Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C638C326E33011ED866E4BC42F6D8C1D.roa
File: C638C326E33011ED866E4BC42F6D8C1D.roa (raw, json)
Hash identifier: 8YDWir4rfxo6oGS5lnIREBVNIDMlbCpH+2xdnpP2RJ8=
Subject key identifier: AA:05:96:D8:60:F9:81:A2:F3:DE:4F:36:81:C4:21:08:3B:9D:EB:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1FC5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C638C326E33011ED866E4BC42F6D8C1D.roa
Signing time: Tue 25 Apr 2023 06:16:54 +0000
ROA not before: Tue 25 Apr 2023 06:16:51 +0000
ROA not after: Thu 25 Apr 2024 06:16:51 +0000
asID: 28458
IP address blocks: 154.212.6.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8133 (0x1fc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 06:16:51 2023 GMT
Not After : Apr 25 06:16:51 2024 GMT
Subject: CN=64477056-b0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9f:60:19:3d:8a:85:c1:77:15:31:4c:f3:41:
c6:27:6b:e6:77:4d:fb:07:2b:16:69:bf:89:bf:6f:
a3:a7:2c:09:0b:b4:30:79:96:ca:ae:3f:e9:fa:57:
a9:48:e0:42:3c:cd:ea:65:18:8c:e3:f1:8e:ce:1a:
b2:51:e0:38:e2:84:87:61:08:7f:93:71:db:0c:d4:
3b:41:f8:4f:6f:01:c2:2d:14:4f:d3:23:1a:aa:8b:
f2:65:77:af:3c:9c:49:e5:82:c3:30:4e:94:27:89:
7f:0f:7a:c4:61:e0:8e:c6:20:30:bd:3c:57:0e:37:
61:ce:77:e9:2e:8d:17:d2:de:91:a9:20:19:68:06:
f4:f5:89:27:0f:5d:f5:50:e2:9d:9e:e7:8f:07:21:
28:01:27:58:df:fc:cd:11:b9:26:5a:2b:2e:17:11:
97:96:b8:75:19:ab:7f:34:01:6d:3c:9a:29:77:5b:
65:1b:13:76:38:48:44:2d:69:1d:b6:00:8c:00:cc:
d3:18:69:4b:1d:12:cd:48:c3:21:cf:3e:93:86:ac:
22:2a:da:fc:33:38:5a:2c:fa:a2:52:b7:fe:b2:8a:
47:dd:f7:d6:ff:f3:76:21:ae:ce:cc:c6:e7:79:85:
a7:60:76:51:cd:f8:d7:23:26:96:a9:24:8b:95:0a:
22:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:05:96:D8:60:F9:81:A2:F3:DE:4F:36:81:C4:21:08:3B:9D:EB:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C638C326E33011ED866E4BC42F6D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.6.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:39:a0:7e:d1:d3:e6:86:1e:a9:f7:01:41:34:40:74:76:bb:
7c:de:f6:87:81:87:f1:eb:a7:d4:e2:5c:1f:82:a0:ba:b1:63:
2f:0c:39:1a:78:c0:ca:63:0a:d0:91:ff:a6:b3:6b:2c:cc:2f:
85:40:05:5c:d4:6d:29:23:d6:0a:14:f8:20:71:2f:4d:c2:7c:
14:3f:0e:ce:93:0a:47:eb:dd:c7:b9:50:10:20:a0:42:08:cf:
9a:95:41:09:3f:74:97:86:01:ae:0b:16:22:ab:b8:c5:c7:c7:
3e:e7:32:a2:d2:8b:f4:f1:b5:41:54:e0:72:41:c0:ac:21:69:
b1:5b:64:fb:44:80:1d:e9:48:70:8d:6d:a4:c3:4c:63:d5:91:
62:91:2d:fe:59:ed:f7:66:1f:55:a3:b2:64:f4:3a:ef:4e:a2:
fc:a5:ba:5a:dc:f6:1d:ad:ff:ab:c9:04:b6:41:4b:f2:f2:dd:
35:44:0e:c1:35:3d:c6:f0:a5:3b:14:ad:00:02:dc:0a:bd:60:
bc:10:30:96:49:f5:4c:04:98:21:da:02:b6:cd:65:5f:f3:25:
c1:e7:e0:18:0b:b3:93:8b:4f:25:ff:35:32:ee:fd:a9:c0:40:
d2:10:8d:58:6a:2e:19:ca:22:43:9a:fe:99:c2:1b:c7:48:9d:
f5:c4:f0:d3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICH8UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA0MjUwNjE2NTFaFw0yNDA0MjUwNjE2NTFaMBgxFjAU
BgNVBAMMDTY0NDc3MDU2LWIwYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXn2AZPYqFwXcVMUzzQcYna+Z3TfsHKxZpv4m/b6OnLAkLtDB5lsquP+n6
V6lI4EI8zeplGIzj8Y7OGrJR4DjihIdhCH+TcdsM1DtB+E9vAcItFE/TIxqqi/Jl
d688nEnlgsMwTpQniX8PesRh4I7GIDC9PFcON2HOd+kujRfS3pGpIBloBvT1iScP
XfVQ4p2e548HISgBJ1jf/M0RuSZaKy4XEZeWuHUZq380AW08mil3W2UbE3Y4SEQt
aR22AIwAzNMYaUsdEs1IwyHPPpOGrCIq2vwzOFos+qJSt/6yikfd99b/83Yhrs7M
xud5hadgdlHN+NcjJpapJIuVCiLDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUqgWW
2GD5gaLz3k82gcQhCDud65cwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0M2MzhDMzI2RTMzMDExRUQ4NjZFNEJDNDJGNkQ4QzFELnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGa1AYwDQYJKoZIhvcNAQEL
BQADggEBAMk5oH7R0+aGHqn3AUE0QHR2u3ze9oeBh/Hrp9TiXB+CoLqxYy8MORp4
wMpjCtCR/6azayzML4VABVzUbSkj1goU+CBxL03CfBQ/Ds6TCkfr3ce5UBAgoEII
z5qVQQk/dJeGAa4LFiKruMXHxz7nMqLSi/TxtUFU4HJBwKwhabFbZPtEgB3pSHCN
baTDTGPVkWKRLf5Z7fdmH1WjsmT0Ou9Oovylulrc9h2t/6vJBLZBS/Ly3TVEDsE1
PcbwpTsUrQAC3Aq9YLwQMJZJ9UwEmCHaArbNZV/zJcHn4BgLs5OLTyX/NTLu/anA
QNIQjVhqLhnKIkOa/pnCG8dInfXE8NM=
-----END CERTIFICATE-----
Generated at Thu Apr 25 10:41:11 2024 by rpki-client on console-ams.rpki-client.org