Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F7DC452188E11EDB55C01B8F1222468.roa
File: 8F7DC452188E11EDB55C01B8F1222468.roa (raw, json)
Hash identifier: 5x9x274keJ0Ac5HhwznjtnbXPmmTaLLf8gYqvqp0HCA=
Subject key identifier: 7D:C5:AF:C1:67:40:C6:77:E9:94:05:55:C2:97:55:32:9B:77:7D:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 183F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F7DC452188E11EDB55C01B8F1222468.roa
Signing time: Wed 10 Aug 2022 09:26:49 +0000
ROA not before: Wed 10 Aug 2022 09:26:45 +0000
ROA not after: Fri 30 Dec 2022 09:26:45 +0000
asID: 328608
IP address blocks: 154.204.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6207 (0x183f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 10 09:26:45 2022 GMT
Not After : Dec 30 09:26:45 2022 GMT
Subject: CN=62f379d9-4eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:9f:a1:ee:43:f7:8b:49:cb:73:54:46:d8:
02:83:1c:53:62:01:3b:3e:d7:70:36:c7:38:e9:1a:
4c:61:31:12:45:40:77:c7:79:e2:e2:fc:97:4c:c6:
61:c6:59:d3:92:90:84:35:c6:13:8a:ec:f9:e6:e6:
4f:5f:21:70:e9:48:04:11:1c:e3:71:93:62:a6:fb:
4a:ae:9e:0e:c7:e1:ea:e6:8f:34:2f:7e:8f:d0:41:
5a:8c:49:8b:bf:f8:4d:25:1f:c2:52:34:dc:a0:60:
e3:d8:83:08:1b:06:72:2e:c8:ac:3a:41:7d:66:16:
1b:56:70:cb:00:f6:62:96:32:1e:53:dd:3b:c3:91:
12:1a:b4:10:1e:e4:b9:5a:0d:81:af:99:49:c3:72:
db:cf:e8:a9:02:91:2c:a5:19:46:e6:8f:16:d1:15:
db:4f:bc:9d:de:6f:4e:e6:ed:db:f1:16:aa:09:1b:
b6:21:e1:2d:e9:6d:c4:3a:10:26:dc:74:2c:29:eb:
04:55:01:4d:dd:10:37:7f:4a:39:eb:31:5e:48:be:
19:aa:e9:17:3e:d4:31:60:23:68:51:b6:3b:16:4d:
d7:90:58:b5:3d:a4:5a:bf:8b:fc:7a:d2:af:f7:13:
e1:eb:e4:11:b0:4c:10:d2:2a:6a:28:61:f2:a4:fe:
40:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C5:AF:C1:67:40:C6:77:E9:94:05:55:C2:97:55:32:9B:77:7D:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F7DC452188E11EDB55C01B8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c9:ad:a0:60:7b:4b:d9:0a:2c:a6:0c:f7:5e:44:14:8e:bc:
83:81:65:6b:aa:3c:05:51:7a:cd:a5:a4:49:c3:5b:ec:ce:a3:
fd:9d:99:11:ba:56:24:f5:27:09:9e:a7:ff:83:6b:11:c4:34:
93:eb:b4:20:81:eb:28:2d:20:00:16:20:05:14:78:ba:62:0b:
5d:c9:3b:68:5d:c5:5a:9f:bd:7b:6e:b6:32:9e:03:9c:26:93:
c4:c2:dd:40:b4:29:34:f4:a2:d4:48:c2:9d:e8:73:71:2e:dc:
69:02:68:ff:b1:01:3f:06:19:3d:fa:37:86:b2:f3:bb:9f:7c:
a3:b4:22:67:d6:20:79:71:4d:94:e7:a8:c7:a1:3f:ac:be:14:
99:e4:e7:8a:b9:24:a5:7d:8f:09:d3:f8:6b:de:6c:c1:0b:7a:
bd:6f:57:e7:9b:4f:95:5c:1e:9d:e2:ca:da:11:ab:b6:09:0e:
5e:b1:6a:44:ca:be:62:80:69:f6:67:20:fb:13:d9:8a:12:0c:
7b:a9:d8:9e:31:6f:d9:92:20:5e:e8:0d:b2:49:31:d6:f2:22:
eb:0e:88:d2:80:a9:b6:74:e4:c5:63:86:78:7c:a0:a0:67:b8:
b4:86:8a:8b:e9:11:43:b0:17:b5:6f:e5:9f:90:6a:c9:27:83:
5e:f5:13:a0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGD8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA4MTAwOTI2NDVaFw0yMjEyMzAwOTI2NDVaMBgxFjAU
BgNVBAMMDTYyZjM3OWQ5LTRlYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCo2p+h7kP3i0nLc1RG2AKDHFNiATs+13A2xzjpGkxhMRJFQHfHeeLi/JdM
xmHGWdOSkIQ1xhOK7Pnm5k9fIXDpSAQRHONxk2Km+0qung7H4ermjzQvfo/QQVqM
SYu/+E0lH8JSNNygYOPYgwgbBnIuyKw6QX1mFhtWcMsA9mKWMh5T3TvDkRIatBAe
5LlaDYGvmUnDctvP6KkCkSylGUbmjxbRFdtPvJ3eb07m7dvxFqoJG7Yh4S3pbcQ6
ECbcdCwp6wRVAU3dEDd/SjnrMV5Ivhmq6Rc+1DFgI2hRtjsWTdeQWLU9pFq/i/x6
0q/3E+Hr5BGwTBDSKmooYfKk/kBBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUfcWv
wWdAxnfplAVVwpdVMpt3fSswHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzhGN0RDNDUyMTg4RTExRURCNTVDMDFCOEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazAEwDQYJKoZIhvcNAQEL
BQADggEBAE7JraBge0vZCiymDPdeRBSOvIOBZWuqPAVRes2lpEnDW+zOo/2dmRG6
ViT1Jwmep/+DaxHENJPrtCCB6ygtIAAWIAUUeLpiC13JO2hdxVqfvXtutjKeA5wm
k8TC3UC0KTT0otRIwp3oc3Eu3GkCaP+xAT8GGT36N4ay87uffKO0ImfWIHlxTZTn
qMehP6y+FJnk54q5JKV9jwnT+GvebMELer1vV+ebT5VcHp3iytoRq7YJDl6xakTK
vmKAafZnIPsT2YoSDHup2J4xb9mSIF7oDbJJMdbyIusOiNKAqbZ05MVjhnh8oKBn
uLSGiovpEUOwF7Vv5Z+Qaskng171E6A=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-ams.rpki-client.org