Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/665F1C5658D111ECB5082DAF5A40D577.roa
File: 665F1C5658D111ECB5082DAF5A40D577.roa (raw, json)
Hash identifier: 2IIdxdExSm1Iy6uGD4xXBjrDLKjyGK0pPouMQVaXGCQ=
Subject key identifier: 7F:E7:DD:D3:32:0C:31:85:4A:6F:DD:FB:2C:64:FB:38:21:85:77:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1373
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/665F1C5658D111ECB5082DAF5A40D577.roa
Signing time: Thu 09 Dec 2021 09:21:33 +0000
ROA not before: Thu 09 Dec 2021 09:21:28 +0000
ROA not after: Fri 30 Dec 2022 09:21:28 +0000
asID: 328608
IP address blocks: 154.222.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4979 (0x1373)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 9 09:21:28 2021 GMT
Not After : Dec 30 09:21:28 2022 GMT
Subject: CN=61b1ca9d-de49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:87:e2:79:01:f2:c1:29:23:4b:0d:d4:d6:
8f:78:95:01:f3:14:15:c6:0e:f7:b5:b8:9c:5b:f0:
1f:ff:88:c3:f2:57:02:fb:52:08:c0:79:20:5c:e7:
21:ef:12:bc:73:52:26:ca:31:f9:4d:1d:fd:22:07:
dd:1d:db:23:4f:45:2b:28:e4:d2:15:ca:66:60:ff:
e9:25:d5:7c:21:3d:0b:e5:d0:88:cf:51:56:df:38:
a8:cf:60:90:fa:6f:85:28:ef:59:e1:f0:c4:13:f5:
c2:0c:fc:db:a9:27:17:ff:30:72:3b:29:55:b8:da:
92:c3:e7:82:43:0c:73:d4:37:60:12:c9:fd:ac:47:
13:13:ae:52:4a:04:e3:93:ae:93:d2:9e:14:1a:41:
38:4b:22:26:00:44:05:b0:71:fa:fd:cf:56:bb:c8:
26:6d:2b:18:88:f1:f9:0f:67:7d:c6:f0:06:83:1c:
d3:16:26:0c:bd:a2:ea:75:8f:ae:9d:e6:67:8c:83:
50:00:be:04:cc:8d:88:26:60:ed:af:3d:49:92:98:
e5:16:49:3b:03:c8:39:d7:d4:6d:97:27:bf:f4:12:
17:0e:da:0f:fa:26:2c:be:51:61:3b:c1:22:f2:4a:
cb:f7:dd:c7:90:43:da:a5:0a:f9:b8:3b:a2:48:16:
0f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E7:DD:D3:32:0C:31:85:4A:6F:DD:FB:2C:64:FB:38:21:85:77:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/665F1C5658D111ECB5082DAF5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.32.0/22
Signature Algorithm: sha256WithRSAEncryption
34:80:04:31:ad:ed:b4:b4:f2:22:bc:5e:36:47:8f:2e:01:e1:
50:51:78:af:fa:83:71:d5:0b:b3:e3:71:a3:32:71:bc:c8:61:
d4:5c:6e:99:11:34:9d:5f:45:8d:14:17:02:71:9b:76:74:2d:
76:34:b2:f9:0d:cb:2d:63:b1:d6:47:76:8a:f1:d3:65:1a:14:
2c:16:8c:12:b8:7d:3d:4d:a3:85:ae:5f:13:ee:88:2c:94:c5:
9f:31:6f:42:41:41:ab:6e:3a:cd:41:01:e7:c4:44:51:65:d4:
a6:d3:7d:e5:1e:00:e8:f0:e8:c9:b2:ad:3b:b0:f0:75:55:87:
f0:9c:22:d8:91:50:29:f9:f8:d8:0a:4a:0b:14:80:46:60:7e:
ef:ad:06:2e:3e:bb:46:fd:98:1c:76:8d:53:38:74:a9:45:59:
6e:98:19:3b:04:ee:b5:ff:0a:42:73:fc:9d:51:3a:42:c2:f2:
c1:21:28:1b:02:ae:2e:c3:ae:ec:1e:2e:ce:d7:d5:7c:25:92:
b5:fd:d3:18:2e:2a:de:af:ba:88:84:ff:dd:da:78:a0:84:81:
17:a8:60:c8:29:96:81:8d:c1:96:e0:b7:21:ea:56:18:6e:df:
7a:47:3d:6a:61:1e:22:31:e1:b6:12:89:88:a4:ff:90:59:45:
3f:80:d0:b1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICE3MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTEyMDkwOTIxMjhaFw0yMjEyMzAwOTIxMjhaMBgxFjAU
BgNVBAMMDTYxYjFjYTlkLWRlNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8bIfieQHywSkjSw3U1o94lQHzFBXGDve1uJxb8B//iMPyVwL7UgjAeSBc
5yHvErxzUibKMflNHf0iB90d2yNPRSso5NIVymZg/+kl1XwhPQvl0IjPUVbfOKjP
YJD6b4Uo71nh8MQT9cIM/NupJxf/MHI7KVW42pLD54JDDHPUN2ASyf2sRxMTrlJK
BOOTrpPSnhQaQThLIiYARAWwcfr9z1a7yCZtKxiI8fkPZ33G8AaDHNMWJgy9oup1
j66d5meMg1AAvgTMjYgmYO2vPUmSmOUWSTsDyDnX1G2XJ7/0EhcO2g/6Jiy+UWE7
wSLySsv33ceQQ9qlCvm4O6JIFg9LAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUf+fd
0zIMMYVKb937LGT7OCGFd0AwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzY2NUYxQzU2NThEMTExRUNCNTA4MkRBRjVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKa3iAwDQYJKoZIhvcNAQEL
BQADggEBADSABDGt7bS08iK8XjZHjy4B4VBReK/6g3HVC7PjcaMycbzIYdRcbpkR
NJ1fRY0UFwJxm3Z0LXY0svkNyy1jsdZHdorx02UaFCwWjBK4fT1No4WuXxPuiCyU
xZ8xb0JBQatuOs1BAefERFFl1KbTfeUeAOjw6MmyrTuw8HVVh/CcItiRUCn5+NgK
SgsUgEZgfu+tBi4+u0b9mBx2jVM4dKlFWW6YGTsE7rX/CkJz/J1ROkLC8sEhKBsC
ri7DruweLs7X1XwlkrX90xguKt6vuoiE/93aeKCEgReoYMgploGNwZbgtyHqVhhu
33pHPWphHiIx4bYSiYik/5BZRT+A0LE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:07 2023 by rpki-client on console-ams.rpki-client.org