Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0BD5606E58011EB93FA532FF8AEA228.roa
File: B0BD5606E58011EB93FA532FF8AEA228.roa (raw, json)
Hash identifier: EL71y1qcgbxD2V0sqo+RyBarkDVfVvxL5chASUkMW3s=
Subject key identifier: 58:4C:27:15:F3:13:DB:06:DA:9D:34:84:5E:37:14:BB:D8:EA:27:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 080A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0BD5606E58011EB93FA532FF8AEA228.roa
Signing time: Thu 15 Jul 2021 15:24:05 +0000
ROA not before: Thu 15 Jul 2021 15:24:01 +0000
ROA not after: Sat 09 Jul 2022 15:24:01 +0000
asID: 397630
IP address blocks: 154.83.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2058 (0x80a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:24:01 2021 GMT
Not After : Jul 9 15:24:01 2022 GMT
Subject: CN=60f05315-138d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:58:05:17:1f:c4:26:4a:01:21:d9:13:51:4c:
1a:51:ed:86:24:10:5d:13:2a:35:ed:9b:51:b6:6a:
19:97:e5:39:8e:74:16:61:e9:7c:1c:d1:7a:9e:2a:
cf:bd:75:5b:2f:c4:66:19:70:80:1f:d3:3d:c5:10:
b8:c5:2d:a2:92:9f:ef:47:c4:98:59:18:43:0e:24:
98:e7:56:46:be:c8:a5:e8:95:87:5a:1d:22:a9:7f:
68:7b:43:d6:70:7d:d1:76:74:5e:c2:e4:20:4e:7d:
a7:53:bd:2a:6a:0d:89:61:34:01:cf:37:58:88:37:
10:aa:9f:3c:00:16:7b:bc:f9:49:a2:a8:a8:a5:a0:
8a:c0:5f:08:29:de:89:77:38:3a:51:31:56:0d:5b:
b6:73:23:bc:a7:bc:51:97:2f:9a:2c:8d:f5:16:aa:
aa:1e:d6:94:e2:3f:da:15:89:34:7b:74:76:2a:b5:
8a:3e:90:86:9a:e6:6e:fc:3f:9c:71:b5:01:f5:e6:
b6:91:4e:5d:54:3d:f5:70:9c:3e:3a:1b:41:9f:75:
76:89:67:8e:12:bd:54:9e:bd:c8:df:74:b2:15:dc:
33:60:72:8e:ed:65:60:81:f9:34:05:e9:c2:cc:57:
f0:45:91:46:d0:f5:d7:4b:3f:fe:83:39:ba:4a:b0:
8c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4C:27:15:F3:13:DB:06:DA:9D:34:84:5E:37:14:BB:D8:EA:27:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0BD5606E58011EB93FA532FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.10.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:37:89:ad:1b:09:a2:d5:b2:64:e0:d7:2c:f2:be:14:0b:dd:
2e:ec:d1:68:7e:30:2f:14:a4:5c:c6:a0:4a:de:f4:62:e4:df:
c6:cf:f8:a1:74:73:0e:2e:6a:f3:7c:eb:a6:67:7f:76:ae:3e:
7f:45:f5:97:63:21:fd:cf:e5:aa:9c:3b:fd:8c:83:e0:2f:9f:
26:9e:36:c6:0c:15:4f:89:6a:89:60:65:ef:2d:9c:e4:5d:9d:
5b:87:78:02:41:5b:2e:af:5d:2d:b5:de:98:64:7e:9a:12:eb:
dd:b1:76:18:cd:88:e4:15:b8:85:94:6a:63:94:db:99:cb:09:
30:1c:5b:fa:19:33:55:9a:88:d2:c8:3e:1a:14:9b:4d:0a:19:
09:e0:33:f3:bd:c1:82:f1:64:16:c7:d7:e7:fb:ae:df:8c:9f:
26:36:cd:02:78:16:8c:32:82:98:4d:64:56:77:76:81:3f:0b:
44:1a:1d:d5:91:bc:c8:77:f4:c8:9b:c7:a0:80:c1:ae:3b:1e:
db:c2:6a:61:63:f9:35:52:40:63:f1:b0:34:0a:eb:2b:3a:ce:
98:8a:ec:70:74:c7:8c:55:fc:6e:f0:07:1e:df:01:4a:a2:37:
2d:84:df:34:f8:17:79:65:cb:64:43:01:2e:2c:7b:56:bd:3f:
a1:ef:af:b2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCAowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTA3MTUxNTI0MDFaFw0yMjA3MDkxNTI0MDFaMBgxFjAU
BgNVBAMTDTYwZjA1MzE1LTEzOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWWAUXH8QmSgEh2RNRTBpR7YYkEF0TKjXtm1G2ahmX5TmOdBZh6Xwc0Xqe
Ks+9dVsvxGYZcIAf0z3FELjFLaKSn+9HxJhZGEMOJJjnVka+yKXolYdaHSKpf2h7
Q9ZwfdF2dF7C5CBOfadTvSpqDYlhNAHPN1iINxCqnzwAFnu8+UmiqKiloIrAXwgp
3ol3ODpRMVYNW7ZzI7ynvFGXL5osjfUWqqoe1pTiP9oViTR7dHYqtYo+kIaa5m78
P5xxtQH15raRTl1UPfVwnD46G0GfdXaJZ44SvVSevcjfdLIV3DNgco7tZWCB+TQF
6cLMV/BFkUbQ9ddLP/6DObpKsIzpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUWEwn
FfMT2wbanTSEXjcUu9jqJ9swHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0IwQkQ1NjA2RTU4MDExRUI5M0ZBNTMyRkY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaUwowDQYJKoZIhvcNAQEL
BQADggEBADo3ia0bCaLVsmTg1yzyvhQL3S7s0Wh+MC8UpFzGoEre9GLk38bP+KF0
cw4uavN866Znf3auPn9F9ZdjIf3P5aqcO/2Mg+AvnyaeNsYMFU+JaolgZe8tnORd
nVuHeAJBWy6vXS213phkfpoS692xdhjNiOQVuIWUamOU25nLCTAcW/oZM1WaiNLI
PhoUm00KGQngM/O9wYLxZBbH1+f7rt+MnyY2zQJ4FowygphNZFZ3doE/C0QaHdWR
vMh39Mibx6CAwa47HtvCamFj+TVSQGPxsDQK6ys6zpiK7HB0x4xV/G7wBx7fAUqi
Ny2E3zT4F3lly2RDAS4se1a9P6Hvr7I=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:13 2023 by rpki-client on console-fra.rpki-client.org