Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57C3CBF6F20011ECBA934CADF1222468.roa
File: 57C3CBF6F20011ECBA934CADF1222468.roa (raw, json)
Hash identifier: gcPFteVPrKxWFuqCAAH7oJDvlUC3yeqaFoUg88ntXis=
Subject key identifier: 40:CD:6B:F4:0B:0F:1D:E0:83:26:DF:90:1B:E9:B4:F5:A5:D6:88:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 16F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57C3CBF6F20011ECBA934CADF1222468.roa
Signing time: Wed 22 Jun 2022 07:53:03 +0000
ROA not before: Wed 22 Jun 2022 07:52:59 +0000
ROA not after: Sat 03 Jun 2023 07:52:59 +0000
asID: 137901
IP address blocks: 154.201.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5872 (0x16f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 07:52:59 2022 GMT
Not After : Jun 3 07:52:59 2023 GMT
Subject: CN=62b2ca5f-2d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:7e:27:c4:e8:0b:5d:8e:0f:9f:d8:70:10:
43:e9:c3:fd:42:d9:96:5b:74:f6:eb:1e:a6:70:82:
6b:3a:c2:00:54:87:49:b3:2b:75:b2:d7:b3:41:1f:
8a:c0:f8:8f:72:ec:c5:f3:bb:0e:2c:f1:ea:b3:a6:
f0:21:29:47:06:9a:ed:a0:46:ab:d8:48:5a:6f:74:
05:25:86:d1:2d:eb:4e:d7:41:57:92:05:1e:d0:87:
08:7f:9f:52:93:f0:be:4e:67:19:9a:96:7f:1c:e0:
f8:21:1a:a6:7b:40:98:4b:a9:cb:a2:b1:07:0d:58:
73:83:16:5e:a0:16:8c:2a:99:d5:91:1d:4e:61:e6:
1a:6e:1e:ff:56:ea:31:57:47:91:65:99:38:2e:b0:
20:f6:54:6d:51:3f:e2:60:8e:2a:bd:9c:15:b8:0a:
9c:2a:e6:aa:d4:e2:81:4d:6f:e2:a2:c5:85:6c:b7:
3c:3f:b0:cf:e7:5c:6b:18:29:e3:25:8a:0f:ec:30:
9c:f7:75:b7:a6:86:ab:25:8f:9b:72:a2:0b:bb:7b:
d9:57:f5:2a:c4:b4:3d:d3:92:fa:f1:7f:58:09:3b:
9a:bf:24:0e:c6:d0:84:ea:4b:08:71:a9:84:f4:5b:
c2:9b:05:44:30:3a:6d:76:87:f0:ae:12:8e:cc:96:
7f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CD:6B:F4:0B:0F:1D:E0:83:26:DF:90:1B:E9:B4:F5:A5:D6:88:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57C3CBF6F20011ECBA934CADF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.6.0/24
Signature Algorithm: sha256WithRSAEncryption
04:7a:73:ba:e3:a7:f8:8f:eb:86:7f:18:53:ce:a8:02:c5:cc:
77:49:5f:98:c8:bc:48:cc:2b:3f:92:e6:82:4b:2b:28:72:5d:
5b:57:bc:99:e3:c6:22:58:ab:2d:26:d8:69:8e:85:da:da:80:
1b:67:15:63:9a:38:95:1a:8b:de:9d:52:a2:18:15:4a:9e:e2:
cb:1d:32:ce:06:db:68:19:88:da:e4:69:c2:ab:3f:34:00:0a:
22:c4:0c:8b:c9:5e:2a:74:c8:78:84:f6:b8:8f:21:33:69:06:
50:c0:22:4c:11:07:38:cb:ce:61:81:9b:e8:81:95:5f:50:3c:
81:2f:27:7b:aa:ac:19:a0:ad:42:b5:84:e7:2b:a7:6f:eb:ae:
91:b2:95:da:d8:b9:2d:11:12:ce:74:7f:15:e9:a1:f7:48:b1:
f6:91:7d:95:b6:0a:78:f2:60:b1:4e:c4:76:06:96:1f:cb:b5:
b7:97:c5:b3:89:40:ac:24:52:4d:d7:eb:bd:ee:02:f9:40:e7:
ed:10:0a:e4:95:11:fd:68:3d:d9:77:66:1e:4d:09:3c:c8:7b:
e8:27:c2:e9:16:1a:5b:8c:24:a7:c0:a5:2a:13:05:2f:45:24:
ca:0e:3d:e0:e9:2f:bf:bb:a0:83:43:b3:3d:6b:bf:b2:6a:77:
1e:33:8c:7c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFvAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA2MjIwNzUyNTlaFw0yMzA2MDMwNzUyNTlaMBgxFjAU
BgNVBAMMDTYyYjJjYTVmLTJkNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9+34nxOgLXY4Pn9hwEEPpw/1C2ZZbdPbrHqZwgms6wgBUh0mzK3Wy17NB
H4rA+I9y7MXzuw4s8eqzpvAhKUcGmu2gRqvYSFpvdAUlhtEt607XQVeSBR7Qhwh/
n1KT8L5OZxmaln8c4PghGqZ7QJhLqcuisQcNWHODFl6gFowqmdWRHU5h5hpuHv9W
6jFXR5FlmTgusCD2VG1RP+Jgjiq9nBW4Cpwq5qrU4oFNb+KixYVstzw/sM/nXGsY
KeMlig/sMJz3dbemhqslj5tyogu7e9lX9SrEtD3Tkvrxf1gJO5q/JA7G0ITqSwhx
qYT0W8KbBUQwOm12h/CuEo7Mln/1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUQM1r
9AsPHeCDJt+QG+m09aXWiPowHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzU3QzNDQkY2RjIwMDExRUNCQTkzNENBREYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACayQYwDQYJKoZIhvcNAQEL
BQADggEBAAR6c7rjp/iP64Z/GFPOqALFzHdJX5jIvEjMKz+S5oJLKyhyXVtXvJnj
xiJYqy0m2GmOhdragBtnFWOaOJUai96dUqIYFUqe4ssdMs4G22gZiNrkacKrPzQA
CiLEDIvJXip0yHiE9riPITNpBlDAIkwRBzjLzmGBm+iBlV9QPIEvJ3uqrBmgrUK1
hOcrp2/rrpGyldrYuS0REs50fxXpofdIsfaRfZW2CnjyYLFOxHYGlh/LtbeXxbOJ
QKwkUk3X673uAvlA5+0QCuSVEf1oPdl3Zh5NCTzIe+gnwukWGluMJKfApSoTBS9F
JMoOPeDpL7+7oINDsz1rv7Jqdx4zjHw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-ams.rpki-client.org