Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B31A23B83AF011EDBCF8E8D9F1222468.roa
File: B31A23B83AF011EDBCF8E8D9F1222468.roa (raw, json)
Hash identifier: sjXna27GodnDR8DjKGkXk/jwdKs2f6pbXVFMFZ8MiSA=
Subject key identifier: 4D:01:E9:59:8F:82:3B:0C:5A:A6:10:0D:09:12:E4:6B:83:99:62:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 18FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B31A23B83AF011EDBCF8E8D9F1222468.roa
Signing time: Fri 23 Sep 2022 03:34:59 +0000
ROA not before: Fri 23 Sep 2022 03:34:54 +0000
ROA not after: Sat 15 Oct 2022 03:34:54 +0000
asID: 45887
IP address blocks: 154.81.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6394 (0x18fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 23 03:34:54 2022 GMT
Not After : Oct 15 03:34:54 2022 GMT
Subject: CN=632d2963-0f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1d:70:a6:48:8b:d0:49:66:86:a2:1d:4c:48:
d4:64:31:3b:df:35:a9:f1:61:c7:2c:1d:b6:32:a7:
ba:dc:24:03:bf:dd:f5:42:d9:35:5a:1d:da:0d:e0:
46:0a:f3:08:de:4a:a0:76:5a:f6:f2:df:5f:a2:9b:
95:e2:9f:02:b2:54:c8:ee:b2:f9:2c:07:f8:fe:e5:
f7:d8:db:8f:c3:4a:37:8a:59:a1:1b:4a:66:b3:ee:
4c:02:a7:9b:68:45:c7:7f:c4:51:28:2e:6d:91:b1:
d2:d8:ce:c0:0d:61:f5:57:2d:fb:91:28:53:a8:92:
e2:70:51:e4:c1:e2:c3:7f:e1:d2:a3:e8:ff:6e:16:
ea:68:be:fb:71:d9:b4:29:52:c0:75:85:c5:87:4f:
84:ad:c3:0b:8f:3f:0b:10:3e:cf:e2:1b:43:06:da:
06:10:fb:05:da:b3:d8:d4:d8:e5:a1:38:d6:1c:80:
bf:04:2f:a6:aa:d0:a1:ed:f8:23:70:a4:fa:a7:f3:
24:96:e0:28:59:71:21:e3:d8:25:ce:d4:57:47:ad:
be:5a:aa:01:48:20:91:14:e3:bd:77:37:07:97:b7:
f3:b4:e5:ad:75:bc:ca:ef:40:96:ab:46:55:b7:ea:
3f:fd:76:d5:cd:f6:50:ff:38:47:61:18:75:e1:41:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:01:E9:59:8F:82:3B:0C:5A:A6:10:0D:09:12:E4:6B:83:99:62:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B31A23B83AF011EDBCF8E8D9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.60.0/22
Signature Algorithm: sha256WithRSAEncryption
24:e3:ae:6d:e9:4a:e9:92:cf:59:4c:b9:a7:d8:85:98:fc:6f:
27:9c:a6:f5:7e:d7:4d:d4:0d:25:72:07:1b:ce:69:da:51:2f:
f8:67:ad:eb:e9:f2:0a:24:0d:dd:fa:95:28:75:1b:88:df:78:
5a:f0:7e:98:0f:29:d0:7e:64:65:e0:65:31:9a:ca:a6:ae:ef:
18:2a:6d:df:83:8e:dc:7b:45:22:3d:70:b1:b7:bc:9f:26:11:
d4:3e:da:85:37:f2:2e:1a:c2:a2:7b:1e:77:1a:8a:7f:0d:c1:
f3:18:d8:c2:9d:05:98:ef:54:2e:32:7f:05:ee:7e:8b:7e:bf:
d2:59:60:49:b0:f5:c5:8a:87:01:31:a4:ef:79:d1:6b:95:5c:
d3:17:d5:2b:ec:aa:0e:7d:8b:b0:4c:2a:61:1d:b5:e5:ce:ae:
74:2f:7e:ef:88:0f:1d:4e:11:7a:47:28:12:f6:b1:d7:47:9f:
b8:80:17:8b:3b:ef:5d:f7:7c:8b:3d:3b:64:29:8c:63:d3:73:
f8:59:44:d4:ad:a7:ab:c4:6f:f6:ff:a2:7f:9a:56:05:a7:24:
e2:1a:96:08:07:cf:cd:3a:95:2d:d2:69:1f:a9:47:3c:12:07:
64:c2:5a:25:2e:67:4e:bc:27:9e:4d:82:45:69:fa:e2:2d:08:
45:46:f7:82
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGPowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA5MjMwMzM0NTRaFw0yMjEwMTUwMzM0NTRaMBgxFjAU
BgNVBAMMDTYzMmQyOTYzLTBmM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDgHXCmSIvQSWaGoh1MSNRkMTvfNanxYccsHbYyp7rcJAO/3fVC2TVaHdoN
4EYK8wjeSqB2Wvby31+im5XinwKyVMjusvksB/j+5ffY24/DSjeKWaEbSmaz7kwC
p5toRcd/xFEoLm2RsdLYzsANYfVXLfuRKFOokuJwUeTB4sN/4dKj6P9uFupovvtx
2bQpUsB1hcWHT4StwwuPPwsQPs/iG0MG2gYQ+wXas9jU2OWhONYcgL8EL6aq0KHt
+CNwpPqn8ySW4ChZcSHj2CXO1FdHrb5aqgFIIJEU4713NweXt/O05a11vMrvQJar
RlW36j/9dtXN9lD/OEdhGHXhQc6DAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUTQHp
WY+COwxaphANCRLka4OZYuowHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0IzMUEyM0I4M0FGMDExRURCQ0Y4RThEOUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKaUTwwDQYJKoZIhvcNAQEL
BQADggEBACTjrm3pSumSz1lMuafYhZj8byecpvV+103UDSVyBxvOadpRL/hnrevp
8gokDd36lSh1G4jfeFrwfpgPKdB+ZGXgZTGayqau7xgqbd+Djtx7RSI9cLG3vJ8m
EdQ+2oU38i4awqJ7Hncain8NwfMY2MKdBZjvVC4yfwXufot+v9JZYEmw9cWKhwEx
pO950WuVXNMX1Svsqg59i7BMKmEdteXOrnQvfu+IDx1OEXpHKBL2sddHn7iAF4s7
7133fIs9O2QpjGPTc/hZRNStp6vEb/b/on+aVgWnJOIalggHz806lS3SaR+pRzwS
B2TCWiUuZ068J55NgkVp+uItCEVG94I=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:13 2023 by rpki-client on console-fra.rpki-client.org