Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44B52B9CF85C11ECA23BB9E3F1222468.roa
File: 44B52B9CF85C11ECA23BB9E3F1222468.roa (raw, json)
Hash identifier: KPGiU30oQij7QD4fNWpaSn2nYm+XkPO2nwFSh4h6tEc=
Subject key identifier: 89:48:31:F0:40:A0:F7:18:32:0D:D5:41:53:A2:7D:8F:73:0C:DC:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1717
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44B52B9CF85C11ECA23BB9E3F1222468.roa
Signing time: Thu 30 Jun 2022 10:06:12 +0000
ROA not before: Thu 30 Jun 2022 10:06:08 +0000
ROA not after: Fri 30 Dec 2022 10:06:08 +0000
asID: 328608
IP address blocks: 154.201.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5911 (0x1717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 30 10:06:08 2022 GMT
Not After : Dec 30 10:06:08 2022 GMT
Subject: CN=62bd7593-5936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:35:94:d4:e2:83:be:fc:f0:4d:a7:0c:c0:
3d:b5:44:50:b5:5a:71:e0:cd:4e:f9:a0:c6:d6:d1:
27:86:41:b8:2e:55:a7:6a:7f:b8:e3:36:fc:0c:70:
fd:05:aa:cb:8d:99:00:6c:04:80:26:8a:f2:06:cb:
10:7f:9a:a2:31:b5:58:b6:6f:d3:04:cb:2b:1f:68:
24:64:10:19:b1:52:c4:88:5f:df:66:94:32:2c:21:
64:b1:c9:41:d1:20:2b:3e:6c:ea:f2:02:fc:a4:86:
16:3f:eb:03:4a:6a:50:6b:58:a4:c6:26:69:08:3b:
06:09:2c:ab:2f:ce:00:29:2b:8b:93:a5:cf:d2:48:
ac:49:71:19:75:e0:fc:ec:b0:06:b5:b9:79:39:5c:
57:5e:54:f2:a5:fe:3f:53:fc:b5:83:f5:ae:64:c9:
cf:3a:37:39:33:4b:b3:bf:a3:90:63:a8:c5:43:65:
01:00:78:ab:af:4f:79:e3:6f:6d:b2:a5:99:16:c3:
28:d6:75:09:75:7a:36:69:ee:f3:88:ce:b3:d2:48:
f2:27:60:c3:d7:3c:f5:15:97:39:ac:79:47:d5:7d:
d2:b5:aa:80:0a:a9:47:09:fb:1a:c0:24:9f:fb:2e:
b8:a7:26:fd:17:62:12:91:3c:41:1c:95:ef:af:dc:
f7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:48:31:F0:40:A0:F7:18:32:0D:D5:41:53:A2:7D:8F:73:0C:DC:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44B52B9CF85C11ECA23BB9E3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.7.0/24
Signature Algorithm: sha256WithRSAEncryption
36:92:c0:f6:b6:e1:5b:10:18:12:a9:d4:3a:40:89:93:b0:0b:
f5:7b:42:fc:2e:84:48:3c:8d:9a:5b:55:34:77:be:b7:92:bb:
ae:6f:1d:2b:c4:6f:31:50:da:83:09:43:54:9c:69:3d:84:c1:
16:58:7f:36:cb:34:3a:f7:0a:51:b4:61:fd:fd:f4:d8:ca:9b:
2d:a3:90:90:6e:3c:0c:08:cb:04:d4:b5:e9:bb:93:9b:03:56:
4e:62:3e:f1:06:fc:99:70:66:52:56:ab:a8:29:f2:4d:f6:a8:
a2:b3:ea:95:d3:34:71:13:13:46:fd:b0:1f:d6:8b:a1:cd:0b:
2a:3f:b5:ca:87:36:bc:8d:e1:f9:b6:03:c8:19:7e:7d:67:0b:
77:02:1b:4e:1f:50:6c:20:dd:d3:17:89:bb:9b:6d:a0:b1:99:
21:7a:39:e6:72:de:dd:d7:3b:b7:df:ba:e2:06:82:17:74:e1:
68:6e:83:83:7d:e7:34:6c:c1:4d:be:48:6d:a4:7c:e8:33:40:
07:32:a7:d4:33:d3:55:2e:18:30:6f:85:82:4d:12:06:68:74:
93:38:62:32:f7:b2:10:60:c5:cb:7d:97:05:aa:26:05:7c:ab:
1c:3e:f5:13:37:69:5a:b2:2c:e6:20:a9:8d:ad:e0:a6:a4:79:
1a:81:95:5e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFxcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA2MzAxMDA2MDhaFw0yMjEyMzAxMDA2MDhaMBgxFjAU
BgNVBAMMDTYyYmQ3NTkzLTU5MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8pTWU1OKDvvzwTacMwD21RFC1WnHgzU75oMbW0SeGQbguVadqf7jjNvwM
cP0FqsuNmQBsBIAmivIGyxB/mqIxtVi2b9MEyysfaCRkEBmxUsSIX99mlDIsIWSx
yUHRICs+bOryAvykhhY/6wNKalBrWKTGJmkIOwYJLKsvzgApK4uTpc/SSKxJcRl1
4PzssAa1uXk5XFdeVPKl/j9T/LWD9a5kyc86NzkzS7O/o5BjqMVDZQEAeKuvT3nj
b22ypZkWwyjWdQl1ejZp7vOIzrPSSPInYMPXPPUVlzmseUfVfdK1qoAKqUcJ+xrA
JJ/7LrinJv0XYhKRPEEcle+v3PdDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUiUgx
8ECg9xgyDdVBU6J9j3MM3FkwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzQ0QjUyQjlDRjg1QzExRUNBMjNCQjlFM0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACayQcwDQYJKoZIhvcNAQEL
BQADggEBADaSwPa24VsQGBKp1DpAiZOwC/V7QvwuhEg8jZpbVTR3vreSu65vHSvE
bzFQ2oMJQ1ScaT2EwRZYfzbLNDr3ClG0Yf399NjKmy2jkJBuPAwIywTUtem7k5sD
Vk5iPvEG/JlwZlJWq6gp8k32qKKz6pXTNHETE0b9sB/Wi6HNCyo/tcqHNryN4fm2
A8gZfn1nC3cCG04fUGwg3dMXibubbaCxmSF6OeZy3t3XO7ffuuIGghd04Whug4N9
5zRswU2+SG2kfOgzQAcyp9Qz01UuGDBvhYJNEgZodJM4YjL3shBgxct9lwWqJgV8
qxw+9RM3aVqyLOYgqY2t4KakeRqBlV4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-fra.rpki-client.org