Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/746A8690488811ECB8DB533BD8A014CE.roa
File: 746A8690488811ECB8DB533BD8A014CE.roa (raw, json)
Hash identifier: 8PU6+xdWjIRCCWux0Mb6U8jM/cSbNsp6W6KaZCIP6YQ=
Subject key identifier: 90:FB:A9:69:4F:AD:6E:4A:57:90:14:6F:39:9C:0E:40:7A:68:C0:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0D74
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/746A8690488811ECB8DB533BD8A014CE.roa
Signing time: Thu 18 Nov 2021 15:59:05 +0000
ROA not before: Fri 19 Nov 2021 15:59:02 +0000
ROA not after: Sat 19 Nov 2022 15:59:02 +0000
asID: 139879
IP address blocks: 154.80.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3444 (0xd74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 15:59:02 2021 GMT
Not After : Nov 19 15:59:02 2022 GMT
Subject: CN=61967849-4b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0d:fb:6f:8c:d3:7e:60:c5:93:7a:27:97:48:
17:12:7a:d8:45:ac:9f:3f:53:e2:25:45:2f:75:2e:
bb:bf:29:0f:62:ba:4e:a4:4c:65:91:f4:8a:f7:45:
18:85:bf:10:11:b1:4c:22:f7:8b:f0:c6:47:dc:a2:
29:8e:f2:25:d1:83:83:c0:6c:99:e7:68:16:f0:80:
ba:93:21:a9:06:ef:96:56:88:df:e1:de:ee:8a:30:
ec:1e:a4:b6:fb:c8:79:86:4e:64:d9:05:eb:c2:48:
e8:68:5d:84:4a:69:77:8a:7d:31:dc:cf:df:d7:2d:
cd:63:1f:69:d5:59:6b:49:d6:1f:1b:be:81:a0:03:
65:e1:bd:36:51:75:04:66:69:88:1d:9d:f1:46:33:
01:37:46:aa:d7:b2:76:32:7f:76:da:0b:f2:03:69:
aa:df:64:ec:ba:97:6d:23:c8:1b:08:44:3a:cc:28:
a6:4c:a8:04:bc:96:20:03:0f:f5:ac:32:b5:a6:9a:
cf:4f:ab:4d:b7:b1:a7:18:5c:3e:72:95:e6:45:ef:
3b:bf:3a:19:2d:be:54:17:24:9a:7d:88:ac:53:4a:
22:87:12:a2:2c:14:f8:bb:19:87:c1:b4:d2:75:46:
1f:0c:34:62:cf:ff:dd:19:cc:34:3d:d1:76:df:76:
fe:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FB:A9:69:4F:AD:6E:4A:57:90:14:6F:39:9C:0E:40:7A:68:C0:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/746A8690488811ECB8DB533BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.52.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:c8:1e:b8:e1:bc:2e:03:97:ad:a3:e1:ef:1a:c8:0e:a0:46:
f2:02:7c:07:c1:05:dd:41:da:16:2a:d6:cd:fb:7e:3a:43:41:
fb:28:23:54:e3:b4:de:48:3c:4c:5c:fe:8f:28:16:12:34:97:
88:07:85:c5:e4:50:48:75:2d:9d:04:f6:5a:c7:51:5c:0b:e5:
8c:3e:06:b6:ed:2a:52:4d:d5:e2:ab:54:7b:0d:b7:9a:3b:2e:
f7:ab:fa:9a:99:00:bc:51:36:73:04:56:df:0b:a7:27:69:59:
e7:1d:e0:b5:e4:48:98:47:6b:96:8f:ef:25:a7:8e:e7:f9:d3:
80:65:40:4b:fa:20:bb:7c:ff:74:d3:a8:b3:db:d8:d4:e0:73:
58:2f:ab:3c:17:90:25:cd:e6:fc:4a:2c:66:10:c3:7a:7c:d9:
b8:c3:69:b5:de:0c:9b:d4:ee:d6:98:d5:6d:ea:40:30:d8:be:
e5:23:aa:06:6c:c6:dd:60:fe:b8:e7:e6:d4:1b:3c:d7:ee:e5:
77:1f:d1:d8:dd:94:3b:03:f4:61:50:3f:57:f4:89:50:87:42:
b4:a9:39:5d:9e:25:13:c6:ba:1d:cc:5a:27:e8:fa:54:29:25:
b0:a3:db:89:7e:d2:44:f8:e2:fb:1a:07:22:e4:67:21:22:95:
d0:07:fd:75
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDXQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTExMTkxNTU5MDJaFw0yMjExMTkxNTU5MDJaMBgxFjAU
BgNVBAMMDTYxOTY3ODQ5LTRiM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVDftvjNN+YMWTeieXSBcSethFrJ8/U+IlRS91Lru/KQ9iuk6kTGWR9Ir3
RRiFvxARsUwi94vwxkfcoimO8iXRg4PAbJnnaBbwgLqTIakG75ZWiN/h3u6KMOwe
pLb7yHmGTmTZBevCSOhoXYRKaXeKfTHcz9/XLc1jH2nVWWtJ1h8bvoGgA2XhvTZR
dQRmaYgdnfFGMwE3RqrXsnYyf3baC/IDaarfZOy6l20jyBsIRDrMKKZMqAS8liAD
D/WsMrWmms9Pq023sacYXD5yleZF7zu/OhktvlQXJJp9iKxTSiKHEqIsFPi7GYfB
tNJ1Rh8MNGLP/90ZzDQ90Xbfdv5xAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUkPup
aU+tbkpXkBRvOZwOQHpowM8wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4Lzc0NkE4NjkwNDg4ODExRUNCOERCNTMzQkQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaUDQwDQYJKoZIhvcNAQEL
BQADggEBAA3IHrjhvC4Dl62j4e8ayA6gRvICfAfBBd1B2hYq1s37fjpDQfsoI1Tj
tN5IPExc/o8oFhI0l4gHhcXkUEh1LZ0E9lrHUVwL5Yw+BrbtKlJN1eKrVHsNt5o7
Lver+pqZALxRNnMEVt8LpydpWecd4LXkSJhHa5aP7yWnjuf504BlQEv6ILt8/3TT
qLPb2NTgc1gvqzwXkCXN5vxKLGYQw3p82bjDabXeDJvU7taY1W3qQDDYvuUjqgZs
xt1g/rjn5tQbPNfu5Xcf0djdlDsD9GFQP1f0iVCHQrSpOV2eJRPGuh3MWifo+lQp
JbCj24l+0kT44vsaByLkZyEildAH/XU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-fra.rpki-client.org