Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60D9EC205BB511EC8C51D5BF5A40D577.roa
File: 60D9EC205BB511EC8C51D5BF5A40D577.roa (raw, json)
Hash identifier: 79/2yym73aNRMs5p+VT1yeHNwzPzr8roe0A2qf3Ubgc=
Subject key identifier: 23:DB:05:18:D7:23:A3:AA:1F:2E:44:4F:D6:AB:21:AF:E8:6E:47:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 139D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60D9EC205BB511EC8C51D5BF5A40D577.roa
Signing time: Mon 13 Dec 2021 01:38:31 +0000
ROA not before: Mon 13 Dec 2021 01:38:28 +0000
ROA not after: Fri 30 Dec 2022 01:38:28 +0000
asID: 135097
IP address blocks: 154.204.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5021 (0x139d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 01:38:28 2021 GMT
Not After : Dec 30 01:38:28 2022 GMT
Subject: CN=61b6a417-c32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:58:04:19:6f:d0:43:68:5a:7c:32:bb:95:
b5:c7:5b:c4:28:6b:ce:0a:c8:99:b5:a9:b4:b9:06:
10:7a:89:64:47:82:a4:29:99:d4:09:0f:e3:cc:c5:
1e:08:63:af:5a:10:06:ac:db:0e:63:08:90:1e:c6:
7d:13:cc:50:8a:84:1c:e7:47:3e:2b:10:c8:79:08:
fa:32:cc:ba:36:f6:30:79:0e:6b:f3:e2:a2:0c:30:
e3:3f:b5:41:5e:f0:be:e1:c6:b1:de:57:b4:60:fa:
af:2f:45:43:c0:f8:e9:6f:ba:c7:ad:fd:d1:4a:d5:
5b:15:f8:d1:57:8d:b4:73:60:67:8f:fe:4b:93:8f:
94:73:89:4b:f9:74:c7:64:cd:6e:0b:17:b6:34:43:
6f:4f:45:9c:e6:6b:20:af:7f:71:1b:7c:60:8c:91:
4e:43:06:a2:cc:90:00:c0:fa:89:3a:35:b9:98:a0:
63:c7:20:dc:6e:14:b6:48:52:a7:ad:18:b4:ab:d5:
bb:2b:1f:bf:bb:97:b6:c0:59:5a:e7:76:23:22:97:
80:1f:f8:07:79:9d:71:bf:ac:12:a1:68:0f:13:9d:
25:11:44:72:c6:80:8f:93:99:f4:05:68:46:c5:30:
e2:1e:14:33:9d:b1:d4:5a:3c:0f:c2:d6:00:f7:85:
63:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DB:05:18:D7:23:A3:AA:1F:2E:44:4F:D6:AB:21:AF:E8:6E:47:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60D9EC205BB511EC8C51D5BF5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.66.0/24
Signature Algorithm: sha256WithRSAEncryption
20:4c:ea:e8:cd:81:f5:8c:14:b0:fa:b3:6f:6d:ab:99:f4:39:
b6:68:ea:c3:ce:99:d9:07:0e:5a:fd:38:91:13:d2:7c:1e:33:
48:50:0c:92:d7:42:5f:36:18:6b:c0:35:c5:ac:a2:4a:c7:1b:
89:c3:b9:95:d8:04:e8:be:8b:97:66:2b:2b:3d:43:bb:ba:36:
a2:a6:5d:d4:4b:72:2b:83:32:13:a7:78:bc:ec:de:61:1f:e8:
5b:26:1a:bc:85:db:d3:36:21:ef:2d:21:4d:eb:19:b8:44:51:
17:c0:6d:29:bf:5d:7e:9a:dc:8e:7d:3a:34:4d:b8:35:ac:5e:
2b:e7:a5:ac:18:79:98:2d:44:13:d5:53:79:75:0e:ed:fa:32:
08:7e:83:07:fa:0d:94:5d:66:c1:d3:26:53:d0:4c:13:6d:eb:
47:33:24:f5:8b:30:e5:2d:54:8d:80:c4:78:6f:6e:7a:5e:5d:
91:67:f0:03:96:ac:99:93:d7:94:61:59:b9:d5:09:a2:83:b1:
68:c9:f2:7a:34:bd:88:55:2b:c5:8f:78:f8:34:21:28:cc:a2:
a4:8e:1d:72:a8:f3:29:33:1e:bd:18:85:4a:ed:4b:d7:4a:9f:
c5:5a:00:ad:df:cf:54:cb:7f:da:ae:99:4f:bf:3e:33:19:e4:
30:e6:e0:11
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICE50wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTEyMTMwMTM4MjhaFw0yMjEyMzAwMTM4MjhaMBgxFjAU
BgNVBAMMDTYxYjZhNDE3LWMzMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyGFgEGW/QQ2hafDK7lbXHW8Qoa84KyJm1qbS5BhB6iWRHgqQpmdQJD+PM
xR4IY69aEAas2w5jCJAexn0TzFCKhBznRz4rEMh5CPoyzLo29jB5Dmvz4qIMMOM/
tUFe8L7hxrHeV7Rg+q8vRUPA+Olvuset/dFK1VsV+NFXjbRzYGeP/kuTj5RziUv5
dMdkzW4LF7Y0Q29PRZzmayCvf3EbfGCMkU5DBqLMkADA+ok6NbmYoGPHINxuFLZI
UqetGLSr1bsrH7+7l7bAWVrndiMil4Af+Ad5nXG/rBKhaA8TnSURRHLGgI+TmfQF
aEbFMOIeFDOdsdRaPA/C1gD3hWNrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUI9sF
GNcjo6ofLkRP1qshr+huR/owHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzYwRDlFQzIwNUJCNTExRUM4QzUxRDVCRjVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazEIwDQYJKoZIhvcNAQEL
BQADggEBACBM6ujNgfWMFLD6s29tq5n0ObZo6sPOmdkHDlr9OJET0nweM0hQDJLX
Ql82GGvANcWsokrHG4nDuZXYBOi+i5dmKys9Q7u6NqKmXdRLciuDMhOneLzs3mEf
6FsmGryF29M2Ie8tIU3rGbhEURfAbSm/XX6a3I59OjRNuDWsXivnpawYeZgtRBPV
U3l1Du36Mgh+gwf6DZRdZsHTJlPQTBNt60czJPWLMOUtVI2AxHhvbnpeXZFn8AOW
rJmT15RhWbnVCaKDsWjJ8no0vYhVK8WPePg0ISjMoqSOHXKo8ykzHr0YhUrtS9dK
n8VaAK3fz1TLf9qumU+/PjMZ5DDm4BE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-ams.rpki-client.org