Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/365DF6DABA5111EC8FAC9C935A40D577.roa
File: 365DF6DABA5111EC8FAC9C935A40D577.roa (raw, json)
Hash identifier: M04CE827RLimtU4OCKUi+gMXTsHQnQmhkvtfbkB2/Rw=
Subject key identifier: 63:39:C5:2C:7F:DD:F2:B3:BC:8F:4B:0A:F4:10:B9:3C:8C:75:B8:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 15BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/365DF6DABA5111EC8FAC9C935A40D577.roa
Signing time: Tue 12 Apr 2022 11:10:51 +0000
ROA not before: Tue 12 Apr 2022 11:10:47 +0000
ROA not after: Wed 31 May 2023 11:10:47 +0000
asID: 132513
IP address blocks: 154.85.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5565 (0x15bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 11:10:47 2022 GMT
Not After : May 31 11:10:47 2023 GMT
Subject: CN=62555e3b-6cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8e:40:ac:1f:44:3e:66:2c:ae:6d:d7:fc:a1:
52:2c:fe:79:a4:5d:0d:7a:72:15:d1:9e:be:ab:b9:
96:91:f6:3a:66:8f:04:d5:31:44:01:97:7b:11:44:
0e:30:5e:23:af:33:09:16:a5:c4:05:f5:57:39:03:
93:d0:27:92:c2:f6:aa:f8:33:d7:01:5d:e0:05:35:
b5:49:19:4b:a9:28:ec:b8:3d:ff:0e:a7:8b:29:fa:
d9:8f:9a:23:a6:34:db:0a:9c:c2:af:46:f8:85:09:
1f:74:df:06:62:59:83:6d:80:82:62:df:29:83:d3:
c0:f1:6d:11:79:ba:a2:50:a7:b8:5e:43:06:44:b2:
f1:ea:18:df:53:39:5e:d2:bb:55:7b:b4:f5:9b:43:
c8:e1:af:63:27:68:ce:d6:45:62:87:13:5d:ac:34:
6d:d4:19:20:b7:78:c8:9c:27:77:b0:b8:c3:b7:59:
37:86:6e:96:88:5e:76:31:84:0d:cf:eb:37:77:c8:
66:81:5d:6d:2a:67:c3:55:13:6a:f6:f1:f1:fb:68:
92:45:96:c5:97:79:3e:7a:b1:08:bc:8f:46:d9:5d:
3b:00:2c:8b:6e:59:fa:12:a6:8c:4f:26:0a:26:10:
8c:df:fc:ca:fa:9d:8c:43:ed:d2:22:3a:1c:14:82:
01:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:39:C5:2C:7F:DD:F2:B3:BC:8F:4B:0A:F4:10:B9:3C:8C:75:B8:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/365DF6DABA5111EC8FAC9C935A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.98.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:ec:c8:26:0a:55:39:9c:dc:f5:66:35:2d:b1:00:10:fd:33:
0e:39:40:67:00:65:29:fd:c9:b4:5d:d0:62:58:32:f2:e5:f4:
7d:5b:5f:9b:95:7c:4a:75:34:67:37:19:22:dc:e4:48:8a:bb:
44:10:c1:a3:79:df:16:77:6c:e7:aa:c1:3c:4a:13:93:ef:8b:
d9:7e:62:bf:ca:34:c2:69:92:d9:5f:57:f3:54:19:f3:5a:19:
a7:5b:20:33:f8:a4:53:d9:cb:61:4f:f2:56:14:0d:e2:44:86:
89:09:f8:39:91:3a:0f:ec:08:ec:0c:16:7e:07:c5:c2:28:61:
fe:d1:59:52:84:ab:8c:a0:56:98:dc:6d:22:1d:3b:46:12:d5:
11:27:ab:c6:6a:47:bd:a0:8e:8f:4f:c2:43:07:93:3d:dc:64:
03:90:dd:56:86:cc:86:cb:22:2f:d6:7f:46:55:29:a6:6a:72:
65:f2:84:8b:49:84:f2:27:af:0a:b9:1b:c6:fa:59:05:bc:ce:
b8:e7:54:4f:ee:95:ed:64:13:0f:20:e9:c3:fa:97:7a:80:58:
78:b4:75:fb:2b:05:fd:7f:5a:0a:e7:96:b1:d0:e1:01:37:90:
66:73:0e:ca:3d:b8:f5:31:62:6e:7e:cd:78:40:8b:8d:44:20:
95:5a:cd:96
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFb0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA0MTIxMTEwNDdaFw0yMzA1MzExMTEwNDdaMBgxFjAU
BgNVBAMMDTYyNTU1ZTNiLTZjZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGjkCsH0Q+Ziyubdf8oVIs/nmkXQ16chXRnr6ruZaR9jpmjwTVMUQBl3sR
RA4wXiOvMwkWpcQF9Vc5A5PQJ5LC9qr4M9cBXeAFNbVJGUupKOy4Pf8Op4sp+tmP
miOmNNsKnMKvRviFCR903wZiWYNtgIJi3ymD08DxbRF5uqJQp7heQwZEsvHqGN9T
OV7Su1V7tPWbQ8jhr2MnaM7WRWKHE12sNG3UGSC3eMicJ3ewuMO3WTeGbpaIXnYx
hA3P6zd3yGaBXW0qZ8NVE2r28fH7aJJFlsWXeT56sQi8j0bZXTsALItuWfoSpoxP
JgomEIzf/Mr6nYxD7dIiOhwUggFXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUYznF
LH/d8rO8j0sK9BC5PIx1uMEwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzM2NURGNkRBQkE1MTExRUM4RkFDOUM5MzVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaVWIwDQYJKoZIhvcNAQEL
BQADggEBANXsyCYKVTmc3PVmNS2xABD9Mw45QGcAZSn9ybRd0GJYMvLl9H1bX5uV
fEp1NGc3GSLc5EiKu0QQwaN53xZ3bOeqwTxKE5Pvi9l+Yr/KNMJpktlfV/NUGfNa
GadbIDP4pFPZy2FP8lYUDeJEhokJ+DmROg/sCOwMFn4HxcIoYf7RWVKEq4ygVpjc
bSIdO0YS1REnq8ZqR72gjo9PwkMHkz3cZAOQ3VaGzIbLIi/Wf0ZVKaZqcmXyhItJ
hPInrwq5G8b6WQW8zrjnVE/ule1kEw8g6cP6l3qAWHi0dfsrBf1/WgrnlrHQ4QE3
kGZzDso9uPUxYm5+zXhAi41EIJVazZY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-fra.rpki-client.org