Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47EB9486012A11EE9013C32B4AD9E6FC.roa
File: 47EB9486012A11EE9013C32B4AD9E6FC.roa (raw, json)
Hash identifier: tbFbz1XhAVTBKiHuJiJDozNXhpJBRe5vWP38bPmUm7U=
Subject key identifier: CF:E2:05:E0:16:60:42:AA:DC:05:BC:AE:FE:72:F8:5C:1D:35:1F:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2912
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47EB9486012A11EE9013C32B4AD9E6FC.roa
Signing time: Fri 02 Jun 2023 09:46:00 +0000
ROA not before: Fri 02 Jun 2023 09:45:57 +0000
ROA not after: Sat 30 Dec 2023 09:45:57 +0000
asID: 140883
IP address blocks: 154.201.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10514 (0x2912)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 2 09:45:57 2023 GMT
Not After : Dec 30 09:45:57 2023 GMT
Subject: CN=6479ba58-ec7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:60:34:8c:f7:b3:29:14:dc:3d:78:0c:4a:
bc:6c:d4:5c:96:e3:1b:75:7f:4e:7b:5f:c9:1a:a2:
ba:dc:96:0b:61:fd:cc:68:8c:23:14:62:a8:fd:ae:
37:91:c2:f1:40:aa:a1:cf:2b:97:b9:65:90:0b:21:
f3:46:5f:5e:49:39:e4:cb:23:1c:5e:5f:7d:7b:c1:
62:11:11:77:7e:43:f6:c6:01:30:1d:f1:40:14:ff:
b2:28:1e:65:75:87:a7:00:2c:5a:22:ec:21:f0:d3:
15:29:f3:61:2c:f2:0e:8a:0d:3c:0a:56:23:f4:94:
d7:e5:eb:fc:5f:8f:16:31:fc:5c:9c:15:e4:c4:cb:
b0:2f:e1:17:eb:fe:d7:de:12:8d:b9:c5:f6:b4:b2:
92:82:fa:5c:6e:c2:fe:23:00:76:3a:48:2b:85:0d:
1b:35:4b:87:50:57:0b:05:e2:e0:88:95:5b:2c:04:
d5:e0:dd:59:34:22:c7:68:39:5c:60:17:7b:5d:5a:
ea:ee:bc:25:27:31:5a:78:f1:20:78:a7:ee:bc:9f:
d0:de:75:8f:49:cd:97:2a:0b:d1:60:ce:4c:12:1b:
c8:36:9c:ab:09:18:29:98:cc:92:65:b1:96:2c:d3:
a0:11:53:07:fa:fe:f3:b3:b0:cf:22:8c:17:c0:29:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E2:05:E0:16:60:42:AA:DC:05:BC:AE:FE:72:F8:5C:1D:35:1F:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47EB9486012A11EE9013C32B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.5.0/24
Signature Algorithm: sha256WithRSAEncryption
85:43:f9:47:e6:24:ad:f2:26:68:33:1d:ed:aa:19:61:bd:da:
59:ad:85:05:cb:40:03:15:d0:06:09:45:09:5f:f4:eb:dd:7a:
82:7d:66:f2:92:81:c6:72:d2:c4:a1:b6:e8:c4:f6:72:42:04:
9d:55:05:cb:65:f7:b2:0d:85:ab:62:64:49:de:82:d5:c7:fb:
33:aa:34:8a:d7:6f:1d:d0:bb:1d:de:09:3b:80:b8:53:7d:fa:
aa:d6:02:88:a5:08:35:a8:bd:80:cd:70:93:3e:b8:b8:56:07:
87:87:f8:4f:b7:b6:f3:37:9a:7d:83:b4:75:1a:ee:f1:5d:1f:
34:98:bc:dc:de:08:f9:40:2a:4d:b6:88:7b:8a:78:5a:c2:7a:
45:2f:86:6a:ef:d2:57:9b:96:3c:58:87:82:0d:81:dd:32:ac:
72:19:26:f3:68:2f:2d:e9:cc:fe:f8:17:9d:3a:72:02:c5:1f:
09:56:a6:c5:e1:c8:30:0d:4c:e0:88:30:ab:ea:00:c5:3a:4c:
4f:7f:2c:d4:cb:16:7b:52:f9:fd:84:7b:8e:47:e4:c9:0f:85:
02:4b:37:af:61:a0:f2:e7:f7:b9:6f:a9:94:19:03:c0:0c:bb:
c2:f6:ae:94:fc:37:c3:8f:d7:41:88:a1:73:c2:b5:80:d8:ee:
87:07:9f:6f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICKRIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA2MDIwOTQ1NTdaFw0yMzEyMzAwOTQ1NTdaMBgxFjAU
BgNVBAMTDTY0NzliYTU4LWVjN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5xWA0jPezKRTcPXgMSrxs1FyW4xt1f057X8kaorrclgth/cxojCMUYqj9
rjeRwvFAqqHPK5e5ZZALIfNGX15JOeTLIxxeX317wWIREXd+Q/bGATAd8UAU/7Io
HmV1h6cALFoi7CHw0xUp82Es8g6KDTwKViP0lNfl6/xfjxYx/FycFeTEy7Av4Rfr
/tfeEo25xfa0spKC+lxuwv4jAHY6SCuFDRs1S4dQVwsF4uCIlVssBNXg3Vk0Isdo
OVxgF3tdWuruvCUnMVp48SB4p+68n9DedY9JzZcqC9FgzkwSG8g2nKsJGCmYzJJl
sZYs06ARUwf6/vOzsM8ijBfAKbJfAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUz+IF
4BZgQqrcBbyu/nL4XB01H9owHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzQ3RUI5NDg2MDEyQTExRUU5MDEzQzMyQjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACayQUwDQYJKoZIhvcNAQEL
BQADggEBAIVD+UfmJK3yJmgzHe2qGWG92lmthQXLQAMV0AYJRQlf9OvdeoJ9ZvKS
gcZy0sShtujE9nJCBJ1VBctl97INhatiZEnegtXH+zOqNIrXbx3Qux3eCTuAuFN9
+qrWAoilCDWovYDNcJM+uLhWB4eH+E+3tvM3mn2DtHUa7vFdHzSYvNzeCPlAKk22
iHuKeFrCekUvhmrv0lebljxYh4INgd0yrHIZJvNoLy3pzP74F506cgLFHwlWpsXh
yDANTOCIMKvqAMU6TE9/LNTLFntS+f2Ee45H5MkPhQJLN69hoPLn97lvqZQZA8AM
u8L2rpT8N8OP10GIoXPCtYDY7ocHn28=
-----END CERTIFICATE-----
Generated at Sun Dec 31 03:22:24 2023 by rpki-client on console-fra.rpki-client.org