Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A3F42F2148E11EDBE962780F1222468.roa
File: 9A3F42F2148E11EDBE962780F1222468.roa (raw, json)
Hash identifier: NRPVa8e6iCCYRg7boM23nutYPzaZgQuX8JvKOVw/u+k=
Subject key identifier: D1:5F:2A:FC:0B:03:5A:7F:50:9F:FB:96:08:9C:44:C1:E4:0A:F9:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 181B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A3F42F2148E11EDBE962780F1222468.roa
Signing time: Fri 05 Aug 2022 07:17:02 +0000
ROA not before: Fri 05 Aug 2022 07:16:58 +0000
ROA not after: Sun 25 Dec 2022 07:16:58 +0000
asID: 399746
IP address blocks: 154.93.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6171 (0x181b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 5 07:16:58 2022 GMT
Not After : Dec 25 07:16:58 2022 GMT
Subject: CN=62ecc3ee-52ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:46:d5:91:1e:f1:55:26:88:76:4c:0f:c7:
1e:f2:a8:cd:73:b7:f0:b0:73:83:51:5e:b9:46:a7:
bf:ce:7b:9d:4d:bb:c7:2e:63:b4:1f:de:27:6b:99:
4c:db:5e:54:b4:6a:29:81:24:f3:6c:77:2a:56:4f:
46:e0:55:39:88:3c:61:cc:51:23:bb:e1:1a:ae:79:
11:69:f1:10:81:74:04:ca:bd:55:57:44:26:c1:f9:
39:5e:97:4a:5c:a3:af:32:c1:cb:9c:a5:e6:32:37:
c7:78:a0:f8:2e:8d:11:f3:5f:e5:9e:3f:84:95:0c:
d6:3f:a1:c1:fb:bd:da:ed:08:56:06:c6:1f:c5:02:
1e:90:75:13:98:17:55:c6:0b:e1:2f:28:c8:47:cb:
39:d3:10:09:48:b5:8d:d9:90:1a:9f:35:24:7f:2c:
5f:df:e1:ea:93:bb:5f:c9:1e:a9:b2:38:3c:18:c9:
94:50:13:86:9c:90:2f:f3:c6:8b:5e:a2:3d:85:b6:
11:11:f0:cd:47:90:79:51:fb:01:23:e0:1b:b0:2a:
de:10:24:a8:8b:11:84:5b:5c:e7:99:66:29:03:8a:
30:c3:73:d1:e7:c9:10:39:ff:6b:37:1b:ff:46:05:
65:b9:a8:e7:73:d3:1f:54:d0:fa:f1:a3:30:64:c1:
92:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5F:2A:FC:0B:03:5A:7F:50:9F:FB:96:08:9C:44:C1:E4:0A:F9:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A3F42F2148E11EDBE962780F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.25.0/24
Signature Algorithm: sha256WithRSAEncryption
28:5f:fe:df:c2:29:d8:dd:07:3c:2d:9f:1f:d5:42:3c:14:40:
46:56:82:86:0b:84:4a:73:5a:1c:12:96:c9:73:6d:01:c1:f5:
d3:a3:5f:79:42:f4:70:da:19:cd:5e:dd:72:a2:8a:9c:8c:59:
4a:cd:95:d9:30:af:67:a2:17:6c:66:41:b1:e2:ee:37:e0:e9:
b6:db:8e:f2:6f:10:bb:da:cd:a6:4d:56:e3:1c:7b:4f:b0:ff:
6e:28:8c:e6:fc:c9:98:2a:8d:28:e7:8b:4b:19:14:2f:87:58:
23:74:d5:a1:08:41:e0:64:5e:1c:e3:1d:9a:4c:86:ca:dc:8a:
d2:e9:d3:7d:a8:00:f1:37:f1:74:6b:f9:77:59:dd:6a:65:99:
9a:45:f7:97:e5:af:5a:e5:9e:6c:f4:33:dd:f8:9e:89:fc:9d:
3f:68:de:12:f4:08:a1:6e:10:a9:d8:11:5c:3b:8e:b7:12:22:
40:30:d2:0f:4e:d7:b7:4c:a6:53:bc:a8:9f:4f:7f:11:fa:64:
f0:19:24:b2:11:a4:47:f7:44:43:9f:7b:31:ab:bb:42:32:8f:
3d:ae:02:58:e2:69:df:cc:7f:84:f4:46:ba:a0:1d:7a:56:1d:
b7:42:b0:32:25:60:d8:05:6b:e4:f3:f7:e6:c9:9f:07:cd:8e:
4c:e6:d1:4c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGBswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA4MDUwNzE2NThaFw0yMjEyMjUwNzE2NThaMBgxFjAU
BgNVBAMMDTYyZWNjM2VlLTUyYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/0EbVkR7xVSaIdkwPxx7yqM1zt/Cwc4NRXrlGp7/Oe51Nu8cuY7Qf3idr
mUzbXlS0aimBJPNsdypWT0bgVTmIPGHMUSO74RqueRFp8RCBdATKvVVXRCbB+Tle
l0pco68ywcucpeYyN8d4oPgujRHzX+WeP4SVDNY/ocH7vdrtCFYGxh/FAh6QdROY
F1XGC+EvKMhHyznTEAlItY3ZkBqfNSR/LF/f4eqTu1/JHqmyODwYyZRQE4ackC/z
xoteoj2FthER8M1HkHlR+wEj4BuwKt4QJKiLEYRbXOeZZikDijDDc9HnyRA5/2s3
G/9GBWW5qOdz0x9U0PrxozBkwZKHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU0V8q
/AsDWn9Qn/uWCJxEweQK+XEwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzlBM0Y0MkYyMTQ4RTExRURCRTk2Mjc4MEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaXRkwDQYJKoZIhvcNAQEL
BQADggEBAChf/t/CKdjdBzwtnx/VQjwUQEZWgoYLhEpzWhwSlslzbQHB9dOjX3lC
9HDaGc1e3XKiipyMWUrNldkwr2eiF2xmQbHi7jfg6bbbjvJvELvazaZNVuMce0+w
/24ojOb8yZgqjSjni0sZFC+HWCN01aEIQeBkXhzjHZpMhsrcitLp032oAPE38XRr
+XdZ3WplmZpF95flr1rlnmz0M934non8nT9o3hL0CKFuEKnYEVw7jrcSIkAw0g9O
17dMplO8qJ9PfxH6ZPAZJLIRpEf3REOfezGru0Iyjz2uAljiad/Mf4T0RrqgHXpW
HbdCsDIlYNgFa+Tz9+bJnwfNjkzm0Uw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-ams.rpki-client.org