Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA73F04EE57E11EB9EA2D62BF8AEA228.roa
File: BA73F04EE57E11EB9EA2D62BF8AEA228.roa (raw, json)
Hash identifier: AVvx0jGypMYA1JQtJYxj8E0chi1+VB1akIV1yN+wzr8=
Subject key identifier: 8D:04:2C:F7:FF:04:88:E1:BD:49:52:DB:44:FE:B1:EF:BB:BA:FA:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 07CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA73F04EE57E11EB9EA2D62BF8AEA228.roa
Signing time: Thu 15 Jul 2021 15:10:02 +0000
ROA not before: Thu 15 Jul 2021 15:09:58 +0000
ROA not after: Sat 09 Jul 2022 15:09:58 +0000
asID: 397630
IP address blocks: 154.202.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1996 (0x7cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:09:58 2021 GMT
Not After : Jul 9 15:09:58 2022 GMT
Subject: CN=60f04fca-d7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:68:5d:8a:eb:ff:73:f1:9b:af:26:96:a9:f1:
b4:a5:b7:5f:a1:49:cc:15:e2:ba:a4:7c:bc:4e:8c:
41:f1:8d:1a:42:99:3c:a9:af:f4:bb:49:cf:20:75:
e6:d5:eb:fb:b2:db:54:4b:42:7d:33:db:9a:70:f6:
41:cb:0f:60:da:10:46:fe:84:38:f4:ec:15:e2:f6:
39:a4:53:2e:62:19:55:30:8d:69:31:2e:d6:16:c0:
c8:f4:a3:b1:6c:2c:06:08:20:40:7f:40:d6:f3:d6:
ac:4c:86:88:47:66:56:40:d3:b4:e0:38:78:02:d4:
72:e1:f0:07:06:65:2d:22:b6:2b:49:88:2e:f8:80:
02:e6:4e:c8:95:2d:39:a2:a8:ec:4a:18:b2:d1:b3:
14:6c:54:83:c9:8f:b9:9a:f5:8a:57:bb:f4:99:13:
17:84:8e:86:16:49:7f:55:46:d0:63:f9:fb:c5:30:
1b:27:cb:15:51:d8:75:34:f0:5a:bc:66:f2:69:f1:
38:16:6c:8f:93:ae:3d:f1:f9:62:09:1d:77:2a:b8:
88:8a:18:ce:e0:22:3f:2e:5d:1a:5d:33:5d:20:d1:
58:1e:de:83:b9:7a:0c:0d:19:9b:c9:2d:44:92:80:
24:98:1e:66:03:19:30:92:78:5f:ca:ff:ee:19:fa:
8c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:04:2C:F7:FF:04:88:E1:BD:49:52:DB:44:FE:B1:EF:BB:BA:FA:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA73F04EE57E11EB9EA2D62BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.102.0/24
Signature Algorithm: sha256WithRSAEncryption
62:93:5e:8e:e0:61:24:a1:f0:da:45:4f:66:6d:c8:a6:78:18:
91:33:a1:63:98:bb:03:9d:e1:fc:d7:4b:82:ce:78:0b:07:52:
f0:d8:05:d5:94:8f:a6:c7:13:9c:97:55:fd:38:e1:8e:97:be:
21:71:af:c9:8e:2a:e3:6c:0e:8b:fc:19:eb:27:0b:2d:ae:88:
74:b5:bf:45:c0:5d:18:51:2f:43:c4:fa:58:3b:03:5f:7f:cd:
91:dc:0f:bc:7c:4b:dc:e3:9a:bb:fa:f6:e7:ff:5d:6a:aa:5a:
92:28:5b:6b:a6:31:50:ed:a8:b6:48:9f:f2:d6:94:91:8c:d8:
6e:63:eb:03:05:fc:ed:22:85:34:fe:29:cc:df:bf:e6:d8:20:
22:0b:b5:74:1d:55:ee:5c:7b:e1:38:b5:b5:87:34:6b:71:2d:
1b:ac:b9:33:4f:47:b8:c8:a8:79:ac:81:5d:53:7a:8b:59:5c:
4b:a2:34:2f:28:92:ba:76:a3:35:cd:b1:8a:12:d5:68:dc:0e:
48:23:3d:d5:45:ef:59:57:04:91:37:38:7e:a3:82:ec:6a:fd:
31:f2:db:9e:ef:5e:fb:7a:6e:de:57:e0:a9:fe:7a:3b:7a:3a:
06:f2:06:3a:0f:f8:90:14:bf:b3:67:7a:3a:9c:c2:7c:a2:07:
84:72:45:17
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTA3MTUxNTA5NThaFw0yMjA3MDkxNTA5NThaMBgxFjAU
BgNVBAMTDTYwZjA0ZmNhLWQ3YjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDraF2K6/9z8ZuvJpap8bSlt1+hScwV4rqkfLxOjEHxjRpCmTypr/S7Sc8g
debV6/uy21RLQn0z25pw9kHLD2DaEEb+hDj07BXi9jmkUy5iGVUwjWkxLtYWwMj0
o7FsLAYIIEB/QNbz1qxMhohHZlZA07TgOHgC1HLh8AcGZS0ititJiC74gALmTsiV
LTmiqOxKGLLRsxRsVIPJj7ma9YpXu/SZExeEjoYWSX9VRtBj+fvFMBsnyxVR2HU0
8Fq8ZvJp8TgWbI+Trj3x+WIJHXcquIiKGM7gIj8uXRpdM10g0Vge3oO5egwNGZvJ
LUSSgCSYHmYDGTCSeF/K/+4Z+oxfAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUjQQs
9/8EiOG9SVLbRP6x77u6+v0wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0JBNzNGMDRFRTU3RTExRUI5RUEyRDYyQkY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaymYwDQYJKoZIhvcNAQEL
BQADggEBAGKTXo7gYSSh8NpFT2ZtyKZ4GJEzoWOYuwOd4fzXS4LOeAsHUvDYBdWU
j6bHE5yXVf044Y6XviFxr8mOKuNsDov8GesnCy2uiHS1v0XAXRhRL0PE+lg7A19/
zZHcD7x8S9zjmrv69uf/XWqqWpIoW2umMVDtqLZIn/LWlJGM2G5j6wMF/O0ihTT+
Kczfv+bYICILtXQdVe5ce+E4tbWHNGtxLRusuTNPR7jIqHmsgV1TeotZXEuiNC8o
krp2ozXNsYoS1WjcDkgjPdVF71lXBJE3OH6jguxq/THy257vXvt6bt5X4Kn+ejt6
OgbyBjoP+JAUv7NnejqcwnyiB4RyRRc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:13 2023 by rpki-client on console-fra.rpki-client.org