Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2D8E744E7D611ECAD817EE3F1222468.roa
File: B2D8E744E7D611ECAD817EE3F1222468.roa (raw, json)
Hash identifier: Y4jybrT2jvEZRZIg+DFGIXYXImnNqeASUnvOqMlCMN0=
Subject key identifier: 3E:D5:2C:5D:D1:8D:A1:2F:66:E6:E9:91:44:B2:98:76:76:DA:CB:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 16B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2D8E744E7D611ECAD817EE3F1222468.roa
Signing time: Thu 09 Jun 2022 09:29:45 +0000
ROA not before: Thu 09 Jun 2022 09:29:42 +0000
ROA not after: Wed 30 Aug 2023 09:29:42 +0000
asID: 133199
IP address blocks: 154.204.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5816 (0x16b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 09:29:42 2022 GMT
Not After : Aug 30 09:29:42 2023 GMT
Subject: CN=62a1bd89-1f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:58:b1:b1:7d:80:6b:74:d2:1c:b0:8f:f6:
61:70:d3:24:70:e6:f3:53:a9:8c:35:e9:1d:1e:1f:
b5:73:05:fa:45:98:dd:a8:c7:10:06:c3:93:6c:65:
f8:66:6b:d9:aa:ec:ca:cc:98:a7:56:4d:e3:0f:e0:
40:02:b6:ef:00:1b:c6:a8:19:e5:fb:d5:c1:f6:88:
ad:42:0b:34:de:8d:81:04:72:54:21:2a:78:70:5c:
9b:2f:20:25:ab:de:86:8f:12:3d:70:08:af:1b:61:
5c:b8:00:64:90:c0:9a:84:af:69:7d:be:c5:75:33:
19:98:3d:09:a8:04:37:3e:ba:37:11:f9:c6:b5:3b:
51:18:5c:fb:4a:09:03:22:74:88:6a:95:5a:f4:18:
4c:d3:49:15:f5:08:d7:f4:e7:0d:6f:ca:8b:8a:ac:
c6:df:2f:29:e9:5d:2b:0a:20:14:32:8b:dc:ad:61:
5d:c6:06:43:b8:fb:25:da:d6:60:97:ac:35:01:e3:
fb:16:9d:1e:56:e1:c2:82:ee:dd:ff:5e:d5:37:2d:
2f:29:6c:cd:27:70:8b:29:e8:e0:50:8d:2b:ed:a7:
03:a9:eb:a5:42:e9:d1:ba:cf:bc:9f:3a:1d:e5:4c:
4b:37:b1:7f:f0:7e:b2:c0:77:92:c7:d2:37:e4:35:
44:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D5:2C:5D:D1:8D:A1:2F:66:E6:E9:91:44:B2:98:76:76:DA:CB:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2D8E744E7D611ECAD817EE3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.39.0/24
Signature Algorithm: sha256WithRSAEncryption
93:d9:9f:ae:27:fb:a4:f9:e4:49:de:59:d9:34:0d:46:01:ee:
88:48:f2:88:8c:30:4d:92:31:f2:b9:ef:46:d2:c8:d2:8e:1d:
fc:81:64:d1:58:ee:8e:6e:12:38:27:ae:f4:e7:ad:b5:04:db:
1d:70:0d:73:1a:80:08:42:0e:46:56:0a:98:17:f2:0b:78:3f:
c7:8f:40:06:f7:55:f2:a7:f2:de:d5:5c:e1:e2:21:7d:0e:67:
1c:3c:4c:d2:48:d8:e6:af:25:e0:70:bb:ec:18:9d:44:4b:99:
5b:e2:87:cb:ba:4d:84:27:60:8b:a8:d1:59:6e:bc:ff:d1:f9:
12:d3:2f:50:6f:8a:e6:93:cd:17:c9:4e:3b:e9:8a:34:a7:32:
2b:4f:e7:c2:90:64:f7:28:34:be:9d:48:d8:70:fc:ef:72:74:
a2:b8:80:5e:9f:3a:67:ff:a9:b5:28:f4:ce:95:3a:a5:ee:92:
cc:30:ed:de:d9:b4:ae:16:f0:4a:e5:d7:64:0b:2e:fd:64:88:
f9:af:2a:4c:69:31:20:db:f7:23:60:e8:30:89:4f:c8:09:90:
5a:65:30:ae:5e:a4:e8:e3:a5:38:b3:de:28:fa:10:da:a3:d3:
e5:f3:bc:b5:8d:48:2a:0c:e0:96:b8:46:59:dd:b5:32:ac:fa:
66:43:64:70
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFrgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA2MDkwOTI5NDJaFw0yMzA4MzAwOTI5NDJaMBgxFjAU
BgNVBAMMDTYyYTFiZDg5LTFmMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCkVixsX2Aa3TSHLCP9mFw0yRw5vNTqYw16R0eH7VzBfpFmN2oxxAGw5Ns
Zfhma9mq7MrMmKdWTeMP4EACtu8AG8aoGeX71cH2iK1CCzTejYEEclQhKnhwXJsv
ICWr3oaPEj1wCK8bYVy4AGSQwJqEr2l9vsV1MxmYPQmoBDc+ujcR+ca1O1EYXPtK
CQMidIhqlVr0GEzTSRX1CNf05w1vyouKrMbfLynpXSsKIBQyi9ytYV3GBkO4+yXa
1mCXrDUB4/sWnR5W4cKC7t3/XtU3LS8pbM0ncIsp6OBQjSvtpwOp66VC6dG6z7yf
Oh3lTEs3sX/wfrLAd5LH0jfkNUTpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUPtUs
XdGNoS9m5umRRLKYdnbayzgwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0IyRDhFNzQ0RTdENjExRUNBRDgxN0VFM0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazCcwDQYJKoZIhvcNAQEL
BQADggEBAJPZn64n+6T55EneWdk0DUYB7ohI8oiMME2SMfK570bSyNKOHfyBZNFY
7o5uEjgnrvTnrbUE2x1wDXMagAhCDkZWCpgX8gt4P8ePQAb3VfKn8t7VXOHiIX0O
Zxw8TNJI2OavJeBwu+wYnURLmVvih8u6TYQnYIuo0VluvP/R+RLTL1BviuaTzRfJ
TjvpijSnMitP58KQZPcoNL6dSNhw/O9ydKK4gF6fOmf/qbUo9M6VOqXuksww7d7Z
tK4W8Erl12QLLv1kiPmvKkxpMSDb9yNg6DCJT8gJkFplMK5epOjjpTiz3ij6ENqj
0+XzvLWNSCoM4Ja4RlndtTKs+mZDZHA=
-----END CERTIFICATE-----
Generated at Wed Aug 30 13:18:04 2023 by rpki-client on console-fra.rpki-client.org