Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A30F8C505BEA11ECA2F7AEDC5A40D577.roa
File: A30F8C505BEA11ECA2F7AEDC5A40D577.roa (raw, json)
Hash identifier: 6H5gdqQ3nj8Q+xQFLQynWGUnrWlITaSy5BXl47HaX1M=
Subject key identifier: 3B:32:1C:5F:37:0D:AE:FF:33:90:25:8E:B3:45:91:A0:AD:8E:BE:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 13E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A30F8C505BEA11ECA2F7AEDC5A40D577.roa
Signing time: Mon 13 Dec 2021 07:59:46 +0000
ROA not before: Mon 13 Dec 2021 07:59:42 +0000
ROA not after: Mon 30 Jan 2023 07:59:42 +0000
asID: 399077
IP address blocks: 154.211.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5091 (0x13e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 07:59:42 2021 GMT
Not After : Jan 30 07:59:42 2023 GMT
Subject: CN=61b6fd72-0dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:94:a0:4e:50:9c:82:93:2b:68:08:d1:16:41:
80:a1:96:b5:d8:e3:c4:6b:96:fa:e6:0e:ca:58:f2:
45:d5:61:87:f5:8a:1e:30:79:52:da:47:7c:0c:9f:
5f:d3:48:53:b8:7b:5d:dc:ef:ef:d7:22:1c:fa:9f:
5b:eb:19:af:e3:17:64:9b:82:3d:f1:dc:26:3b:c6:
bc:45:b5:0f:9a:a6:81:28:ec:33:d2:bb:37:31:66:
58:a8:4d:40:44:90:e1:43:fc:1c:82:f1:cb:80:bc:
aa:84:95:b7:95:1a:02:86:b4:d5:cb:0f:65:1a:3f:
0e:94:13:e1:2b:cf:3c:08:15:df:33:da:86:e7:7e:
89:e3:c0:27:b1:88:49:0c:a1:0c:2c:6f:f9:34:69:
6c:55:ea:d0:50:f4:86:e5:81:d1:5d:0a:d9:27:e6:
3a:f6:ec:b3:35:13:9b:3b:95:1a:76:47:46:ce:4b:
87:eb:31:e8:ed:11:dd:ca:c5:68:62:49:82:81:c5:
ba:66:57:4e:87:c6:ab:0c:3a:89:8b:c3:75:50:6c:
a7:e3:2e:25:bf:3e:d4:78:6f:03:68:a2:0a:91:ce:
33:d1:1f:27:60:38:84:38:70:20:fd:ed:cb:93:a9:
96:8a:a8:73:4c:8f:ff:5e:39:1c:bd:07:87:db:87:
02:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:32:1C:5F:37:0D:AE:FF:33:90:25:8E:B3:45:91:A0:AD:8E:BE:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A30F8C505BEA11ECA2F7AEDC5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.64.0/18
Signature Algorithm: sha256WithRSAEncryption
c4:be:47:33:1b:cc:e6:0a:85:d7:a6:f6:80:97:6b:e7:f3:8c:
7b:1c:0a:19:40:1d:e3:83:f4:db:b1:1d:ad:4a:72:e1:d3:32:
eb:a8:b1:e8:d6:08:86:e1:2b:4e:e4:70:df:5e:2b:26:76:db:
14:fe:f2:0d:28:86:f8:db:2d:f9:96:0c:a1:77:3a:af:8c:94:
92:7a:e7:9d:18:7f:dd:05:fb:1e:bc:6e:0d:ed:f7:f6:e5:45:
50:58:1e:0e:9e:8f:31:60:79:e3:7b:2d:98:48:33:f3:41:6a:
f1:47:97:ae:87:cc:df:cd:48:ff:a5:66:a1:94:a5:0a:d3:7f:
9a:98:5a:2c:19:17:01:54:03:fb:7c:5c:be:3f:51:94:4d:46:
b7:a0:a4:67:57:07:46:7e:28:f0:28:36:b6:8f:ba:dd:c3:b7:
4b:b9:e5:7c:83:66:5c:17:88:7d:b3:a6:41:08:d0:81:e1:33:
26:1e:47:06:1c:d4:a7:7d:e0:a4:b7:27:08:4e:27:cc:46:34:
3e:8f:81:3c:b2:68:62:e7:87:c3:62:0b:68:a9:8a:55:a3:d9:
15:9f:30:7e:13:71:7d:61:b3:12:c6:40:e3:ad:95:57:a2:b7:
d1:fc:c5:4d:c7:81:e2:7d:13:bd:5e:d5:a3:d0:30:64:d9:36:
98:dc:d5:b4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICE+MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTEyMTMwNzU5NDJaFw0yMzAxMzAwNzU5NDJaMBgxFjAU
BgNVBAMMDTYxYjZmZDcyLTBkYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDglKBOUJyCkytoCNEWQYChlrXY48RrlvrmDspY8kXVYYf1ih4weVLaR3wM
n1/TSFO4e13c7+/XIhz6n1vrGa/jF2Sbgj3x3CY7xrxFtQ+apoEo7DPSuzcxZlio
TUBEkOFD/ByC8cuAvKqElbeVGgKGtNXLD2UaPw6UE+ErzzwIFd8z2obnfonjwCex
iEkMoQwsb/k0aWxV6tBQ9IblgdFdCtkn5jr27LM1E5s7lRp2R0bOS4frMejtEd3K
xWhiSYKBxbpmV06HxqsMOomLw3VQbKfjLiW/PtR4bwNoogqRzjPRHydgOIQ4cCD9
7cuTqZaKqHNMj/9eORy9B4fbhwIhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUOzIc
XzcNrv8zkCWOs0WRoK2Ovt0wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0EzMEY4QzUwNUJFQTExRUNBMkY3QUVEQzVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAaa00AwDQYJKoZIhvcNAQEL
BQADggEBAMS+RzMbzOYKhdem9oCXa+fzjHscChlAHeOD9NuxHa1KcuHTMuuosejW
CIbhK07kcN9eKyZ22xT+8g0ohvjbLfmWDKF3Oq+MlJJ6550Yf90F+x68bg3t9/bl
RVBYHg6ejzFgeeN7LZhIM/NBavFHl66HzN/NSP+lZqGUpQrTf5qYWiwZFwFUA/t8
XL4/UZRNRregpGdXB0Z+KPAoNraPut3Dt0u55XyDZlwXiH2zpkEI0IHhMyYeRwYc
1Kd94KS3JwhOJ8xGND6PgTyyaGLnh8NiC2ipilWj2RWfMH4TcX1hsxLGQOOtlVei
t9H8xU3HgeJ9E71e1aPQMGTZNpjc1bQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:10 2023 by rpki-client on console-ams.rpki-client.org