Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CC0C5BE4A6211EF8F079F9C762E951A.roa
File: 7CC0C5BE4A6211EF8F079F9C762E951A.roa (raw, json)
Hash identifier: CICNRDbIAxyy66zq6G41w425znG9RW0VcvMr2PMi+jg=
Subject key identifier: 79:53:47:FC:6A:56:9E:14:27:DF:9B:AE:31:44:B3:70:3D:26:AC:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D6F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CC0C5BE4A6211EF8F079F9C762E951A.roa
Signing time: Thu 25 Jul 2024 08:47:13 +0000
ROA not before: Thu 25 Jul 2024 08:47:10 +0000
ROA not after: Sat 03 Aug 2024 08:47:10 +0000
asID: 22773
IP address blocks: 154.219.6.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55024 (0xd6f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 08:47:10 2024 GMT
Not After : Aug 3 08:47:10 2024 GMT
Subject: CN=66a21111-acee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:0a:f7:19:b5:a7:59:a7:c7:0a:74:95:68:
0d:22:c2:4c:1d:da:9d:f8:79:05:19:61:1e:ca:b5:
b9:58:de:46:d2:08:20:04:b9:a2:9f:ae:2e:40:6e:
4a:f0:e6:71:71:2f:43:79:f0:d4:c8:7b:28:9c:6a:
a9:eb:65:81:9d:fc:cd:c1:20:3a:8c:93:5c:d5:66:
b0:67:96:81:71:99:24:9a:33:38:6a:97:11:85:04:
74:70:dc:33:48:cf:02:b1:27:89:80:15:ff:e9:47:
48:ce:13:ba:1f:05:9b:3b:f7:5e:b2:e9:9c:29:5c:
3a:86:08:9e:c9:71:ad:d7:26:14:2d:39:24:ff:9a:
4c:78:1b:2a:aa:ff:8f:bd:23:2e:e1:00:eb:99:ee:
7f:76:7e:85:d1:1e:a7:a6:78:f3:cb:5f:63:b0:81:
9f:c3:d9:7e:f2:3d:82:d0:74:86:f6:05:fd:83:d5:
0a:f8:c4:c1:01:02:8b:22:62:c9:67:98:9b:a5:7c:
18:a3:5c:d4:db:17:3c:23:7f:10:99:b6:ad:11:24:
1b:15:f7:8e:f0:d4:b5:60:81:37:c3:8e:d1:73:70:
d5:49:c2:c1:53:05:f3:6f:59:10:2e:54:c3:2e:f0:
6f:52:49:99:1d:13:52:d9:e3:13:5c:1e:8c:1b:97:
c9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:53:47:FC:6A:56:9E:14:27:DF:9B:AE:31:44:B3:70:3D:26:AC:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CC0C5BE4A6211EF8F079F9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.6.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:f3:9f:2f:20:a7:2e:6a:fe:09:0d:70:1c:6a:27:ed:db:c3:
a2:bd:b5:c8:0e:a4:38:fd:58:9c:28:3d:fe:16:10:5a:6a:a7:
33:5a:3a:50:f5:65:fe:27:73:6e:ac:b0:d5:29:02:f0:2c:18:
db:53:3e:2b:7e:50:36:03:79:cb:5c:2b:08:1a:57:1c:1a:33:
e4:0d:ea:b9:08:39:e2:4d:b6:a2:c5:ab:8b:43:d0:0e:6b:c9:
58:d6:35:cc:e4:5d:37:d0:8a:ae:65:79:08:98:22:f7:e4:cc:
e8:af:be:aa:dd:6a:55:bd:cb:b2:2e:bb:0d:39:9d:cd:82:52:
9f:0b:06:b9:39:92:c8:63:f9:c2:e2:6b:2e:6e:40:64:90:48:
81:9e:eb:94:7b:61:75:81:9d:6c:0c:23:b7:7d:ab:bc:57:ff:
76:e8:11:a8:4c:cd:df:34:a3:db:9b:94:d8:84:78:de:fa:43:
da:30:6c:6f:d8:17:e6:4b:d1:36:40:29:49:a9:44:b2:d7:41:
0b:83:9f:de:d6:18:cd:fc:0f:d5:42:ec:b8:ae:a0:22:73:80:
52:42:da:6f:a1:1b:ec:2f:47:80:94:46:01:af:b1:18:34:e4:
7a:41:f8:56:9f:6d:04:f0:ba:e6:7f:67:a4:84:97:4e:2e:79:
6c:1f:8d:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDANbwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNzI1MDg0NzEwWhcNMjQwODAzMDg0NzEwWjAYMRYw
FAYDVQQDEw02NmEyMTExMS1hY2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1YsK9xm1p1mnxwp0lWgNIsJMHdqd+HkFGWEeyrW5WN5G0gggBLmin64u
QG5K8OZxcS9DefDUyHsonGqp62WBnfzNwSA6jJNc1WawZ5aBcZkkmjM4apcRhQR0
cNwzSM8CsSeJgBX/6UdIzhO6HwWbO/desumcKVw6hgieyXGt1yYULTkk/5pMeBsq
qv+PvSMu4QDrme5/dn6F0R6npnjzy19jsIGfw9l+8j2C0HSG9gX9g9UK+MTBAQKL
ImLJZ5ibpXwYo1zU2xc8I38QmbatESQbFfeO8NS1YIE3w47Rc3DVScLBUwXzb1kQ
LlTDLvBvUkmZHRNS2eMTXB6MG5fJswIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHlT
R/xqVp4UJ9+brjFEs3A9JqwvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83Q0MwQzVCRTRBNjIxMUVGOEYwNzlGOUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmtsGMA0GCSqGSIb3DQEB
CwUAA4IBAQCL858vIKcuav4JDXAcaift28OivbXIDqQ4/VicKD3+FhBaaqczWjpQ
9WX+J3NurLDVKQLwLBjbUz4rflA2A3nLXCsIGlccGjPkDeq5CDniTbaixauLQ9AO
a8lY1jXM5F030IquZXkImCL35Mzor76q3WpVvcuyLrsNOZ3NglKfCwa5OZLIY/nC
4msubkBkkEiBnuuUe2F1gZ1sDCO3fau8V/926BGoTM3fNKPbm5TYhHje+kPaMGxv
2BfmS9E2QClJqUSy10ELg5/e1hjN/A/VQuy4rqAic4BSQtpvoRvsL0eAlEYBr7EY
NOR6QfhWn20E8Lrmf2ekhJdOLnlsH43q
-----END CERTIFICATE-----
Generated at Sun Aug 4 03:07:51 2024 by rpki-client on console-ams.rpki-client.org