Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/317DD39A0E5411EDBDFFC0B1F1222468.roa
File: 317DD39A0E5411EDBDFFC0B1F1222468.roa (raw, json)
Hash identifier: tfolHPxx0Fewv+NqDove/zDGG26v7rMrmLp3LcreUT4=
Subject key identifier: 6F:5C:E2:99:83:AD:ED:24:26:51:41:D0:09:DA:E2:DB:58:7D:AE:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 17C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/317DD39A0E5411EDBDFFC0B1F1222468.roa
Signing time: Thu 28 Jul 2022 09:03:49 +0000
ROA not before: Thu 28 Jul 2022 09:03:45 +0000
ROA not after: Mon 15 May 2023 09:03:45 +0000
asID: 397630
IP address blocks: 154.201.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6084 (0x17c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 28 09:03:45 2022 GMT
Not After : May 15 09:03:45 2023 GMT
Subject: CN=62e250f5-63da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:21:7e:bb:72:31:bf:2a:fc:2e:f3:aa:df:94:
ab:fa:ac:27:8c:86:1e:75:0f:5c:40:6d:4a:06:ec:
dc:0f:ca:b7:81:71:9c:a0:10:17:96:af:b9:ab:36:
59:91:82:94:54:c2:89:6d:b2:79:b3:d2:99:04:01:
a3:5b:1f:8d:d5:69:5a:bf:57:6a:5b:c6:2c:0c:5b:
83:14:f9:fe:ca:ad:47:03:7b:e3:ec:a8:f7:b9:ac:
e0:df:d0:51:a1:12:a7:22:de:cb:bb:07:3c:e6:9c:
e5:a3:3c:75:56:d4:28:7c:ef:0c:4b:40:65:f9:e1:
82:7e:37:c6:ae:10:da:bf:5d:3e:48:76:02:e7:b4:
27:b6:30:ba:ef:1c:43:52:0a:5a:13:12:92:9e:c1:
53:d9:d3:19:21:49:51:15:ad:e8:58:52:f3:1c:28:
03:ee:54:7c:51:03:81:2e:28:61:97:d0:5c:f9:da:
f9:45:05:c6:a0:80:2c:8d:e2:ec:a8:93:49:fd:3d:
9e:26:fa:eb:35:bc:ae:8e:32:93:d7:5c:9f:df:bb:
93:98:aa:6a:f5:a8:9f:d5:88:32:c7:e1:11:06:08:
de:72:e5:d5:24:23:52:3a:34:1f:2e:28:c0:08:08:
ee:3b:6e:6c:e7:85:c0:45:c3:6e:ae:14:36:3f:f5:
53:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5C:E2:99:83:AD:ED:24:26:51:41:D0:09:DA:E2:DB:58:7D:AE:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/317DD39A0E5411EDBDFFC0B1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.62.0/24
Signature Algorithm: sha256WithRSAEncryption
09:56:59:9d:c7:4d:82:15:5d:a7:38:4d:6f:95:38:cd:8c:2e:
6e:34:3c:da:5b:ae:53:bc:c8:61:46:8e:63:eb:14:ba:be:06:
8f:d5:aa:e4:40:ee:05:ce:88:9e:8f:ae:db:ef:c7:08:e0:8a:
94:18:ca:b1:6f:38:cd:78:99:73:c9:92:aa:e6:88:99:91:e4:
c5:8b:d3:cb:eb:61:a1:e7:3b:49:ad:18:c8:17:3a:27:ca:f7:
33:c8:65:31:de:35:cd:fd:4e:cd:35:d2:f6:b9:5a:c3:c8:c6:
f3:e2:98:8a:e7:a0:7f:1f:12:fd:39:c9:13:6f:15:a4:5f:01:
db:ad:98:ec:3a:55:11:6f:79:d0:ca:76:fd:f9:ce:c7:41:44:
e5:1d:46:1e:4e:ad:6c:d8:4b:5a:2a:fc:cf:e1:9a:26:10:cd:
85:b0:b2:ad:f7:cb:48:9c:df:23:fd:25:5e:c8:70:64:72:46:
e9:9f:bc:90:22:96:89:ce:da:dc:76:1d:d7:b7:80:dc:64:a7:
68:2d:d0:b6:48:a3:08:b0:a5:63:c9:60:5b:de:c2:73:da:a0:
3e:97:80:c3:83:93:f8:2f:e4:85:9c:21:8f:58:03:cd:bc:d8:
ef:8b:96:64:f3:4a:05:16:8e:c9:61:c5:95:da:65:91:0a:ed:
07:d9:ae:05
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICF8QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA3MjgwOTAzNDVaFw0yMzA1MTUwOTAzNDVaMBgxFjAU
BgNVBAMMDTYyZTI1MGY1LTYzZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGIX67cjG/Kvwu86rflKv6rCeMhh51D1xAbUoG7NwPyreBcZygEBeWr7mr
NlmRgpRUwoltsnmz0pkEAaNbH43VaVq/V2pbxiwMW4MU+f7KrUcDe+PsqPe5rODf
0FGhEqci3su7BzzmnOWjPHVW1Ch87wxLQGX54YJ+N8auENq/XT5IdgLntCe2MLrv
HENSCloTEpKewVPZ0xkhSVEVrehYUvMcKAPuVHxRA4EuKGGX0Fz52vlFBcaggCyN
4uyok0n9PZ4m+us1vK6OMpPXXJ/fu5OYqmr1qJ/ViDLH4REGCN5y5dUkI1I6NB8u
KMAICO47bmznhcBFw26uFDY/9VNDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUb1zi
mYOt7SQmUUHQCdri21h9rrwwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzMxN0REMzlBMEU1NDExRURCREZGQzBCMUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACayT4wDQYJKoZIhvcNAQEL
BQADggEBAAlWWZ3HTYIVXac4TW+VOM2MLm40PNpbrlO8yGFGjmPrFLq+Bo/VquRA
7gXOiJ6PrtvvxwjgipQYyrFvOM14mXPJkqrmiJmR5MWL08vrYaHnO0mtGMgXOifK
9zPIZTHeNc39Ts010va5WsPIxvPimIrnoH8fEv05yRNvFaRfAdutmOw6VRFvedDK
dv35zsdBROUdRh5OrWzYS1oq/M/hmiYQzYWwsq33y0ic3yP9JV7IcGRyRumfvJAi
lonO2tx2Hde3gNxkp2gt0LZIowiwpWPJYFvewnPaoD6XgMODk/gv5IWcIY9YA828
2O+LlmTzSgUWjslhxZXaZZEK7QfZrgU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-fra.rpki-client.org