Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31D2D61857D111ECBD0B8BB95A40D577.roa
File: 31D2D61857D111ECBD0B8BB95A40D577.roa (raw, json)
Hash identifier: 4FtcbWj1VkK6CDJ99nRS4FLXbgexdsNsdBf6z6V2LX8=
Subject key identifier: E7:B8:A0:31:31:5B:B4:01:A6:C1:7B:BB:FF:F5:D9:4F:CF:07:97:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1335
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31D2D61857D111ECBD0B8BB95A40D577.roa
Signing time: Wed 08 Dec 2021 02:47:34 +0000
ROA not before: Wed 08 Dec 2021 02:47:30 +0000
ROA not after: Fri 30 Dec 2022 02:47:30 +0000
asID: 9009
IP address blocks: 154.194.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4917 (0x1335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 8 02:47:30 2021 GMT
Not After : Dec 30 02:47:30 2022 GMT
Subject: CN=61b01cc6-c16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:5c:e2:23:c6:8b:46:15:8f:f4:94:b0:2f:
57:36:e3:3f:66:cf:33:e3:7b:60:ea:ba:0f:7b:0b:
2d:b7:e3:71:2e:4e:dc:da:8f:fb:60:53:cc:6c:fe:
29:f0:29:4b:3b:47:7f:23:41:50:f5:33:93:08:d4:
e4:52:8d:55:ee:2d:86:83:bd:a4:aa:29:95:a1:0b:
ad:46:a3:ca:18:d4:9a:36:82:95:19:6f:ae:1e:2c:
55:f9:a1:b8:0a:ea:ca:ad:87:58:8c:b2:ad:2c:0f:
0e:4e:e4:59:d8:a2:33:f0:23:f1:7e:12:74:72:49:
86:85:06:91:90:91:8a:c7:35:27:9f:eb:b9:5b:5b:
fc:27:7d:82:c7:c5:24:dd:b0:d2:5d:0f:ed:26:e7:
b6:73:82:d3:18:b8:25:db:8a:ab:7f:0a:d1:37:cd:
91:a0:0f:ac:cf:45:a5:0d:07:0d:c6:06:2c:2a:75:
9d:51:c7:fd:72:10:a8:f2:93:1d:44:b4:54:f8:ea:
2f:12:9d:df:6c:4a:39:ef:29:10:e3:aa:ae:c0:a4:
84:a0:6d:6a:15:68:8e:fc:a7:72:57:c9:c6:a3:29:
a5:9f:d5:ec:1b:ad:f5:d6:37:da:49:68:66:f9:6f:
d2:6f:ee:18:ea:56:87:5d:20:91:7a:c2:35:7e:b2:
20:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B8:A0:31:31:5B:B4:01:A6:C1:7B:BB:FF:F5:D9:4F:CF:07:97:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31D2D61857D111ECBD0B8BB95A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.11.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f7:3d:bc:cb:d5:e4:1a:0c:b8:69:cd:ac:4f:50:7b:6b:45:
cd:b3:af:58:28:14:f1:e2:27:30:a6:d0:43:e7:76:c8:74:dd:
84:f9:08:11:7b:5f:bf:f0:9e:74:a7:f7:96:1c:f7:6b:6e:0d:
e4:e8:ce:36:0b:06:ca:30:c8:e2:88:f7:87:c2:68:3a:ff:d6:
81:e9:62:73:3f:96:8c:a5:f3:eb:40:9f:4a:81:ab:d0:c6:0b:
ff:67:f0:ad:63:6e:35:bb:f7:a5:75:87:b7:c3:9e:11:c4:3d:
e5:ec:6b:ef:6f:80:b0:e4:ff:4c:d4:29:9e:fe:e8:8e:ce:04:
bf:96:bf:76:b7:00:5b:81:9a:0b:ed:df:86:6d:31:87:df:90:
39:51:41:4a:86:5c:09:55:8f:05:7e:5a:94:93:de:fd:4e:cd:
2c:b5:22:27:ae:e3:3b:2b:5d:4e:f2:2a:ac:ac:f6:f0:dd:b2:
3c:4e:c8:0a:7d:9a:8d:91:9d:8e:db:f5:9d:c2:d5:0d:08:96:
eb:62:39:dd:ab:68:5a:fd:36:1f:3f:7b:12:7e:11:b6:96:d9:
f8:00:ca:4e:f5:a7:22:f9:60:97:66:47:00:80:5c:99:b9:d6:
9c:e2:96:39:60:29:ec:bf:ad:79:01:a1:15:77:50:06:dd:d9:
4f:0f:42:18
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEzUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTEyMDgwMjQ3MzBaFw0yMjEyMzAwMjQ3MzBaMBgxFjAU
BgNVBAMMDTYxYjAxY2M2LWMxNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCpTFziI8aLRhWP9JSwL1c24z9mzzPje2Dqug97Cy2343EuTtzaj/tgU8xs
/inwKUs7R38jQVD1M5MI1ORSjVXuLYaDvaSqKZWhC61Go8oY1Jo2gpUZb64eLFX5
obgK6sqth1iMsq0sDw5O5FnYojPwI/F+EnRySYaFBpGQkYrHNSef67lbW/wnfYLH
xSTdsNJdD+0m57ZzgtMYuCXbiqt/CtE3zZGgD6zPRaUNBw3GBiwqdZ1Rx/1yEKjy
kx1EtFT46i8Snd9sSjnvKRDjqq7ApISgbWoVaI78p3JXycajKaWf1ewbrfXWN9pJ
aGb5b9Jv7hjqVoddIJF6wjV+siAXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU57ig
MTFbtAGmwXu7//XZT88Hl+QwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzMxRDJENjE4NTdEMTExRUNCRDBCOEJCOTVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACawgswDQYJKoZIhvcNAQEL
BQADggEBAJD3PbzL1eQaDLhpzaxPUHtrRc2zr1goFPHiJzCm0EPndsh03YT5CBF7
X7/wnnSn95Yc92tuDeTozjYLBsowyOKI94fCaDr/1oHpYnM/loyl8+tAn0qBq9DG
C/9n8K1jbjW796V1h7fDnhHEPeXsa+9vgLDk/0zUKZ7+6I7OBL+Wv3a3AFuBmgvt
34ZtMYffkDlRQUqGXAlVjwV+WpST3v1OzSy1Iieu4zsrXU7yKqys9vDdsjxOyAp9
mo2RnY7b9Z3C1Q0IlutiOd2raFr9Nh8/exJ+EbaW2fgAyk71pyL5YJdmRwCAXJm5
1pziljlgKey/rXkBoRV3UAbd2U8PQhg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-fra.rpki-client.org