Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CED8CAB62CFC11ED8DC3F4BAF1222468.roa
File: CED8CAB62CFC11ED8DC3F4BAF1222468.roa (raw, json)
Hash identifier: fr8DaZHTvGnRAYrwolC/Cry5avedirAdjLvg4j7aOmc=
Subject key identifier: 31:19:8B:D2:8D:A1:6A:B4:0F:BD:C2:F1:BE:F3:ED:1E:B9:CC:7A:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1893
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CED8CAB62CFC11ED8DC3F4BAF1222468.roa
Signing time: Mon 05 Sep 2022 09:26:23 +0000
ROA not before: Mon 05 Sep 2022 09:26:20 +0000
ROA not after: Wed 15 Feb 2023 09:26:20 +0000
asID: 22773
IP address blocks: 154.82.0.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6291 (0x1893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 5 09:26:20 2022 GMT
Not After : Feb 15 09:26:20 2023 GMT
Subject: CN=6315c0bf-83b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:22:12:b8:a0:c1:38:b3:e6:c5:b9:e5:f8:79:
a5:06:31:f0:0a:09:8b:4f:20:1c:79:f8:1a:6f:51:
10:5c:40:58:51:86:81:ca:39:e3:1b:78:f7:92:28:
9f:e9:d0:6d:1a:6f:ee:1e:83:4c:8c:3c:16:9d:cf:
e5:f8:7e:f6:a3:1a:2a:00:66:45:63:f7:e6:2f:0e:
e7:d8:79:ff:b5:d6:c3:1e:03:ff:e9:9e:92:42:64:
bd:1d:a5:49:b1:82:0a:2e:bd:4f:45:9f:ce:a5:8a:
f7:f2:e2:85:bd:5d:4b:f6:f2:68:8e:b2:5f:97:b0:
2d:3d:34:59:c0:37:7f:ef:7e:b2:27:40:80:45:f7:
de:2f:77:70:78:bb:31:cc:ff:97:d7:96:b5:79:76:
66:5e:68:2f:b9:87:2c:ea:8c:f7:8a:4c:10:6e:7b:
5d:14:ad:bc:a9:90:e8:06:62:b8:37:02:95:14:65:
ac:5b:23:88:3f:39:b6:0e:f3:cf:36:e9:3d:78:4c:
18:f0:0e:66:bd:26:ff:4c:d2:06:fc:6b:e2:35:de:
3d:59:d0:18:9a:24:74:dc:99:38:0d:35:d8:dd:07:
9d:4e:d1:f6:1c:0d:09:09:9f:46:5e:07:a2:38:9f:
e7:de:93:78:5b:2b:f6:8b:73:6e:29:ca:e4:dd:46:
6f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:19:8B:D2:8D:A1:6A:B4:0F:BD:C2:F1:BE:F3:ED:1E:B9:CC:7A:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CED8CAB62CFC11ED8DC3F4BAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.0.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:3e:af:6b:8e:de:c9:d2:7e:0b:e7:a6:c8:12:43:ea:8e:46:
2f:8e:1d:f0:65:3e:ed:83:b9:d3:c9:d2:7a:91:dd:34:58:c8:
0a:cc:f0:9d:cb:d3:13:eb:ab:79:1a:96:a3:5b:2c:45:27:d6:
ea:4a:9e:8a:5d:66:9a:e7:5a:d0:d4:27:b8:dc:0f:c5:96:c8:
4d:ba:7d:75:60:be:47:bc:e7:a2:40:d0:00:12:8f:d3:6e:5b:
16:6d:4c:87:da:fc:b7:22:c4:04:44:69:2e:29:3e:c5:2e:4b:
9f:6a:ad:cf:8a:c3:5d:ce:3a:a0:50:7f:c8:ba:46:92:d6:70:
75:88:f5:3d:bc:04:1a:3e:0b:c6:c4:79:a6:c6:98:a5:a3:a1:
83:77:7a:0f:fc:67:ea:34:f1:8d:09:1e:1b:c8:9e:0e:91:9d:
7a:b4:b4:c1:2a:fc:72:6c:7b:2d:0e:84:26:16:ca:f9:a8:d3:
35:96:ea:46:82:e3:e5:ab:45:44:0c:c0:a0:23:d1:ab:6c:d2:
24:59:67:06:d1:0f:58:1a:e1:be:13:84:3f:c4:d4:88:9d:c9:
38:b8:3b:0d:f8:68:e0:0d:5f:11:6e:3c:1a:f6:ec:d9:9d:ad:
7e:94:ec:8a:2c:ba:17:5f:09:51:31:0a:1c:9f:72:c2:1f:b7:
87:cd:30:96
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGJMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA5MDUwOTI2MjBaFw0yMzAyMTUwOTI2MjBaMBgxFjAU
BgNVBAMMDTYzMTVjMGJmLTgzYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjIhK4oME4s+bFueX4eaUGMfAKCYtPIBx5+BpvURBcQFhRhoHKOeMbePeS
KJ/p0G0ab+4eg0yMPBadz+X4fvajGioAZkVj9+YvDufYef+11sMeA//pnpJCZL0d
pUmxggouvU9Fn86livfy4oW9XUv28miOsl+XsC09NFnAN3/vfrInQIBF994vd3B4
uzHM/5fXlrV5dmZeaC+5hyzqjPeKTBBue10UrbypkOgGYrg3ApUUZaxbI4g/ObYO
88826T14TBjwDma9Jv9M0gb8a+I13j1Z0BiaJHTcmTgNNdjdB51O0fYcDQkJn0Ze
B6I4n+fek3hbK/aLc24pyuTdRm/9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUMRmL
0o2harQPvcLxvvPtHrnMepgwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0NFRDhDQUI2MkNGQzExRUQ4REMzRjRCQUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOaUgAwDQYJKoZIhvcNAQEL
BQADggEBAGs+r2uO3snSfgvnpsgSQ+qORi+OHfBlPu2DudPJ0nqR3TRYyArM8J3L
0xPrq3kalqNbLEUn1upKnopdZprnWtDUJ7jcD8WWyE26fXVgvke856JA0AASj9Nu
WxZtTIfa/LcixAREaS4pPsUuS59qrc+Kw13OOqBQf8i6RpLWcHWI9T28BBo+C8bE
eabGmKWjoYN3eg/8Z+o08Y0JHhvIng6RnXq0tMEq/HJsey0OhCYWyvmo0zWW6kaC
4+WrRUQMwKAj0ats0iRZZwbRD1ga4b4ThD/E1IidyTi4Ow34aOANXxFuPBr27Nmd
rX6U7IosuhdfCVExChyfcsIft4fNMJY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-ams.rpki-client.org