Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B8E577E4B9011EC9D69320CD8A014CE.roa
File: 8B8E577E4B9011EC9D69320CD8A014CE.roa (raw, json)
Hash identifier: S3SEE62/i/Xiyhic68gZQ3C4tAFFgyJiPhiajwfUeMk=
Subject key identifier: 94:27:88:BF:4C:E2:B7:79:CF:8C:4B:55:03:D6:74:F2:A8:3C:AD:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1204
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B8E577E4B9011EC9D69320CD8A014CE.roa
Signing time: Mon 22 Nov 2021 12:34:33 +0000
ROA not before: Mon 22 Nov 2021 12:34:29 +0000
ROA not after: Sat 19 Nov 2022 12:34:29 +0000
asID: 9009
IP address blocks: 154.85.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4612 (0x1204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 12:34:29 2021 GMT
Not After : Nov 19 12:34:29 2022 GMT
Subject: CN=619b8e59-a9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:b4:07:1c:cc:aa:68:7c:69:fb:3e:e9:ad:
9c:84:c9:54:87:77:1d:16:76:d0:06:4b:7b:44:5c:
62:1e:ce:36:1f:de:fc:9b:51:e5:eb:d9:f5:f3:b8:
49:c5:f0:ae:4f:b3:30:5c:f6:3e:cf:51:a6:a6:24:
66:fb:bd:19:38:0b:e6:e8:aa:63:7b:14:d1:e1:9a:
80:4b:5a:6d:61:ac:fe:10:76:0b:44:9b:d4:65:33:
bd:1c:92:78:34:cc:d8:be:f7:d8:c2:20:a7:32:51:
81:43:21:45:64:ef:e8:6e:96:0f:50:2e:1b:b3:55:
be:c6:e7:94:ae:18:36:72:05:5e:1b:97:96:d5:ee:
cc:76:91:45:fd:4f:56:a2:22:2e:63:18:48:61:fc:
de:ca:f5:fc:52:2f:72:c1:30:bc:2a:20:40:06:b8:
46:21:67:82:ba:1b:30:95:c9:37:df:62:29:18:24:
81:4d:e7:bd:1e:83:7d:78:bb:ff:dd:d7:8c:56:d0:
3b:5e:a1:30:c6:49:92:4a:73:9a:34:87:2f:5e:14:
b6:3b:73:f5:6f:42:bb:cd:4b:15:b3:ff:6e:e7:3d:
7b:a2:94:62:04:4e:11:be:ba:63:62:90:ce:9f:0f:
e0:5b:f2:0f:58:a3:48:a7:eb:c8:db:15:ca:28:cd:
71:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:27:88:BF:4C:E2:B7:79:CF:8C:4B:55:03:D6:74:F2:A8:3C:AD:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B8E577E4B9011EC9D69320CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.100.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:70:09:fa:2f:06:8e:1d:ba:85:70:22:5d:7b:ec:a5:8a:3d:
48:5d:39:cf:55:54:ec:71:36:50:53:43:ec:03:f2:d3:2d:b6:
23:c6:93:ad:f8:3f:c5:d9:87:b6:9f:b7:b4:8d:51:71:8a:8d:
f9:30:27:1d:d2:6c:cc:55:ab:e2:c3:d8:28:20:2c:95:e9:12:
89:6a:b7:ba:52:83:a9:2b:c0:50:59:bb:77:33:ad:6e:d3:23:
34:4b:c9:a9:79:8b:6b:19:0d:1a:f8:88:23:02:5f:a4:f8:98:
b6:ae:f8:f1:8b:c4:47:bd:10:9d:d4:ab:ba:ca:b5:95:33:81:
ca:6b:4f:f1:6b:bb:a0:0c:7b:49:a9:2a:c5:d2:60:c6:5b:50:
95:b2:2a:99:f6:79:ed:2f:76:c9:e6:6e:c4:d6:c6:eb:5e:14:
0a:7c:10:df:7d:43:4f:c0:b3:ab:b5:72:cb:00:2d:cc:bb:8b:
10:b9:c4:9d:fb:4a:20:b9:78:42:cc:81:63:e1:a0:5c:d2:ec:
3a:2a:5b:2b:d4:4a:db:1a:b0:77:ad:dc:47:50:5d:2a:d0:ac:
75:39:50:bd:c2:a0:d9:9e:a3:3f:1a:55:ef:c7:3d:75:53:f9:
bc:ba:d5:fa:42:e1:b0:62:7c:80:dc:15:07:d6:10:23:b2:a8:
f5:4d:62:74
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEgQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTExMjIxMjM0MjlaFw0yMjExMTkxMjM0MjlaMBgxFjAU
BgNVBAMMDTYxOWI4ZTU5LWE5YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHebQHHMyqaHxp+z7prZyEyVSHdx0WdtAGS3tEXGIezjYf3vybUeXr2fXz
uEnF8K5PszBc9j7PUaamJGb7vRk4C+boqmN7FNHhmoBLWm1hrP4QdgtEm9RlM70c
kng0zNi+99jCIKcyUYFDIUVk7+hulg9QLhuzVb7G55SuGDZyBV4bl5bV7sx2kUX9
T1aiIi5jGEhh/N7K9fxSL3LBMLwqIEAGuEYhZ4K6GzCVyTffYikYJIFN570eg314
u//d14xW0DteoTDGSZJKc5o0hy9eFLY7c/VvQrvNSxWz/27nPXuilGIEThG+umNi
kM6fD+Bb8g9Yo0in68jbFcoozXE5AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUlCeI
v0zit3nPjEtVA9Z08qg8reAwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzhCOEU1NzdFNEI5MDExRUM5RDY5MzIwQ0Q4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaVWQwDQYJKoZIhvcNAQEL
BQADggEBAF1wCfovBo4duoVwIl177KWKPUhdOc9VVOxxNlBTQ+wD8tMttiPGk634
P8XZh7aft7SNUXGKjfkwJx3SbMxVq+LD2CggLJXpEolqt7pSg6krwFBZu3czrW7T
IzRLyal5i2sZDRr4iCMCX6T4mLau+PGLxEe9EJ3Uq7rKtZUzgcprT/Fru6AMe0mp
KsXSYMZbUJWyKpn2ee0vdsnmbsTWxuteFAp8EN99Q0/As6u1cssALcy7ixC5xJ37
SiC5eELMgWPhoFzS7DoqWyvUStsasHet3EdQXSrQrHU5UL3CoNmeoz8aVe/HPXVT
+by61fpC4bBifIDcFQfWECOyqPVNYnQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-ams.rpki-client.org