Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55E239E8125411EDBAC4B9E5F1222468.roa
File: 55E239E8125411EDBAC4B9E5F1222468.roa (raw, json)
Hash identifier: Xadc3Ni2k8fDFpMPYcyGfaNFP+QgG83o4vMbxoG9tLw=
Subject key identifier: DE:91:83:76:79:04:8C:F6:A8:CB:98:DF:D0:E1:63:CD:77:4C:4C:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 17F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55E239E8125411EDBAC4B9E5F1222468.roa
Signing time: Tue 02 Aug 2022 11:14:55 +0000
ROA not before: Tue 02 Aug 2022 11:14:51 +0000
ROA not after: Thu 10 Aug 2023 11:14:51 +0000
asID: 133861
IP address blocks: 154.204.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6130 (0x17f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 11:14:51 2022 GMT
Not After : Aug 10 11:14:51 2023 GMT
Subject: CN=62e9072e-6137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:92:fd:8a:f6:2f:07:0b:c2:92:51:99:26:b3:
e7:c0:ed:d8:39:80:ad:9a:3b:29:ec:90:d1:a6:8a:
a6:ea:5d:5a:dc:8a:a8:aa:c0:76:d5:48:7a:58:c5:
09:34:e5:eb:ec:02:d8:02:70:d8:d3:ea:d9:82:9d:
87:67:ba:0a:15:a2:7a:51:e7:01:3f:e3:e4:d3:da:
cb:c8:94:e1:9f:51:ee:24:53:e7:e8:23:f6:2b:95:
75:42:97:a9:20:95:a6:eb:37:6c:3f:3c:b5:c2:3a:
f8:7e:70:91:c8:22:34:2a:e8:65:d2:29:dc:24:2f:
58:60:a1:6e:02:c1:e3:af:12:bd:48:b8:0b:6c:55:
23:6e:4b:ff:34:ee:53:16:46:69:ca:8c:c0:94:88:
83:a5:49:79:d1:84:e5:31:1a:1c:dd:ce:c0:9f:2d:
d9:23:cb:9c:b3:ce:6e:c7:15:33:e9:59:77:6c:89:
2f:c5:68:b4:a5:fe:ec:52:74:f4:e1:9e:00:18:9e:
ae:86:fe:5e:db:a3:b8:2b:45:b3:ac:15:c3:19:fe:
fc:c1:04:2c:0d:1a:28:c3:a4:6d:89:4a:d4:1e:f2:
a6:ea:63:a2:4a:ec:32:be:b6:15:96:7b:be:cb:98:
67:89:15:04:40:ae:85:94:33:87:dd:5f:b6:1d:bd:
cf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:91:83:76:79:04:8C:F6:A8:CB:98:DF:D0:E1:63:CD:77:4C:4C:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55E239E8125411EDBAC4B9E5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.39.0/24
Signature Algorithm: sha256WithRSAEncryption
56:96:b3:3a:58:af:15:0e:91:be:ba:cd:0f:b7:61:9e:b0:02:
d2:fd:db:fa:f6:d2:32:d4:61:bf:fb:a3:26:a4:94:b5:49:65:
e2:a1:5a:5e:45:e2:5c:6a:2a:6a:c6:6a:c8:0e:49:27:e0:58:
9a:77:7e:03:36:8d:ad:86:2b:12:08:98:9e:bc:ad:68:fc:52:
ac:7b:82:f8:cc:da:2c:17:50:72:b8:7b:42:f4:8f:52:99:dd:
64:4e:8e:19:89:86:ec:b6:17:24:91:65:04:d7:73:ac:c2:81:
a5:8b:36:88:68:8f:b7:a8:d0:84:61:6d:65:96:94:ae:02:79:
5d:87:de:e4:58:41:d6:3c:ac:34:ba:fc:f2:e1:ca:17:0f:de:
ea:f0:83:5c:bb:50:f7:94:1a:02:bf:57:fe:07:78:cb:bd:0f:
25:2f:d5:38:c6:20:f0:c1:6d:e3:5b:89:21:05:20:ff:d8:9c:
51:df:bd:c2:c0:d3:a0:2f:cf:9a:00:4c:d5:8a:53:16:a8:4a:
94:a3:3a:05:3e:d0:94:19:76:80:ed:8e:f2:cd:f9:d3:db:0e:
0f:7b:76:5d:fe:87:18:14:c2:6b:a6:78:37:5c:8a:f2:4b:d4:
47:55:50:4c:eb:d7:04:43:ca:3a:f0:aa:40:3d:41:66:cf:e5:
f8:3b:75:a5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICF/IwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA4MDIxMTE0NTFaFw0yMzA4MTAxMTE0NTFaMBgxFjAU
BgNVBAMMDTYyZTkwNzJlLTYxMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdkv2K9i8HC8KSUZkms+fA7dg5gK2aOynskNGmiqbqXVrciqiqwHbVSHpY
xQk05evsAtgCcNjT6tmCnYdnugoVonpR5wE/4+TT2svIlOGfUe4kU+foI/YrlXVC
l6kglabrN2w/PLXCOvh+cJHIIjQq6GXSKdwkL1hgoW4CweOvEr1IuAtsVSNuS/80
7lMWRmnKjMCUiIOlSXnRhOUxGhzdzsCfLdkjy5yzzm7HFTPpWXdsiS/FaLSl/uxS
dPThngAYnq6G/l7bo7grRbOsFcMZ/vzBBCwNGijDpG2JStQe8qbqY6JK7DK+thWW
e77LmGeJFQRAroWUM4fdX7Ydvc9/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU3pGD
dnkEjPaoy5jf0OFjzXdMTMswHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzU1RTIzOUU4MTI1NDExRURCQUM0QjlFNUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazCcwDQYJKoZIhvcNAQEL
BQADggEBAFaWszpYrxUOkb66zQ+3YZ6wAtL92/r20jLUYb/7oyaklLVJZeKhWl5F
4lxqKmrGasgOSSfgWJp3fgM2ja2GKxIImJ68rWj8Uqx7gvjM2iwXUHK4e0L0j1KZ
3WROjhmJhuy2FySRZQTXc6zCgaWLNohoj7eo0IRhbWWWlK4CeV2H3uRYQdY8rDS6
/PLhyhcP3urwg1y7UPeUGgK/V/4HeMu9DyUv1TjGIPDBbeNbiSEFIP/YnFHfvcLA
06Avz5oATNWKUxaoSpSjOgU+0JQZdoDtjvLN+dPbDg97dl3+hxgUwmumeDdcivJL
1EdVUEzr1wRDyjrwqkA9QWbP5fg7daU=
-----END CERTIFICATE-----
Generated at Fri Aug 11 01:11:55 2023 by rpki-client on console-ams.rpki-client.org