Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CC13A0C4B9211EC8A680B0FD8A014CE.roa
File: 2CC13A0C4B9211EC8A680B0FD8A014CE.roa (raw, json)
Hash identifier: 0KiGIfeofr87v+JaSpGgk4V+V1DQybMSjqTohFTrSWk=
Subject key identifier: 1D:50:89:3C:33:8E:84:59:37:F9:45:8E:FF:ED:7C:DB:41:9C:6A:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1222
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CC13A0C4B9211EC8A680B0FD8A014CE.roa
Signing time: Mon 22 Nov 2021 12:46:13 +0000
ROA not before: Mon 22 Nov 2021 12:46:10 +0000
ROA not after: Sat 19 Nov 2022 12:46:10 +0000
asID: 9009
IP address blocks: 154.92.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4642 (0x1222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 12:46:10 2021 GMT
Not After : Nov 19 12:46:10 2022 GMT
Subject: CN=619b9115-f9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d9:c5:bb:f4:84:38:e2:11:5d:c4:ea:6a:6d:
73:90:c5:cb:7e:7f:fd:05:5b:f7:42:a9:66:be:e0:
c4:e2:73:9b:49:96:4a:e9:01:89:c5:21:55:cd:ec:
40:00:85:d0:08:75:33:c6:10:eb:67:07:b6:0e:66:
d3:51:a8:b7:3c:d6:c2:d2:20:a3:12:cd:c5:b5:d4:
c9:7b:a9:56:82:fd:18:31:7d:7a:fd:2f:74:b1:7c:
17:e2:09:14:24:74:e1:a6:78:0d:50:94:10:2d:b4:
26:7b:fb:84:14:61:fd:39:d1:5e:dd:71:c5:eb:46:
b1:19:4a:a3:f2:38:44:c9:1c:3b:30:04:d5:21:ba:
03:de:17:b4:fd:0a:d8:98:e1:db:33:5e:09:35:73:
fd:3b:c8:d0:45:32:22:c7:01:b9:d2:7e:08:52:eb:
7e:4b:15:33:1f:f6:a5:91:2c:25:f8:7c:99:f4:40:
4c:fb:f1:3d:e8:9d:20:3f:5a:0d:b7:ce:c1:e0:16:
98:43:0d:b3:8a:8f:60:6a:b9:df:9a:3c:53:b6:26:
e7:91:d6:55:e2:87:02:2e:73:1f:07:92:a3:0d:b4:
f4:22:a8:a5:8f:1b:5f:a1:c4:3c:f9:a6:9b:41:e5:
1f:e6:51:59:6d:87:bc:1c:51:05:b4:47:21:16:eb:
ce:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:50:89:3C:33:8E:84:59:37:F9:45:8E:FF:ED:7C:DB:41:9C:6A:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CC13A0C4B9211EC8A680B0FD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.119.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:21:27:c1:c4:54:83:f9:e2:34:b5:fd:75:c7:50:d3:70:1f:
f9:d5:c0:a2:64:dc:93:ee:49:1f:b4:ae:6e:c0:bf:38:66:45:
b9:cb:4b:6a:f5:3f:1e:50:a0:11:ea:f0:fe:7b:7f:cd:20:ce:
6c:d4:27:96:cc:22:fb:96:64:7f:df:fb:5e:09:fd:5d:cf:bb:
8b:f0:52:0b:29:57:43:d9:2c:04:57:ef:06:36:97:fe:2b:7f:
2c:1c:26:17:49:6d:7b:39:8d:c7:12:e0:fa:b7:de:71:e8:16:
6b:d4:d5:b3:12:2c:2e:ad:36:78:e5:92:90:66:6d:da:67:92:
4a:49:da:d6:c4:29:9d:4b:ef:d9:bf:95:ba:d0:d8:41:3f:2e:
69:3e:cc:d1:e3:07:35:58:13:57:27:7a:05:cb:81:8b:19:ea:
b6:b9:0c:90:d9:7f:78:1d:b8:8a:e2:f2:58:25:a2:54:58:78:
62:9b:e1:f6:e3:02:d2:27:51:44:68:02:60:00:f0:41:87:10:
3a:80:34:ab:fd:61:c0:96:d4:5f:35:69:0b:cd:97:81:18:10:
c7:32:7d:b9:f1:70:08:5f:be:fe:fd:ae:39:1b:21:b7:89:17:
dd:c7:b1:12:c5:46:9a:96:8d:c6:dd:37:3c:d0:a5:3c:15:ab:
fb:ee:01:76
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEiIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTExMjIxMjQ2MTBaFw0yMjExMTkxMjQ2MTBaMBgxFjAU
BgNVBAMMDTYxOWI5MTE1LWY5ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDr2cW79IQ44hFdxOpqbXOQxct+f/0FW/dCqWa+4MTic5tJlkrpAYnFIVXN
7EAAhdAIdTPGEOtnB7YOZtNRqLc81sLSIKMSzcW11Ml7qVaC/RgxfXr9L3SxfBfi
CRQkdOGmeA1QlBAttCZ7+4QUYf050V7dccXrRrEZSqPyOETJHDswBNUhugPeF7T9
CtiY4dszXgk1c/07yNBFMiLHAbnSfghS635LFTMf9qWRLCX4fJn0QEz78T3onSA/
Wg23zsHgFphDDbOKj2Bqud+aPFO2JueR1lXihwIucx8HkqMNtPQiqKWPG1+hxDz5
pptB5R/mUVlth7wcUQW0RyEW686nAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUHVCJ
PDOOhFk3+UWO/+1820GcaoswHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzJDQzEzQTBDNEI5MjExRUM4QTY4MEIwRkQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaXHcwDQYJKoZIhvcNAQEL
BQADggEBAM0hJ8HEVIP54jS1/XXHUNNwH/nVwKJk3JPuSR+0rm7AvzhmRbnLS2r1
Px5QoBHq8P57f80gzmzUJ5bMIvuWZH/f+14J/V3Pu4vwUgspV0PZLARX7wY2l/4r
fywcJhdJbXs5jccS4Pq33nHoFmvU1bMSLC6tNnjlkpBmbdpnkkpJ2tbEKZ1L79m/
lbrQ2EE/Lmk+zNHjBzVYE1cnegXLgYsZ6ra5DJDZf3gduIri8lglolRYeGKb4fbj
AtInUURoAmAA8EGHEDqANKv9YcCW1F81aQvNl4EYEMcyfbnxcAhfvv79rjkbIbeJ
F93HsRLFRpqWjcbdNzzQpTwVq/vuAXY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:05 2023 by rpki-client on console-ams.rpki-client.org