Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0F25B7AE55B11EC8F8BED82F1222468.roa
File: D0F25B7AE55B11EC8F8BED82F1222468.roa (raw, json)
Hash identifier: UaVne8iHtusnudo2nRw2hD1za6hKIt0StU/Uq6WwjZo=
Subject key identifier: 6A:29:41:32:98:0F:A4:65:13:B6:C0:61:91:28:14:E6:46:CA:0F:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1698
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0F25B7AE55B11EC8F8BED82F1222468.roa
Signing time: Mon 06 Jun 2022 05:45:05 +0000
ROA not before: Mon 06 Jun 2022 05:45:00 +0000
ROA not after: Fri 30 Jun 2023 05:45:00 +0000
asID: 133585
IP address blocks: 154.84.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5784 (0x1698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 05:45:00 2022 GMT
Not After : Jun 30 05:45:00 2023 GMT
Subject: CN=629d9461-a48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:b5:49:96:5e:3a:f6:eb:dc:a5:2c:68:9f:
ce:88:34:e6:8e:4c:38:aa:7c:77:aa:d6:80:0b:a7:
01:fc:56:16:fe:94:b7:05:50:b5:fa:d9:2d:99:f1:
72:d4:21:6f:1e:cd:f1:c3:85:3e:74:53:a9:af:87:
d3:57:55:2e:0d:79:d0:dd:6d:3c:ec:d4:b3:ea:bf:
b0:2e:79:68:44:ab:f6:90:6a:f4:a4:63:e0:d6:f8:
13:21:25:cf:7d:91:05:aa:ea:62:1d:3b:41:53:59:
db:fb:55:a0:a3:ba:84:1d:43:fd:7b:05:b0:3c:e1:
96:ed:a4:14:53:d5:1c:b0:ee:2c:67:9c:8c:33:bb:
2e:af:d6:2e:e1:65:95:51:31:e0:ec:8e:dd:55:78:
ff:e9:06:cd:8a:58:67:80:fd:c9:7f:4e:2f:e6:4c:
cd:5c:ef:be:61:33:a5:ec:42:94:a3:a0:75:e0:cb:
a2:6c:2b:b2:c4:8c:ed:e5:d5:a4:b0:13:3e:79:6d:
5a:80:26:a1:46:d9:79:7e:4f:78:d7:7b:c7:19:a1:
2b:9e:08:f1:27:8c:9f:49:64:dd:e8:e7:fd:8a:34:
d4:6e:2a:04:45:30:2a:bc:ac:0e:d3:fc:06:77:3e:
d2:c7:c9:2e:74:16:95:44:9a:4b:5a:e6:ef:55:9b:
d0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:29:41:32:98:0F:A4:65:13:B6:C0:61:91:28:14:E6:46:CA:0F:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0F25B7AE55B11EC8F8BED82F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.167.0/24
Signature Algorithm: sha256WithRSAEncryption
11:93:37:27:46:88:df:e8:ba:9e:2a:d9:c0:c5:cd:23:12:ca:
b8:0f:74:0c:27:22:00:f5:ba:d0:6a:67:26:6c:3c:81:41:68:
c9:dc:1b:a8:79:ea:08:e7:75:0b:19:b8:f2:d9:c2:46:2b:ca:
1a:be:e6:82:8b:f8:cd:af:b6:8f:82:41:02:61:fa:97:5f:aa:
0f:3e:7a:3c:7e:3a:1e:b5:95:cd:27:97:5f:36:02:85:b1:f8:
62:1d:17:5f:7b:1b:69:7f:84:c7:88:31:d5:a4:a7:96:1d:34:
82:32:09:9b:15:f4:31:44:62:1e:f4:71:cb:60:b0:20:6e:4e:
f2:d6:85:17:d9:32:7e:e5:55:99:1b:7b:4e:38:d8:8e:fc:8a:
a8:a4:f1:79:c1:1c:e4:3e:1f:aa:bf:a0:99:bc:0c:5d:1d:c2:
26:8c:16:e3:28:ea:00:3f:12:ea:be:71:91:2a:91:aa:91:5f:
a9:3b:82:7c:76:aa:4f:5d:38:dc:3c:a6:0c:2e:06:bd:cf:42:
bf:b7:4c:62:bc:32:9c:f4:b9:b0:e2:52:0a:e7:f3:4c:c8:42:
00:1b:99:02:84:b8:31:b1:97:72:49:8d:21:f1:86:f0:1d:d2:
55:5d:3b:6b:59:ee:84:30:d4:8c:9b:a7:3b:e9:b3:7f:f1:b6:
96:7e:ca:55
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFpgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA2MDYwNTQ1MDBaFw0yMzA2MzAwNTQ1MDBaMBgxFjAU
BgNVBAMMDTYyOWQ5NDYxLWE0OGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7VbVJll469uvcpSxon86INOaOTDiqfHeq1oALpwH8Vhb+lLcFULX62S2Z
8XLUIW8ezfHDhT50U6mvh9NXVS4NedDdbTzs1LPqv7AueWhEq/aQavSkY+DW+BMh
Jc99kQWq6mIdO0FTWdv7VaCjuoQdQ/17BbA84ZbtpBRT1Ryw7ixnnIwzuy6v1i7h
ZZVRMeDsjt1VeP/pBs2KWGeA/cl/Ti/mTM1c775hM6XsQpSjoHXgy6JsK7LEjO3l
1aSwEz55bVqAJqFG2Xl+T3jXe8cZoSueCPEnjJ9JZN3o5/2KNNRuKgRFMCq8rA7T
/AZ3PtLHyS50FpVEmkta5u9Vm9AVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUailB
MpgPpGUTtsBhkSgU5kbKD+IwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0QwRjI1QjdBRTU1QjExRUM4RjhCRUQ4MkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaVKcwDQYJKoZIhvcNAQEL
BQADggEBABGTNydGiN/oup4q2cDFzSMSyrgPdAwnIgD1utBqZyZsPIFBaMncG6h5
6gjndQsZuPLZwkYryhq+5oKL+M2vto+CQQJh+pdfqg8+ejx+Oh61lc0nl182AoWx
+GIdF197G2l/hMeIMdWkp5YdNIIyCZsV9DFEYh70cctgsCBuTvLWhRfZMn7lVZkb
e0442I78iqik8XnBHOQ+H6q/oJm8DF0dwiaMFuMo6gA/Euq+cZEqkaqRX6k7gnx2
qk9dONw8pgwuBr3PQr+3TGK8Mpz0ubDiUgrn80zIQgAbmQKEuDGxl3JJjSHxhvAd
0lVdO2tZ7oQw1Iybpzvps3/xtpZ+ylU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-fra.rpki-client.org