Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/804C48765BB711ECACEE4CC65A40D577.roa
File: 804C48765BB711ECACEE4CC65A40D577.roa (raw, json)
Hash identifier: mzgLhhokOXV9pfJa6/XEtkrWKH6Uce6pqg2Fw5qEE6Y=
Subject key identifier: 47:F7:1D:39:28:ED:78:C8:66:51:3C:18:AB:1B:E7:72:4E:07:C4:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 13CB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/804C48765BB711ECACEE4CC65A40D577.roa
Signing time: Mon 13 Dec 2021 01:53:43 +0000
ROA not before: Mon 13 Dec 2021 01:53:40 +0000
ROA not after: Fri 30 Dec 2022 01:53:40 +0000
asID: 133201
IP address blocks: 154.204.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5067 (0x13cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 01:53:40 2021 GMT
Not After : Dec 30 01:53:40 2022 GMT
Subject: CN=61b6a7a7-5c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:af:5d:fd:be:c3:e7:11:65:a7:b1:f6:0b:d3:
ca:67:d2:b1:c8:e3:43:e0:77:c4:0c:cd:29:bd:56:
79:de:8d:4e:bf:82:9c:b6:34:bd:b0:9e:5a:d6:fd:
a9:07:32:44:e7:14:1d:45:75:5f:c4:a9:4e:e6:1a:
92:fa:92:a9:45:33:eb:57:e5:65:a7:66:40:69:bb:
20:fc:08:75:30:1b:eb:40:9b:e7:c9:10:65:bf:4e:
fc:68:ef:82:2d:06:f6:1b:0a:1f:64:48:eb:09:28:
3f:3b:69:ac:af:d7:36:a4:1a:d1:74:41:c2:d0:30:
50:1e:78:79:b5:2d:8f:dc:e9:82:51:05:b2:db:00:
ae:a6:8d:ab:e1:e7:6d:f3:ed:1c:27:83:a6:5a:b4:
8b:4d:c9:2a:b3:c1:d5:2c:c8:e3:56:12:12:51:34:
2e:23:da:80:a8:56:4d:4d:d1:3b:83:36:83:d7:9b:
d3:09:1f:7a:c2:6f:86:51:f4:8d:6d:aa:b9:a9:d4:
2d:e5:d3:76:4a:3a:54:0f:01:c2:60:18:ec:78:2b:
6a:f9:52:ad:0b:ff:36:ba:1d:62:e6:26:65:bd:fe:
05:39:cd:89:8c:72:05:1a:ba:b7:ee:17:e9:e1:18:
5e:70:a0:52:04:df:0c:34:0b:e4:d2:aa:d2:19:fd:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F7:1D:39:28:ED:78:C8:66:51:3C:18:AB:1B:E7:72:4E:07:C4:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/804C48765BB711ECACEE4CC65A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:bd:f4:68:aa:53:7b:ca:ff:28:b6:88:d0:13:12:f9:63:9d:
f8:0d:01:b2:db:7b:27:63:1f:f3:6f:d9:93:e6:74:f2:0c:c0:
e6:09:1a:14:ad:1e:de:37:9a:34:09:93:9a:b7:45:47:63:d3:
f0:78:b4:5c:cc:65:2a:56:a1:74:1f:6d:fc:99:8e:c1:5c:d0:
8e:ef:48:80:21:f1:a7:54:f9:f0:83:f1:3c:38:16:b5:e7:6e:
6a:4c:ee:8a:2e:d9:ed:8c:af:c2:8e:20:31:db:86:2f:bd:8f:
19:92:79:f5:27:22:07:58:48:86:10:02:6c:8b:be:56:69:95:
66:5c:78:aa:1e:eb:dd:07:f1:fd:59:71:44:c0:60:f1:e0:aa:
c4:59:ab:bb:d8:cd:0e:12:c9:dd:3b:41:9e:19:e8:5e:a8:97:
66:b1:48:01:0c:f0:57:55:42:43:05:c0:bf:09:64:c5:b2:f7:
78:61:c9:e6:46:d5:a2:57:f8:10:29:4c:fd:d5:2e:74:1f:bb:
a3:ed:cd:02:7e:28:0a:c5:a6:70:99:85:1c:d6:3d:00:ec:81:
57:74:8d:23:f1:ba:08:66:18:e7:c6:95:4f:2d:a6:54:61:5e:
54:c1:ea:1e:92:02:13:0c:b2:57:bb:69:87:69:ae:02:1e:9e:
ac:81:dc:b9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICE8swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTEyMTMwMTUzNDBaFw0yMjEyMzAwMTUzNDBaMBgxFjAU
BgNVBAMMDTYxYjZhN2E3LTVjOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDqr139vsPnEWWnsfYL08pn0rHI40Pgd8QMzSm9VnnejU6/gpy2NL2wnlrW
/akHMkTnFB1FdV/EqU7mGpL6kqlFM+tX5WWnZkBpuyD8CHUwG+tAm+fJEGW/Tvxo
74ItBvYbCh9kSOsJKD87aayv1zakGtF0QcLQMFAeeHm1LY/c6YJRBbLbAK6mjavh
523z7Rwng6ZatItNySqzwdUsyONWEhJRNC4j2oCoVk1N0TuDNoPXm9MJH3rCb4ZR
9I1tqrmp1C3l03ZKOlQPAcJgGOx4K2r5Uq0L/za6HWLmJmW9/gU5zYmMcgUaurfu
F+nhGF5woFIE3ww0C+TSqtIZ/U95AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUR/cd
OSjteMhmUTwYqxvnck4HxMgwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzgwNEM0ODc2NUJCNzExRUNBQ0VFNENDNjVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazE4wDQYJKoZIhvcNAQEL
BQADggEBAKi99GiqU3vK/yi2iNATEvljnfgNAbLbeydjH/Nv2ZPmdPIMwOYJGhSt
Ht43mjQJk5q3RUdj0/B4tFzMZSpWoXQfbfyZjsFc0I7vSIAh8adU+fCD8Tw4FrXn
bmpM7oou2e2Mr8KOIDHbhi+9jxmSefUnIgdYSIYQAmyLvlZplWZceKoe690H8f1Z
cUTAYPHgqsRZq7vYzQ4Syd07QZ4Z6F6ol2axSAEM8FdVQkMFwL8JZMWy93hhyeZG
1aJX+BApTP3VLnQfu6PtzQJ+KArFpnCZhRzWPQDsgVd0jSPxughmGOfGlU8tplRh
XlTB6h6SAhMMsle7aYdprgIenqyB3Lk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-fra.rpki-client.org