Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91F88D9EF9B711EBA4989952D8A014CE.roa
File: 91F88D9EF9B711EBA4989952D8A014CE.roa (raw, json)
Hash identifier: GclVVh63O7PRzgH7hWqlJplC5wgKPQ0Hiz84z07bYtE=
Subject key identifier: A0:07:FF:99:77:BF:1A:81:D1:7B:B9:89:A6:20:02:3F:20:93:08:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0898
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91F88D9EF9B711EBA4989952D8A014CE.roa
Signing time: Tue 10 Aug 2021 08:47:58 +0000
ROA not before: Tue 10 Aug 2021 08:47:53 +0000
ROA not after: Mon 10 Oct 2022 08:47:53 +0000
asID: 398478
IP address blocks: 154.195.64.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2200 (0x898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 10 08:47:53 2021 GMT
Not After : Oct 10 08:47:53 2022 GMT
Subject: CN=61123d3e-f497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:49:81:3d:e9:5e:61:03:39:dc:9d:18:ae:e3:
ab:5c:7e:38:2b:21:d4:ed:50:a6:2d:af:69:a4:0f:
35:9a:a0:e4:25:1a:4a:d7:8d:75:c9:62:04:4e:45:
e6:1d:92:e9:33:a3:f2:e5:59:a9:d0:01:28:37:cb:
9a:89:5d:65:95:c9:d8:55:c7:6a:f0:bc:1f:c5:7d:
d5:dc:92:2d:57:c6:8b:b2:af:33:03:66:bf:6f:0d:
49:17:dc:f1:ee:d3:44:85:58:77:4f:94:db:c3:4b:
2e:6b:09:ae:3d:18:8c:ae:9d:fc:ce:5b:79:56:ca:
a7:32:15:ef:9b:da:79:f7:fc:2e:02:73:2a:9f:15:
32:32:f5:85:ba:db:34:40:cb:bf:9e:cf:d8:68:42:
98:83:d2:22:b4:3a:56:2c:70:87:bc:43:c8:fc:51:
02:ae:2b:2f:e5:45:47:f1:a1:ed:ff:1a:70:f3:f4:
86:6d:be:26:b4:f7:55:a9:41:c6:f3:ea:24:b0:83:
60:28:d9:db:50:eb:53:02:28:db:5f:1d:1a:a1:ad:
86:a0:c9:8a:6d:ad:48:89:24:52:c6:1c:10:dc:25:
74:e3:23:ed:4a:fa:a2:6b:b3:67:2f:53:17:3d:0c:
74:a1:f0:cf:2e:57:ea:6b:85:28:6b:31:1f:17:4a:
e3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:07:FF:99:77:BF:1A:81:D1:7B:B9:89:A6:20:02:3F:20:93:08:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91F88D9EF9B711EBA4989952D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.64.0/21
Signature Algorithm: sha256WithRSAEncryption
35:53:0b:bb:3c:51:f7:0a:a8:ab:4e:7c:65:d0:3b:ce:b0:79:
d3:c4:d3:7d:58:4c:d8:da:a8:6f:38:5a:6d:eb:e3:bd:33:b7:
93:b8:ec:d4:ed:43:1b:6c:88:63:0c:0b:b9:4f:bd:9d:37:dc:
af:10:62:f6:b6:c2:23:65:c2:f0:35:0c:6f:77:8d:2a:ca:e7:
b7:b9:00:13:26:c3:d0:ce:d1:77:fb:99:b2:7c:07:34:86:f1:
14:dd:57:ad:0b:e5:17:ca:4b:90:a2:c3:59:fd:48:ff:00:84:
16:b4:0e:c2:c1:e1:79:a1:6b:97:68:71:c7:ef:03:4a:e7:1d:
da:f0:bd:d4:a9:47:99:02:fc:db:50:2e:54:37:72:49:bf:eb:
aa:50:ab:38:51:8e:10:90:24:0e:5c:69:fb:65:8e:7f:b6:d2:
33:e5:f0:a4:7f:f2:5c:b5:27:de:2d:a0:d4:7e:b4:3f:27:2b:
81:ff:6e:51:30:57:4e:6e:d4:d3:a8:f3:97:a8:f8:06:da:bd:
40:09:e8:0f:79:2e:77:c9:53:b6:f4:be:b7:13:17:ee:f3:9b:
32:e2:f7:10:0a:ea:99:df:4f:70:3f:50:f6:2d:61:76:84:cb:
4f:d0:5a:e2:6a:2f:48:0b:12:aa:d9:3b:86:df:a3:9e:7d:02:
d6:89:c4:85
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCJgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTA4MTAwODQ3NTNaFw0yMjEwMTAwODQ3NTNaMBgxFjAU
BgNVBAMMDTYxMTIzZDNlLWY0OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWSYE96V5hAzncnRiu46tcfjgrIdTtUKYtr2mkDzWaoOQlGkrXjXXJYgRO
ReYdkukzo/LlWanQASg3y5qJXWWVydhVx2rwvB/FfdXcki1XxouyrzMDZr9vDUkX
3PHu00SFWHdPlNvDSy5rCa49GIyunfzOW3lWyqcyFe+b2nn3/C4CcyqfFTIy9YW6
2zRAy7+ez9hoQpiD0iK0OlYscIe8Q8j8UQKuKy/lRUfxoe3/GnDz9IZtvia091Wp
Qcbz6iSwg2Ao2dtQ61MCKNtfHRqhrYagyYptrUiJJFLGHBDcJXTjI+1K+qJrs2cv
Uxc9DHSh8M8uV+prhShrMR8XSuPRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUoAf/
mXe/GoHRe7mJpiACPyCTCOYwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzkxRjg4RDlFRjlCNzExRUJBNDk4OTk1MkQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOaw0AwDQYJKoZIhvcNAQEL
BQADggEBADVTC7s8UfcKqKtOfGXQO86wedPE031YTNjaqG84Wm3r470zt5O47NTt
QxtsiGMMC7lPvZ033K8QYva2wiNlwvA1DG93jSrK57e5ABMmw9DO0Xf7mbJ8BzSG
8RTdV60L5RfKS5Ciw1n9SP8AhBa0DsLB4Xmha5doccfvA0rnHdrwvdSpR5kC/NtQ
LlQ3ckm/66pQqzhRjhCQJA5caftljn+20jPl8KR/8ly1J94toNR+tD8nK4H/blEw
V05u1NOo85eo+AbavUAJ6A95LnfJU7b0vrcTF+7zmzLi9xAK6pnfT3A/UPYtYXaE
y0/QWuJqL0gLEqrZO4bfo559AtaJxIU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-fra.rpki-client.org