Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7310EEAC5BB511EC8FAC01C05A40D577.roa
File: 7310EEAC5BB511EC8FAC01C05A40D577.roa (raw, json)
Hash identifier: gZgEj0TUKU2m4ESUw4PflA/bUDWuZYeR5kV6e/+MU+Y=
Subject key identifier: 24:47:44:96:E2:18:2C:67:2C:D7:23:29:6C:97:AB:5A:A6:1B:5C:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 139F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7310EEAC5BB511EC8FAC01C05A40D577.roa
Signing time: Mon 13 Dec 2021 01:39:02 +0000
ROA not before: Mon 13 Dec 2021 01:38:59 +0000
ROA not after: Fri 30 Dec 2022 01:38:59 +0000
asID: 133201
IP address blocks: 154.204.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5023 (0x139f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 01:38:59 2021 GMT
Not After : Dec 30 01:38:59 2022 GMT
Subject: CN=61b6a436-a9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a3:9a:67:02:11:0f:f3:0c:96:ed:22:8c:1f:
47:59:c5:7c:c5:0c:c2:67:5d:cf:3f:36:26:58:b7:
84:d4:e7:22:d6:94:59:05:25:b2:4c:e8:f2:45:00:
92:4b:7e:7d:3f:b8:8f:45:8b:77:1a:4e:81:ef:91:
3a:17:df:da:3f:dd:7c:02:61:8e:54:20:d4:31:bc:
3b:4b:ec:32:2a:f2:c5:41:80:d3:ed:7a:c3:3e:d6:
16:52:63:db:ec:b5:f5:2e:7c:25:cb:91:c3:e7:27:
99:55:03:37:f4:e1:0f:3b:90:4d:77:e0:2c:ea:af:
60:16:f0:d6:c6:ea:8b:1f:53:68:48:e0:93:58:19:
df:88:3f:f7:37:7d:57:2d:38:81:5e:83:7d:18:e9:
42:2a:a3:98:3b:b3:50:95:26:3d:4e:2d:b2:74:2e:
49:e7:39:6f:f5:90:85:b0:66:7b:df:58:8a:94:c2:
18:25:49:1b:46:0a:d0:35:0b:38:d2:9b:6a:b9:a2:
24:8a:ca:84:e6:2b:c3:9a:36:f8:a0:64:6b:56:09:
4c:a2:84:35:41:93:44:d0:68:87:56:07:f4:0e:d8:
64:ed:cf:6f:ad:85:1c:bd:6f:b0:66:94:27:b9:56:
6a:75:6d:c2:b4:cd:22:8b:f7:63:5c:33:27:35:85:
6b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:47:44:96:E2:18:2C:67:2C:D7:23:29:6C:97:AB:5A:A6:1B:5C:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7310EEAC5BB511EC8FAC01C05A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.67.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:c9:78:6d:71:1c:db:28:69:c0:b2:25:62:67:d4:67:1f:d9:
70:2c:8b:5f:0a:5d:47:9c:5c:22:62:5b:99:3b:b7:63:81:31:
77:6f:b8:2d:27:ca:2a:bb:2b:e6:ed:96:24:30:01:9a:15:4d:
b3:eb:05:e3:d8:ba:f1:83:59:a7:c4:19:78:58:b6:10:26:ef:
72:40:2d:70:8d:6d:fe:af:76:cc:f9:9a:e1:70:6f:f9:41:b2:
ff:15:6a:10:f6:95:23:e0:d0:b8:1c:c9:97:f0:63:ef:14:7a:
8f:df:89:7b:99:eb:64:50:62:99:be:83:9b:0e:14:a5:e7:7c:
89:44:43:67:3a:ae:d0:5f:ab:c1:09:19:ec:63:5f:4c:c1:d4:
84:5d:e4:cd:10:85:f8:eb:1b:2c:b1:24:e7:7c:47:cc:4f:73:
f8:d7:62:4a:2e:16:e9:67:20:2a:24:25:d7:fc:38:9f:ab:8a:
78:38:d2:80:59:74:35:58:74:a5:d2:e5:28:ec:60:02:55:57:
6a:0e:91:c0:98:c9:cc:97:f5:3e:d5:50:8d:46:7c:e4:cb:98:
82:1a:9f:18:ac:eb:b6:8f:49:26:c0:4f:43:47:d8:9e:34:f2:
9c:2f:c6:a7:99:72:ce:a4:f7:3c:f6:db:6b:09:d6:5e:34:42:
6d:2a:bb:83
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICE58wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTEyMTMwMTM4NTlaFw0yMjEyMzAwMTM4NTlaMBgxFjAU
BgNVBAMMDTYxYjZhNDM2LWE5ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDio5pnAhEP8wyW7SKMH0dZxXzFDMJnXc8/NiZYt4TU5yLWlFkFJbJM6PJF
AJJLfn0/uI9Fi3caToHvkToX39o/3XwCYY5UINQxvDtL7DIq8sVBgNPtesM+1hZS
Y9vstfUufCXLkcPnJ5lVAzf04Q87kE134Czqr2AW8NbG6osfU2hI4JNYGd+IP/c3
fVctOIFeg30Y6UIqo5g7s1CVJj1OLbJ0LknnOW/1kIWwZnvfWIqUwhglSRtGCtA1
CzjSm2q5oiSKyoTmK8OaNvigZGtWCUyihDVBk0TQaIdWB/QO2GTtz2+thRy9b7Bm
lCe5Vmp1bcK0zSKL92NcMyc1hWvxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUJEdE
luIYLGcs1yMpbJerWqYbXLgwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzczMTBFRUFDNUJCNTExRUM4RkFDMDFDMDVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazEMwDQYJKoZIhvcNAQEL
BQADggEBAKTJeG1xHNsoacCyJWJn1Gcf2XAsi18KXUecXCJiW5k7t2OBMXdvuC0n
yiq7K+btliQwAZoVTbPrBePYuvGDWafEGXhYthAm73JALXCNbf6vdsz5muFwb/lB
sv8VahD2lSPg0LgcyZfwY+8Ueo/fiXuZ62RQYpm+g5sOFKXnfIlEQ2c6rtBfq8EJ
GexjX0zB1IRd5M0QhfjrGyyxJOd8R8xPc/jXYkouFulnICokJdf8OJ+ring40oBZ
dDVYdKXS5SjsYAJVV2oOkcCYycyX9T7VUI1GfOTLmIIanxis67aPSSbAT0NH2J40
8pwvxqeZcs6k9zz222sJ1l40Qm0qu4M=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-fra.rpki-client.org