Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2C75AFC476A11ECA80AF178D8A014CE.roa
File: D2C75AFC476A11ECA80AF178D8A014CE.roa (raw, json)
Hash identifier: 3blMA7G6vwL0FHCT4BFZ92G0RRbRlemSy+E8S+StiAA=
Subject key identifier: 6C:FC:89:89:2F:C7:4C:FC:7D:A8:41:9B:B5:CD:80:6F:EE:7B:20:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0CEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2C75AFC476A11ECA80AF178D8A014CE.roa
Signing time: Wed 17 Nov 2021 05:54:27 +0000
ROA not before: Wed 17 Nov 2021 05:54:23 +0000
ROA not after: Sat 17 Dec 2022 05:54:23 +0000
asID: 134428
IP address blocks: 154.222.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3308 (0xcec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 05:54:23 2021 GMT
Not After : Dec 17 05:54:23 2022 GMT
Subject: CN=61949913-71a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:c2:23:24:21:e1:6a:7b:89:32:5a:58:5b:
0d:e5:16:ce:14:96:77:61:56:ee:57:76:da:96:64:
60:42:d0:bb:01:13:df:e9:33:a1:6e:15:04:a8:db:
a7:0f:1f:79:73:ab:ed:f1:5e:01:90:aa:1a:d3:e9:
49:29:56:a4:31:6e:07:a9:29:0e:86:50:02:55:3c:
dc:18:ae:05:cd:cb:96:0b:da:43:55:92:a3:a3:81:
98:78:2b:c4:40:fb:4e:78:f2:d0:38:00:dd:6e:2d:
2b:6b:12:bf:79:ae:d3:83:0e:e3:27:5a:11:42:d4:
28:f6:3b:a8:5b:55:06:1e:ea:f5:48:e9:c1:76:5d:
39:1c:da:0d:e8:63:30:5f:a7:16:44:49:57:cd:5d:
34:ad:61:48:f3:78:92:b5:ec:6d:07:20:69:44:e9:
27:f6:2a:6e:da:9b:a4:92:57:ee:bf:0e:bd:5d:dd:
a7:df:b6:bd:e4:a8:6c:f3:93:d4:9d:4c:4f:af:db:
f1:cc:77:3e:97:33:9b:7a:d4:af:8f:3b:82:35:a5:
8a:a3:34:14:08:3a:ed:18:0f:c8:78:ed:34:38:59:
a1:a8:b1:f7:52:c9:a7:b5:6b:d1:be:eb:cf:7a:51:
3d:01:e1:ae:b8:90:07:ac:9a:0a:dd:23:dc:42:34:
0f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FC:89:89:2F:C7:4C:FC:7D:A8:41:9B:B5:CD:80:6F:EE:7B:20:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2C75AFC476A11ECA80AF178D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.45.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:f9:97:b8:2c:18:ee:a7:56:d4:aa:f5:1e:8d:aa:94:74:a5:
fa:0e:7f:f5:d5:81:07:9c:47:c4:be:72:af:27:11:6e:78:17:
41:35:94:e4:1f:69:48:77:fa:f0:b4:2c:49:6e:76:aa:3f:40:
b7:4b:52:96:00:4e:58:b4:fb:0a:00:46:20:f0:d8:cb:e6:d1:
01:c6:e1:86:7a:46:48:f3:db:36:03:1b:29:24:a9:b6:d4:bf:
9c:f4:99:0a:e7:7d:aa:ef:cb:f3:7b:ec:13:74:f1:7a:4a:46:
f0:5a:f5:f2:ed:0b:29:39:42:b0:a8:3e:d8:9a:d8:34:06:ee:
74:e6:c9:6a:d2:95:8f:8c:44:7d:a1:e0:c7:7f:bc:ed:28:c4:
85:7d:86:09:1c:42:4d:6d:4a:8e:05:58:7c:4d:a2:c2:6c:4f:
bf:45:dc:c5:7a:b8:71:08:08:e2:68:7c:8e:2f:cf:e5:41:49:
64:70:4f:35:07:f2:b2:5c:47:ac:0a:34:2e:fa:fc:c1:4c:3c:
b1:b8:03:c0:94:5d:80:5e:09:5a:89:9f:69:af:4e:83:3b:28:
52:df:53:e4:1a:2a:c6:3b:6f:7e:f3:50:65:3e:5c:9e:d2:da:
98:ed:e9:34:8c:82:48:c8:36:89:ad:22:e0:08:74:fe:5e:fc:
b4:ad:6d:27
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDOwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTExMTcwNTU0MjNaFw0yMjEyMTcwNTU0MjNaMBgxFjAU
BgNVBAMMDTYxOTQ5OTEzLTcxYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+O8IjJCHhanuJMlpYWw3lFs4UlndhVu5XdtqWZGBC0LsBE9/pM6FuFQSo
26cPH3lzq+3xXgGQqhrT6UkpVqQxbgepKQ6GUAJVPNwYrgXNy5YL2kNVkqOjgZh4
K8RA+0548tA4AN1uLStrEr95rtODDuMnWhFC1Cj2O6hbVQYe6vVI6cF2XTkc2g3o
YzBfpxZESVfNXTStYUjzeJK17G0HIGlE6Sf2Km7am6SSV+6/Dr1d3afftr3kqGzz
k9SdTE+v2/HMdz6XM5t61K+PO4I1pYqjNBQIOu0YD8h47TQ4WaGosfdSyae1a9G+
6896UT0B4a64kAesmgrdI9xCNA8JAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUbPyJ
iS/HTPx9qEGbtc2Ab+57IFgwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0QyQzc1QUZDNDc2QTExRUNBODBBRjE3OEQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa3i0wDQYJKoZIhvcNAQEL
BQADggEBAFr5l7gsGO6nVtSq9R6NqpR0pfoOf/XVgQecR8S+cq8nEW54F0E1lOQf
aUh3+vC0LEludqo/QLdLUpYATli0+woARiDw2Mvm0QHG4YZ6Rkjz2zYDGykkqbbU
v5z0mQrnfarvy/N77BN08XpKRvBa9fLtCyk5QrCoPtia2DQG7nTmyWrSlY+MRH2h
4Md/vO0oxIV9hgkcQk1tSo4FWHxNosJsT79F3MV6uHEICOJofI4vz+VBSWRwTzUH
8rJcR6wKNC76/MFMPLG4A8CUXYBeCVqJn2mvToM7KFLfU+QaKsY7b37zUGU+XJ7S
2pjt6TSMgkjINomtIuAIdP5e/LStbSc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-ams.rpki-client.org