Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7322713CFE2311EE8B982B38017001B1.roa
File: 7322713CFE2311EE8B982B38017001B1.roa (raw, json)
Hash identifier: M3OJvliH8dYHwP7udFLcc6Y8BoaaK1kS/1ttdmlbDSQ=
Subject key identifier: 2F:4C:37:81:08:F3:80:5A:04:83:22:4C:B2:79:28:BE:DD:10:97:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE62
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7322713CFE2311EE8B982B38017001B1.roa
Signing time: Fri 19 Apr 2024 08:04:30 +0000
ROA not before: Fri 19 Apr 2024 08:04:27 +0000
ROA not after: Mon 29 Apr 2024 08:04:27 +0000
asID: 5065
IP address blocks: 154.95.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44642 (0xae62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 19 08:04:27 2024 GMT
Not After : Apr 29 08:04:27 2024 GMT
Subject: CN=6622258e-6a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1f:d8:b0:e3:a7:e9:37:50:7d:f1:fc:ab:60:
10:72:b6:84:db:ed:e6:2c:c6:80:b5:49:92:2d:d4:
47:41:e8:60:37:3f:d5:45:db:4e:e6:e2:a6:8a:97:
da:35:6c:02:58:90:12:67:10:d8:d9:14:65:04:2b:
d8:b1:f5:4f:8c:aa:b2:67:91:d0:9c:9c:cb:a4:cb:
a1:d7:70:e2:4e:ce:0c:67:59:83:70:7c:64:5e:db:
13:04:71:56:12:f2:be:79:41:c9:6a:f3:76:70:a3:
85:d8:bb:d0:3e:c0:23:47:02:69:22:57:05:8b:ad:
24:72:26:21:ae:ec:51:f2:1e:72:3d:8a:fb:ac:39:
56:0d:ff:c6:10:62:6c:fa:5f:ac:54:98:e7:ae:f7:
ca:af:0b:79:ff:f5:80:69:b5:92:00:fe:98:c2:68:
7b:5f:b3:84:24:91:6a:14:74:7a:77:55:03:e8:44:
91:de:54:8e:eb:d8:a6:b6:d4:bb:06:21:54:80:23:
13:1b:2b:b1:36:67:55:f7:f3:54:4b:71:eb:23:f1:
c2:55:d1:a9:53:39:1c:91:0a:3c:68:87:db:7b:1f:
46:f7:55:6c:fb:aa:55:46:0b:01:c7:a3:14:6b:03:
ee:03:93:65:a7:ff:3a:71:13:04:2e:3a:89:60:b7:
bd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4C:37:81:08:F3:80:5A:04:83:22:4C:B2:79:28:BE:DD:10:97:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7322713CFE2311EE8B982B38017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.20.0/22
Signature Algorithm: sha256WithRSAEncryption
18:27:cb:b3:7c:5f:b5:db:1b:d5:9c:7d:c0:65:fc:42:f3:42:
af:7a:fc:0b:c6:66:cf:e8:87:bb:09:53:d7:81:f8:2b:8a:b4:
25:7d:af:c1:5f:07:f9:91:2d:90:c5:45:e7:af:e3:46:2b:1e:
64:3f:8b:a2:4e:db:64:5b:a0:f3:fd:77:dd:82:0e:6d:26:0f:
47:3d:8d:f2:92:1a:7a:93:8a:e8:7b:43:c7:46:32:25:96:ef:
58:6e:41:e7:bb:6e:66:84:6f:df:39:70:35:c2:6d:f8:fd:05:
03:bc:8e:37:85:00:5f:89:83:cb:a8:65:8d:28:20:b3:af:b0:
69:b5:a6:95:6b:d7:83:b0:70:46:eb:3c:59:ab:48:da:70:32:
0f:fa:41:ad:e1:11:de:4e:52:84:8b:ef:7b:6f:2e:06:5b:6d:
42:01:8f:57:fb:eb:1d:02:d0:a0:9b:65:65:e4:ed:c8:ea:25:
e6:d5:29:78:ce:bd:9b:c4:4c:7f:ad:aa:7f:7f:0a:6c:3b:76:
03:ba:c9:fc:13:ba:3b:6c:f4:44:e0:fb:c0:a5:d5:a3:86:a3:
7a:c4:49:1d:00:15:88:12:82:b1:74:ca:f9:80:a0:90:86:ee:
b6:0d:72:f6:69:88:d2:ea:4d:1d:de:69:36:a8:ee:0a:c4:e7:
22:1e:8f:45
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK5iMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE5MDgwNDI3WhcNMjQwNDI5MDgwNDI3WjAYMRYw
FAYDVQQDEw02NjIyMjU4ZS02YTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqB/YsOOn6TdQffH8q2AQcraE2+3mLMaAtUmSLdRHQehgNz/VRdtO5uKm
ipfaNWwCWJASZxDY2RRlBCvYsfVPjKqyZ5HQnJzLpMuh13DiTs4MZ1mDcHxkXtsT
BHFWEvK+eUHJavN2cKOF2LvQPsAjRwJpIlcFi60kciYhruxR8h5yPYr7rDlWDf/G
EGJs+l+sVJjnrvfKrwt5//WAabWSAP6Ywmh7X7OEJJFqFHR6d1UD6ESR3lSO69im
ttS7BiFUgCMTGyuxNmdV9/NUS3HrI/HCVdGpUzkckQo8aIfbex9G91Vs+6pVRgsB
x6MUawPuA5Nlp/86cRMELjqJYLe9QwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFC9M
N4EI84BaBIMiTLJ5KL7dEJeIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MzIyNzEzQ0ZFMjMxMUVFOEI5ODJCMzgwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCml8UMA0GCSqGSIb3DQEB
CwUAA4IBAQAYJ8uzfF+12xvVnH3AZfxC80KvevwLxmbP6Ie7CVPXgfgrirQlfa/B
Xwf5kS2QxUXnr+NGKx5kP4uiTttkW6Dz/Xfdgg5tJg9HPY3ykhp6k4roe0PHRjIl
lu9YbkHnu25mhG/fOXA1wm34/QUDvI43hQBfiYPLqGWNKCCzr7BptaaVa9eDsHBG
6zxZq0jacDIP+kGt4RHeTlKEi+97by4GW21CAY9X++sdAtCgm2Vl5O3I6iXm1Sl4
zr2bxEx/rap/fwpsO3YDusn8E7o7bPRE4PvApdWjhqN6xEkdABWIEoKxdMr5gKCQ
hu62DXL2aYjS6k0d3mk2qO4KxOciHo9F
-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:24 2024 by rpki-client on console-fra.rpki-client.org