Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FFF80D834DE11EDAC4D9EC3F1222468.roa
File: 4FFF80D834DE11EDAC4D9EC3F1222468.roa (raw, json)
Hash identifier: /A6NP1Mm8CyHcjQK0jZypNvInTNUMUSA4nD0KAJSO+o=
Subject key identifier: 70:A3:9C:01:5A:FF:E5:65:E2:75:74:4D:05:05:16:66:CE:49:3A:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 18C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FFF80D834DE11EDAC4D9EC3F1222468.roa
Signing time: Thu 15 Sep 2022 10:08:15 +0000
ROA not before: Thu 15 Sep 2022 10:08:11 +0000
ROA not after: Mon 31 Oct 2022 10:08:11 +0000
asID: 212850
IP address blocks: 154.208.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6345 (0x18c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 10:08:11 2022 GMT
Not After : Oct 31 10:08:11 2022 GMT
Subject: CN=6322f98f-6e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:a0:62:54:e3:e2:2a:6c:18:ae:6b:e9:06:
04:e5:bc:b1:d0:b0:75:12:ca:0c:fa:82:53:d5:45:
45:02:9b:13:7b:7e:06:83:47:3f:91:88:fe:c7:54:
93:07:be:b7:1b:3f:01:63:9c:69:cd:ec:fa:33:f5:
c4:91:f2:3d:17:58:f3:3b:b7:33:45:7a:c4:75:c6:
f3:33:7f:2a:42:5b:5b:d3:8f:df:11:57:ec:d6:e4:
89:60:5b:7a:c8:37:c8:72:0d:3c:42:1a:2c:f7:90:
be:56:00:1c:41:0c:48:4d:1f:0c:08:4a:cd:8f:56:
70:19:4b:4e:b3:86:30:a6:3c:e3:39:75:5c:ce:6c:
a0:62:b4:e3:77:99:1a:48:5b:b4:a9:79:17:15:b5:
b2:ef:86:f4:49:a5:d3:cf:e9:dd:fe:33:2b:64:f0:
4d:0f:c8:58:30:5f:f1:84:36:fb:1d:86:c5:ca:29:
1b:25:dd:6f:dd:66:3a:54:62:b8:ab:69:b4:12:bd:
47:7a:43:1c:83:db:10:ab:4c:1f:e5:cd:62:19:51:
54:53:49:69:25:10:38:98:13:53:f5:02:27:af:9e:
07:3f:2a:14:11:75:89:61:f6:c0:fe:07:33:84:a8:
92:6a:8f:ee:08:3e:8a:cd:40:19:fc:ec:8e:d4:13:
6a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A3:9C:01:5A:FF:E5:65:E2:75:74:4D:05:05:16:66:CE:49:3A:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FFF80D834DE11EDAC4D9EC3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.131.0/24
Signature Algorithm: sha256WithRSAEncryption
87:76:e0:06:aa:53:fd:ab:2c:6f:8a:2a:02:a3:88:c1:c5:d1:
cc:c3:3a:a6:f7:4c:d7:ea:bd:cd:e6:ad:b6:c5:12:cf:63:28:
28:ce:36:be:f5:e4:c2:fa:6b:27:63:87:81:50:cf:b3:f3:5b:
93:4e:14:6f:e6:3e:f9:8c:50:88:69:39:27:ab:b9:83:cf:20:
67:80:a8:ca:5e:07:15:5d:f0:2a:c5:ae:65:09:08:f5:27:8b:
33:cd:06:0f:06:1f:88:6c:83:06:ad:9f:b2:c6:c0:b5:7d:d4:
00:ab:40:ec:10:80:a2:71:22:f5:ba:d4:aa:b2:c4:5e:e7:92:
4e:f1:c6:d7:53:8f:c2:f3:c3:6d:73:80:30:5c:66:9e:7e:b7:
a6:f1:fc:c3:01:89:d1:8c:6f:e6:0e:81:88:c3:07:25:dd:0c:
ba:19:8d:0a:1a:41:f0:3f:92:3e:ad:a7:df:65:cf:f3:b9:ef:
a7:0f:1c:28:56:a7:6d:8a:08:33:38:71:77:46:3c:a5:40:fc:
0c:d2:d1:45:f4:45:5a:ae:aa:00:6b:06:78:0f:b8:18:d4:c2:
48:21:80:17:82:e4:e0:f4:a2:72:40:60:72:2d:2c:bf:9f:1f:
4e:96:89:1e:7c:42:75:27:04:47:e8:8b:05:9f:6f:93:9d:7c:
83:7d:c2:be
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGMkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA5MTUxMDA4MTFaFw0yMjEwMzExMDA4MTFaMBgxFjAU
BgNVBAMMDTYzMjJmOThmLTZlM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCr56BiVOPiKmwYrmvpBgTlvLHQsHUSygz6glPVRUUCmxN7fgaDRz+RiP7H
VJMHvrcbPwFjnGnN7Poz9cSR8j0XWPM7tzNFesR1xvMzfypCW1vTj98RV+zW5Ilg
W3rIN8hyDTxCGiz3kL5WABxBDEhNHwwISs2PVnAZS06zhjCmPOM5dVzObKBitON3
mRpIW7SpeRcVtbLvhvRJpdPP6d3+Mytk8E0PyFgwX/GENvsdhsXKKRsl3W/dZjpU
YrirabQSvUd6QxyD2xCrTB/lzWIZUVRTSWklEDiYE1P1Aievngc/KhQRdYlh9sD+
BzOEqJJqj+4IPorNQBn87I7UE2qzAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUcKOc
AVr/5WXidXRNBQUWZs5JOtUwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzRGRkY4MEQ4MzRERTExRURBQzREOUVDM0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa0IMwDQYJKoZIhvcNAQEL
BQADggEBAId24AaqU/2rLG+KKgKjiMHF0czDOqb3TNfqvc3mrbbFEs9jKCjONr71
5ML6aydjh4FQz7PzW5NOFG/mPvmMUIhpOSeruYPPIGeAqMpeBxVd8CrFrmUJCPUn
izPNBg8GH4hsgwatn7LGwLV91ACrQOwQgKJxIvW61KqyxF7nkk7xxtdTj8Lzw21z
gDBcZp5+t6bx/MMBidGMb+YOgYjDByXdDLoZjQoaQfA/kj6tp99lz/O576cPHChW
p22KCDM4cXdGPKVA/AzS0UX0RVquqgBrBngPuBjUwkghgBeC5OD0onJAYHItLL+f
H06WiR58QnUnBEfoiwWfb5OdfIN9wr4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:06 2023 by rpki-client on console-ams.rpki-client.org