Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C5EE7725BB611ECAD3588C35A40D577.roa
File: 9C5EE7725BB611ECAD3588C35A40D577.roa (raw, json)
Hash identifier: FZZMC+Fv+hImwQ3yNKehN+fuwX9ATdQUZ2su4SGf0Ic=
Subject key identifier: F0:68:44:59:CD:63:97:93:27:E6:B9:CA:01:10:7B:8B:2A:79:97:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 13B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C5EE7725BB611ECAD3588C35A40D577.roa
Signing time: Mon 13 Dec 2021 01:47:21 +0000
ROA not before: Mon 13 Dec 2021 01:47:18 +0000
ROA not after: Fri 30 Dec 2022 01:47:18 +0000
asID: 135097
IP address blocks: 154.204.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5041 (0x13b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 01:47:18 2021 GMT
Not After : Dec 30 01:47:18 2022 GMT
Subject: CN=61b6a629-bd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:a2:55:1c:98:2a:38:68:5d:dd:e2:db:70:
fc:d4:62:08:e1:e7:26:20:3a:59:18:a8:69:7d:31:
72:fc:0d:29:9c:64:10:5b:58:19:d4:cb:ba:10:f2:
4a:59:71:e9:b1:a8:15:90:97:16:57:d2:60:97:d2:
4b:a0:0b:be:d7:d1:09:58:39:55:ef:7b:1b:51:2e:
1c:b6:0e:04:ef:c6:29:52:92:77:20:2a:99:6f:03:
7c:1d:69:b5:2f:63:f8:83:99:d3:b0:56:b9:a9:2f:
f7:b7:0f:db:44:bb:7b:b3:8b:8b:55:09:b5:12:fa:
33:ee:94:a2:75:32:80:b0:3b:21:a9:74:b0:e2:2f:
7e:a5:60:2c:e4:5c:32:4b:b7:51:65:33:5e:a8:57:
c2:17:24:85:42:04:32:3e:c5:78:20:76:4b:21:5c:
85:8c:03:38:4d:c5:c3:81:9a:ff:8e:4b:8e:d9:2d:
16:28:8e:c1:90:6e:e7:39:17:67:09:d4:77:ac:7e:
5c:ce:8a:8c:43:04:c2:f4:0a:3f:39:f8:b0:a3:56:
18:0c:28:be:7e:bb:c0:96:34:ad:43:8f:9d:d9:26:
56:44:b1:b3:9d:13:3e:6e:0a:9e:b7:79:18:a5:1c:
65:11:af:8e:08:f3:9d:63:5c:da:de:56:4c:a2:93:
34:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:68:44:59:CD:63:97:93:27:E6:B9:CA:01:10:7B:8B:2A:79:97:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C5EE7725BB611ECAD3588C35A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.71.0/24
Signature Algorithm: sha256WithRSAEncryption
35:66:13:69:8a:ba:80:4f:e8:6d:ac:eb:b5:5d:77:a7:90:43:
c4:82:f5:ca:43:b0:1d:e2:3b:d4:5b:42:92:45:26:9a:39:d9:
da:19:a0:f3:09:60:d4:8a:7e:df:02:cc:41:1f:bb:ee:77:ff:
9b:1c:01:4c:ad:ff:8d:9e:82:fd:95:18:d7:73:41:6c:33:f7:
9b:0f:c9:57:81:72:c5:07:e2:d4:9d:50:d7:e6:63:17:39:2a:
99:7c:cd:2b:4e:8b:08:d7:51:8b:f9:92:ff:98:d5:39:5d:e0:
66:06:a0:9f:03:18:47:ef:e6:98:2f:ec:b9:c7:27:7b:40:18:
30:4f:2f:e5:95:16:eb:f5:96:95:6c:34:62:80:bc:a2:f8:e8:
fd:3e:db:b3:fd:72:e8:63:02:fd:70:9c:11:33:d5:81:74:20:
b8:4f:e0:c8:bc:52:3f:81:1d:61:cb:23:45:53:16:6c:a5:f0:
c3:35:82:c7:51:0a:59:87:34:81:08:cb:2e:e9:e8:e2:df:4d:
2d:d9:66:2b:ba:ff:2f:48:67:b1:70:d7:72:f7:ec:43:b6:b5:
28:6f:2c:f7:e2:94:e2:08:a8:73:32:86:05:b2:19:32:0b:8e:
12:c4:20:00:53:81:f6:21:84:2e:5a:9d:1f:82:5e:ec:92:ef:
94:24:67:d7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICE7EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTEyMTMwMTQ3MThaFw0yMjEyMzAwMTQ3MThaMBgxFjAU
BgNVBAMMDTYxYjZhNjI5LWJkMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8BqJVHJgqOGhd3eLbcPzUYgjh5yYgOlkYqGl9MXL8DSmcZBBbWBnUy7oQ
8kpZcemxqBWQlxZX0mCX0kugC77X0QlYOVXvextRLhy2DgTvxilSkncgKplvA3wd
abUvY/iDmdOwVrmpL/e3D9tEu3uzi4tVCbUS+jPulKJ1MoCwOyGpdLDiL36lYCzk
XDJLt1FlM16oV8IXJIVCBDI+xXggdkshXIWMAzhNxcOBmv+OS47ZLRYojsGQbuc5
F2cJ1HesflzOioxDBML0Cj85+LCjVhgMKL5+u8CWNK1Dj53ZJlZEsbOdEz5uCp63
eRilHGURr44I851jXNreVkyikzR9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU8GhE
Wc1jl5Mn5rnKARB7iyp5l6QwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzlDNUVFNzcyNUJCNjExRUNBRDM1ODhDMzVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazEcwDQYJKoZIhvcNAQEL
BQADggEBADVmE2mKuoBP6G2s67Vdd6eQQ8SC9cpDsB3iO9RbQpJFJpo52doZoPMJ
YNSKft8CzEEfu+53/5scAUyt/42egv2VGNdzQWwz95sPyVeBcsUH4tSdUNfmYxc5
Kpl8zStOiwjXUYv5kv+Y1Tld4GYGoJ8DGEfv5pgv7LnHJ3tAGDBPL+WVFuv1lpVs
NGKAvKL46P0+27P9cuhjAv1wnBEz1YF0ILhP4Mi8Uj+BHWHLI0VTFmyl8MM1gsdR
ClmHNIEIyy7p6OLfTS3ZZiu6/y9IZ7Fw13L37EO2tShvLPfilOIIqHMyhgWyGTIL
jhLEIABTgfYhhC5anR+CXuyS75QkZ9c=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-fra.rpki-client.org