Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34AA5AE85BB711ECA3C461C55A40D577.roa
File: 34AA5AE85BB711ECA3C461C55A40D577.roa (raw, json)
Hash identifier: yc4AGB4qP0dCBiiUYIyh8qy45H0If5RnY4ZvT2QmRoU=
Subject key identifier: 24:AE:A6:FA:C6:9D:2D:C7:10:CA:47:F2:07:C1:1B:2B:CD:2A:5E:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 13C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34AA5AE85BB711ECA3C461C55A40D577.roa
Signing time: Mon 13 Dec 2021 01:51:36 +0000
ROA not before: Mon 13 Dec 2021 01:51:33 +0000
ROA not after: Fri 30 Dec 2022 01:51:33 +0000
asID: 133201
IP address blocks: 154.204.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5059 (0x13c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 01:51:33 2021 GMT
Not After : Dec 30 01:51:33 2022 GMT
Subject: CN=61b6a728-ae6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:d7:f7:38:e2:17:61:be:22:7c:a8:e8:61:
b7:1b:7c:f3:77:08:88:08:72:2e:0d:b9:24:28:a4:
34:fd:6d:8b:6c:2f:cb:11:b7:90:cb:ea:17:79:7d:
a6:7b:55:b9:c3:80:89:0a:54:d1:86:78:30:5f:85:
8b:85:a1:ca:7a:ed:12:dc:e5:56:1a:67:1e:96:f4:
6e:f0:be:3e:2c:93:0a:66:7e:c9:80:a1:c3:e8:29:
df:bc:ac:47:33:c3:bb:f5:10:23:54:5e:fe:5e:53:
9d:ef:d7:8e:37:7a:78:1d:3e:f9:d0:e1:04:79:30:
81:1c:7e:68:1e:83:12:f2:26:e8:69:a5:c4:17:21:
1b:39:96:0d:80:3d:f1:73:b5:78:44:f7:b0:39:b3:
38:e0:c7:d0:54:7d:b4:4b:6e:df:ab:bc:ce:60:33:
23:c9:3f:65:e4:70:f2:44:81:37:e8:19:4a:9a:07:
88:fa:59:11:23:dc:9b:34:d2:56:ad:bc:4a:c8:06:
43:9e:97:f3:ba:90:6e:90:00:c4:32:b0:ae:c1:e3:
9d:fe:70:4c:0a:b8:d3:d0:c3:7b:dc:15:7b:a8:72:
77:d2:ae:87:6d:f0:28:46:85:37:3e:e1:35:65:c4:
17:6d:50:12:02:91:50:4c:58:57:ab:44:35:62:c0:
a2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AE:A6:FA:C6:9D:2D:C7:10:CA:47:F2:07:C1:1B:2B:CD:2A:5E:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34AA5AE85BB711ECA3C461C55A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.76.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:4e:4b:02:d0:19:44:db:db:98:94:54:10:ef:80:e6:9f:4e:
db:12:a0:35:7d:73:c4:aa:40:0b:5f:a7:96:59:e3:25:61:c5:
6d:9d:14:2f:67:f4:1c:cb:f9:68:27:80:33:16:cb:f6:a7:60:
95:8c:84:6c:8a:50:c6:4e:52:05:38:bb:1d:06:e8:5c:1f:64:
7e:78:d4:73:c2:7c:a0:3f:dd:58:ec:e9:60:73:04:b9:1c:ea:
55:0f:af:de:f1:65:1b:2d:5f:d9:ed:6d:55:dd:12:36:ae:f0:
4f:dd:98:40:85:4f:a8:03:11:13:86:5c:ed:c0:ac:a6:8b:d9:
8c:3a:c9:f7:17:c6:82:3e:c0:10:99:3f:c3:94:88:c1:65:75:
92:12:5f:d6:ae:71:09:59:af:4f:bd:c4:16:6a:75:29:d3:4a:
bf:c2:d2:6e:61:dd:49:54:e1:76:2f:36:4e:67:84:f4:e5:7b:
d1:e4:21:36:2e:91:e4:3a:65:52:ee:63:df:73:7b:79:72:8b:
fb:d2:da:68:6c:15:33:1e:a5:d2:9c:8e:4b:b9:60:05:0f:58:
0c:e0:fa:92:69:21:c5:f8:cd:a4:1f:ad:b3:8d:cd:61:51:0d:
fe:6c:38:65:56:7d:6f:e8:97:b6:89:50:ac:2f:50:59:77:89:
fb:8a:d1:31
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICE8MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTEyMTMwMTUxMzNaFw0yMjEyMzAwMTUxMzNaMBgxFjAU
BgNVBAMMDTYxYjZhNzI4LWFlNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCngtf3OOIXYb4ifKjoYbcbfPN3CIgIci4NuSQopDT9bYtsL8sRt5DL6hd5
faZ7VbnDgIkKVNGGeDBfhYuFocp67RLc5VYaZx6W9G7wvj4skwpmfsmAocPoKd+8
rEczw7v1ECNUXv5eU53v1443engdPvnQ4QR5MIEcfmgegxLyJuhppcQXIRs5lg2A
PfFztXhE97A5szjgx9BUfbRLbt+rvM5gMyPJP2XkcPJEgTfoGUqaB4j6WREj3Js0
0latvErIBkOel/O6kG6QAMQysK7B453+cEwKuNPQw3vcFXuocnfSrodt8ChGhTc+
4TVlxBdtUBICkVBMWFerRDViwKI5AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUJK6m
+sadLccQykfyB8EbK80qXsgwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzM0QUE1QUU4NUJCNzExRUNBM0M0NjFDNTVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazEwwDQYJKoZIhvcNAQEL
BQADggEBAKZOSwLQGUTb25iUVBDvgOafTtsSoDV9c8SqQAtfp5ZZ4yVhxW2dFC9n
9BzL+WgngDMWy/anYJWMhGyKUMZOUgU4ux0G6FwfZH541HPCfKA/3Vjs6WBzBLkc
6lUPr97xZRstX9ntbVXdEjau8E/dmECFT6gDEROGXO3ArKaL2Yw6yfcXxoI+wBCZ
P8OUiMFldZISX9aucQlZr0+9xBZqdSnTSr/C0m5h3UlU4XYvNk5nhPTle9HkITYu
keQ6ZVLuY99ze3lyi/vS2mhsFTMepdKcjku5YAUPWAzg+pJpIcX4zaQfrbONzWFR
Df5sOGVWfW/ol7aJUKwvUFl3ifuK0TE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:05 2023 by rpki-client on console-ams.rpki-client.org