86:7f:
54:21:23:51:fb:aa:3a:b5:23:a1:d1:ac:92:7e:11:
b5:d2:87:aa:2c:c1:0f:97:e9:89:7b:35:8e:8d:f5:
41:0d:25:3f:48:e5:f8:6e:ac:85:6f:bf:27:bf:67:
6b:75:7a:e9:75:91:96:e6:1a:fd:e5:8c:f2:d9:2d:
68:04:03:0b:8f:64:d9:e2:3a:04:1b:92:75:a3:b4:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:56:B3:84:62:FB:5F:F1:1B:BE:A7:D7:8C:E4:6E:2C:43:47:52:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28E730B65BB511EC9E461FBF5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.65.0/24
Signature Algorithm: sha256WithRSAEncryption
70:92:89:52:4b:ae:42:7e:c0:36:37:13:16:af:fe:2f:de:50:
09:5b:55:6c:cb:69:4d:f5:7d:cb:01:7e:4f:86:fa:5c:48:77:
a8:c8:11:94:f8:8c:90:e0:ef:44:f0:76:29:fd:4d:5f:51:9c:
5c:d0:e4:9e:ec:1d:d3:73:4d:1e:e7:e9:12:7e:8a:12:51:23:
00:87:94:c4:24:e1:03:80:b3:2b:69:d8:84:f7:3f:1c:9a:04:
31:94:fa:27:11:e2:30:b4:96:71:6d:c9:20:35:52:3e:9d:fa:
73:cc:93:99:d6:90:03:a0:a5:27:3f:2c:14:85:b4:12:9d:e7:
f7:f1:4a:8b:ef:9f:2f:0d:59:bb:f3:e7:c6:c3:ad:66:fc:71:
f1:bb:e7:a4:d5:5e:14:5a:99:ab:9b:d9:2d:f6:ab:2e:c7:0a:
cf:ec:92:fa:bd:da:4e:5c:1f:89:e4:b1:e5:8e:53:d8:93:f8:
7c:b8:b2:bd:4f:11:26:fb:2d:ce:ee:e0:be:bd:c0:40:e8:9b:
c3:e6:1f:7c:14:9c:30:9e:8f:ed:bd:90:f2:70:38:f9:c4:c1:
96:25:64:6f:5a:ae:77:45:81:c8:4c:46:aa:a4:06:71:8a:91:
70:60:43:78:00:0b:6b:95:b7:29:0e:d8:4c:66:a7:45:3d:af:
3a:7a:af:2c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICE5cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTEyMTMwMTM2NTRaFw0yMjEyMzAwMTM2NTRaMBgxFjAU
BgNVBAMMDTYxYjZhM2I5LWQ0NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3wt43O9VrhB3LfJBlF3vlIHNdFzV7aeWo1FXZyecRIMmQllj8nYoN1ZGH
4u1kZ/HpUAjeoM9lzJoPdCsxoo2ezTd7IGHNa4wgVWFHFChyW277dGieWRv0z42L
4zsgfDBNBmhEPomRevFvj/N/xOxW9C4BzFKkSUmshFg7jPl6jpGps7AszVSNJp2Z
rYWzBwG+UkYo0ONLoZXjjqg44AuoWb14iN8HopJ6LdtWua2AaaiGf1QhI1H7qjq1
I6HRrJJ+EbXSh6oswQ+X6Yl7NY6N9UENJT9I5fhurIVvvye/Z2t1eul1kZbmGv3l
jPLZLWgEAwuPZNniOgQbknWjtHZ3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUiFaz
hGL7X/EbvqfXjORuLENHUnAwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzI4RTczMEI2NUJCNTExRUM5RTQ2MUZCRjVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazEEwDQYJKoZIhvcNAQEL
BQADggEBAHCSiVJLrkJ+wDY3Exav/i/eUAlbVWzLaU31fcsBfk+G+lxId6jIEZT4
jJDg70Twdin9TV9RnFzQ5J7sHdNzTR7n6RJ+ihJRIwCHlMQk4QOAsytp2IT3Pxya
BDGU+icR4jC0lnFtySA1Uj6d+nPMk5nWkAOgpSc/LBSFtBKd5/fxSovvny8NWbvz
58bDrWb8cfG756TVXhRamaub2S32qy7HCs/skvq92k5cH4nkseWOU9iT+Hy4sr1P
ESb7Lc7u4L69wEDom8PmH3wUnDCej+29kPJwOPnEwZYlZG9arndFgchMRqqkBnGK
kXBgQ3gAC2uVtykO2Exmp0U9rzp6ryw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:05 2023 by rpki-client on console-ams.rpki-client.org