Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70B94F4CE57B11EB8AB30427F8AEA228.roa
File: 70B94F4CE57B11EB8AB30427F8AEA228.roa (raw, json)
Hash identifier: yxyR5qAFG5n/oIUkOSa64np8E5x8IlkE3CVnMTk06UQ=
Subject key identifier: 09:2E:78:3B:5D:66:9A:1B:66:8A:9B:41:F4:48:94:8C:D7:EA:48:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 079C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70B94F4CE57B11EB8AB30427F8AEA228.roa
Signing time: Thu 15 Jul 2021 14:46:30 +0000
ROA not before: Thu 15 Jul 2021 14:46:26 +0000
ROA not after: Sat 09 Jul 2022 14:46:26 +0000
asID: 397630
IP address blocks: 154.201.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1948 (0x79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 14:46:26 2021 GMT
Not After : Jul 9 14:46:26 2022 GMT
Subject: CN=60f04a46-7036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:92:67:9b:94:39:44:02:4f:74:a0:48:88:00:
97:8f:08:90:47:e6:21:7b:86:f6:8b:65:eb:9b:2a:
60:2d:1c:ee:ad:a7:94:af:7e:53:9b:0c:76:82:64:
fb:98:82:59:8f:74:44:0e:f8:73:cd:d7:06:e5:4a:
37:40:4a:13:70:20:53:c2:36:a5:64:e5:ef:4b:f6:
55:bf:92:61:98:8c:3e:7c:df:46:31:33:cf:81:16:
62:5b:d1:5b:ba:54:8e:28:a0:2a:1f:29:f8:68:b8:
51:e7:28:37:be:34:9c:b6:50:fa:45:70:21:05:d3:
24:8f:08:85:7e:5f:3a:c0:a3:39:3f:98:a6:5e:1c:
62:6f:b8:db:9f:3d:3e:19:68:2e:de:50:4d:2d:2a:
21:8e:32:f4:2a:f9:11:9c:e2:f3:e8:5a:27:5e:8e:
e0:04:92:78:92:88:f3:02:9b:ef:95:ca:fa:85:e9:
ed:ab:38:d1:b8:2c:6a:12:b3:59:85:a1:3b:71:bd:
2d:f8:59:b8:01:26:d7:a9:51:6f:fb:6c:71:99:89:
4e:93:86:4e:d1:a8:7b:e1:fb:cd:81:96:e4:3c:2e:
07:14:d0:6e:c4:eb:0b:71:23:b1:18:84:94:1a:ea:
71:b4:44:22:dc:27:c7:29:db:44:b7:b6:c4:f4:64:
1f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2E:78:3B:5D:66:9A:1B:66:8A:9B:41:F4:48:94:8C:D7:EA:48:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70B94F4CE57B11EB8AB30427F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.35.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:6f:a0:dc:e9:33:71:aa:77:03:40:f6:fd:81:95:8e:e2:fa:
c8:9a:94:f4:7f:60:38:3d:9d:20:bc:11:76:73:b1:7f:12:c7:
ca:9d:b7:9c:c1:2b:25:ad:52:c5:40:91:b3:10:d1:10:60:94:
a0:99:5e:69:3b:71:8a:c2:53:36:cd:be:9c:e8:6c:d2:22:0f:
9d:35:d6:52:fb:83:c5:90:0e:38:07:95:28:82:b3:fd:7e:b7:
a9:f4:ee:58:8b:06:93:a6:dc:72:e4:eb:0a:6c:9a:39:b8:88:
2d:b5:ee:70:95:89:88:c0:81:97:39:0c:9e:6e:b7:fc:4d:56:
68:26:b0:1c:c9:60:f5:9b:41:2a:12:5f:ca:61:21:e7:2f:17:
fc:b1:9e:83:a2:ab:70:f1:4e:58:9d:06:b7:19:c0:ab:07:3d:
cf:4f:23:3b:96:c9:42:ba:74:cf:c2:2f:9a:e7:d9:9b:03:e7:
0e:d1:34:09:bd:5b:ee:b1:ab:be:5c:4d:ab:f1:15:91:1b:50:
1f:a0:25:9e:9f:e5:dd:7d:f0:01:99:81:33:78:25:10:20:2b:
de:eb:59:cc:85:57:a7:f4:b8:e7:f2:8b:00:24:0d:5f:38:7b:
fe:2c:aa:9a:e7:d5:9d:2b:f9:ca:9b:c4:ae:c2:28:b0:7a:53:
65:09:8a:c1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB5wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTA3MTUxNDQ2MjZaFw0yMjA3MDkxNDQ2MjZaMBgxFjAU
BgNVBAMTDTYwZjA0YTQ2LTcwMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCukmeblDlEAk90oEiIAJePCJBH5iF7hvaLZeubKmAtHO6tp5SvflObDHaC
ZPuYglmPdEQO+HPN1wblSjdAShNwIFPCNqVk5e9L9lW/kmGYjD5830YxM8+BFmJb
0Vu6VI4ooCofKfhouFHnKDe+NJy2UPpFcCEF0ySPCIV+XzrAozk/mKZeHGJvuNuf
PT4ZaC7eUE0tKiGOMvQq+RGc4vPoWidejuAEkniSiPMCm++VyvqF6e2rONG4LGoS
s1mFoTtxvS34WbgBJtepUW/7bHGZiU6Thk7RqHvh+82BluQ8LgcU0G7E6wtxI7EY
hJQa6nG0RCLcJ8cp20S3tsT0ZB/PAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUCS54
O11mmhtmiptB9EiUjNfqSFIwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzcwQjk0RjRDRTU3QjExRUI4QUIzMDQyN0Y4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaySMwDQYJKoZIhvcNAQEL
BQADggEBAC5voNzpM3GqdwNA9v2BlY7i+sialPR/YDg9nSC8EXZzsX8Sx8qdt5zB
KyWtUsVAkbMQ0RBglKCZXmk7cYrCUzbNvpzobNIiD5011lL7g8WQDjgHlSiCs/1+
t6n07liLBpOm3HLk6wpsmjm4iC217nCViYjAgZc5DJ5ut/xNVmgmsBzJYPWbQSoS
X8phIecvF/yxnoOiq3DxTlidBrcZwKsHPc9PIzuWyUK6dM/CL5rn2ZsD5w7RNAm9
W+6xq75cTavxFZEbUB+gJZ6f5d198AGZgTN4JRAgK97rWcyFV6f0uOfyiwAkDV84
e/4sqprn1Z0r+cqbxK7CKLB6U2UJisE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:08 2023 by rpki-client on console-ams.rpki-client.org