Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4312AA88E58111EBA1F95230F8AEA228.roa
File: 4312AA88E58111EBA1F95230F8AEA228.roa (raw, json)
Hash identifier: pAVyPjgJk2bw7NXP+XsXMvsgGYNOU5IoTwogwVTQbZQ=
Subject key identifier: A2:29:4D:A0:E6:6A:8B:BE:5E:C3:F2:13:2C:B9:06:24:91:1C:72:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 081A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4312AA88E58111EBA1F95230F8AEA228.roa
Signing time: Thu 15 Jul 2021 15:28:10 +0000
ROA not before: Thu 15 Jul 2021 15:28:05 +0000
ROA not after: Sat 09 Jul 2022 15:28:05 +0000
asID: 397630
IP address blocks: 154.84.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2074 (0x81a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:28:05 2021 GMT
Not After : Jul 9 15:28:05 2022 GMT
Subject: CN=60f0540a-ed3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:83:ea:23:6b:f2:b0:69:2e:7d:19:1c:95:
6e:af:c3:ab:68:5d:d0:70:f7:c8:ae:21:35:c5:2c:
fe:42:63:03:fb:7b:5f:5d:ed:df:71:2a:4a:b1:74:
be:f6:90:9b:d6:ce:82:c4:9f:e3:19:fb:fb:5f:1d:
c3:15:84:14:c2:12:3a:c7:03:3b:fb:a6:15:f1:65:
2a:24:aa:a2:d2:06:fa:21:38:1d:46:6d:ce:6b:0f:
b3:bd:c6:35:7e:d3:d9:1e:18:d7:1b:18:fe:b6:55:
14:68:a8:20:84:7e:9f:72:85:3a:bd:65:ff:54:da:
58:c6:c4:1c:7e:2b:04:52:3c:19:a7:cc:c0:fa:7b:
ac:01:ca:6d:5d:33:1a:05:9a:40:e8:b3:27:ce:94:
3b:b7:d7:17:3a:0c:cc:ef:ba:1e:2e:81:09:b5:d0:
9e:e6:22:b1:d9:eb:48:68:1a:e0:16:66:d9:be:70:
6e:f6:69:0c:f1:48:44:a0:ad:e2:53:77:2f:9e:96:
51:c8:bf:6f:24:59:22:b5:64:c5:33:35:85:b7:df:
8a:3f:4f:d2:24:14:28:9f:29:5e:97:e6:96:a1:0b:
24:61:e1:ee:eb:dc:48:52:63:f9:10:37:ad:0d:c2:
ef:fc:a7:e9:4f:f4:32:eb:14:95:40:f4:8b:89:e3:
0a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:29:4D:A0:E6:6A:8B:BE:5E:C3:F2:13:2C:B9:06:24:91:1C:72:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4312AA88E58111EBA1F95230F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.143.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:4f:73:dd:f9:9d:ad:c4:24:83:90:49:9c:c8:9b:ea:0a:99:
7a:d1:05:8e:b8:3e:8d:51:98:ab:15:fe:9f:a1:62:ae:0c:46:
73:d7:e1:9b:a1:fc:a6:8d:80:40:90:b7:a2:86:12:0f:01:6d:
e1:46:92:70:ac:8a:a4:26:99:f2:ca:c0:15:19:3a:d0:06:2f:
1e:08:4f:24:53:7e:3b:e7:b3:06:f0:e9:6c:6c:91:9b:04:15:
63:5f:ea:c3:ed:87:b3:8b:dd:a3:34:df:32:26:d9:24:e2:55:
ca:9c:03:bf:77:de:71:22:67:8a:99:3a:72:9e:c4:55:35:fa:
9f:9b:52:16:59:cb:f5:67:57:c5:b0:b1:2f:6c:22:15:78:3d:
ec:d2:2e:c3:18:c0:70:d6:91:bd:05:0a:c9:25:7d:8c:dc:08:
51:4e:40:5d:af:a7:39:2d:85:e8:e5:6e:6e:f5:d7:47:b0:75:
42:6a:ce:d9:28:36:ac:99:9e:d0:91:1d:79:3e:af:b1:4d:1e:
4d:a7:1e:2a:aa:0a:a6:da:00:af:f0:53:3d:84:a8:61:45:dd:
ae:1f:e4:d3:6a:96:3e:cf:65:02:1c:9a:56:16:72:52:14:2b:
5e:5b:4a:61:8c:9a:aa:7c:a8:73:df:ea:ed:c6:1b:6f:03:8d:
87:db:d1:2f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCBowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTA3MTUxNTI4MDVaFw0yMjA3MDkxNTI4MDVaMBgxFjAU
BgNVBAMTDTYwZjA1NDBhLWVkM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9E4PqI2vysGkufRkclW6vw6toXdBw98iuITXFLP5CYwP7e19d7d9xKkqx
dL72kJvWzoLEn+MZ+/tfHcMVhBTCEjrHAzv7phXxZSokqqLSBvohOB1Gbc5rD7O9
xjV+09keGNcbGP62VRRoqCCEfp9yhTq9Zf9U2ljGxBx+KwRSPBmnzMD6e6wBym1d
MxoFmkDosyfOlDu31xc6DMzvuh4ugQm10J7mIrHZ60hoGuAWZtm+cG72aQzxSESg
reJTdy+ellHIv28kWSK1ZMUzNYW334o/T9IkFCifKV6X5pahCyRh4e7r3EhSY/kQ
N60Nwu/8p+lP9DLrFJVA9IuJ4wrpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUoilN
oOZqi75ew/ITLLkGJJEccjcwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzQzMTJBQTg4RTU4MTExRUJBMUY5NTIzMEY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaVI8wDQYJKoZIhvcNAQEL
BQADggEBANFPc935na3EJIOQSZzIm+oKmXrRBY64Po1RmKsV/p+hYq4MRnPX4Zuh
/KaNgECQt6KGEg8BbeFGknCsiqQmmfLKwBUZOtAGLx4ITyRTfjvnswbw6WxskZsE
FWNf6sPth7OL3aM03zIm2STiVcqcA7933nEiZ4qZOnKexFU1+p+bUhZZy/VnV8Ww
sS9sIhV4PezSLsMYwHDWkb0FCsklfYzcCFFOQF2vpzkthejlbm7110ewdUJqztko
NqyZntCRHXk+r7FNHk2nHiqqCqbaAK/wUz2EqGFF3a4f5NNqlj7PZQIcmlYWclIU
K15bSmGMmqp8qHPf6u3GG28DjYfb0S8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-fra.rpki-client.org