Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7235798405E11ED90C5F7F8F1222468.roa
File: D7235798405E11ED90C5F7F8F1222468.roa (raw, json)
Hash identifier: OqOfkZAZsFAm0Wy3zQDqUVfWRLH3gycXU5qVY70+aBM=
Subject key identifier: 36:1C:48:39:0F:96:A6:FC:FE:29:AB:5D:6D:01:77:4F:04:9C:23:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1938
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7235798405E11ED90C5F7F8F1222468.roa
Signing time: Fri 30 Sep 2022 01:26:00 +0000
ROA not before: Fri 30 Sep 2022 01:25:57 +0000
ROA not after: Thu 05 Oct 2023 01:25:57 +0000
asID: 1239
IP address blocks: 154.205.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6456 (0x1938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 01:25:57 2022 GMT
Not After : Oct 5 01:25:57 2023 GMT
Subject: CN=633645a8-94cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:78:80:73:2a:50:8f:cd:e5:53:4f:72:3e:
f3:a0:c1:b9:fa:57:bf:8d:60:8e:a0:e0:be:2c:8b:
76:1c:8d:8e:96:ba:a0:ea:85:8d:a3:86:75:b0:f5:
23:4c:89:40:40:3c:0a:e6:5a:c1:84:a7:07:13:6e:
48:c9:18:e8:8b:4c:57:16:41:62:ca:b5:a4:cf:3b:
9b:71:09:08:e6:bf:cb:8a:c6:64:38:1f:79:53:31:
84:53:b7:cd:d1:2c:16:ed:da:55:9e:f5:ba:3a:a3:
92:89:2a:e4:9e:89:c9:1a:01:42:0f:ac:23:f9:e7:
48:81:ce:75:0a:f1:ba:d4:6c:76:6c:35:77:03:eb:
d7:e9:3f:9e:e9:45:9e:9c:24:d5:d5:10:5d:09:2c:
7b:da:32:87:f5:42:59:4e:74:51:fb:c4:64:8d:6f:
a4:f1:69:17:1e:22:7f:b2:0d:ab:a7:8f:f7:52:e9:
de:4f:1e:97:9d:17:76:34:a4:46:00:36:62:84:f2:
8f:92:57:f2:cc:fc:f8:77:09:f2:4c:91:f7:a1:11:
66:b5:ae:83:bb:3f:9b:f5:c6:ce:87:dc:e4:f7:1c:
ba:bc:af:96:9d:24:6a:75:6e:ec:fa:40:6b:50:04:
0e:1c:30:06:f7:17:bf:7c:57:5a:6f:35:d0:f5:0c:
0c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1C:48:39:0F:96:A6:FC:FE:29:AB:5D:6D:01:77:4F:04:9C:23:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7235798405E11ED90C5F7F8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.180.0/22
Signature Algorithm: sha256WithRSAEncryption
86:86:fa:77:24:32:12:dd:32:4f:59:03:85:97:cb:78:59:85:
74:8f:34:12:7e:6a:45:7f:51:69:71:ba:98:93:54:2b:07:2f:
01:2e:8e:ea:68:3b:c1:2a:83:64:53:95:a7:30:aa:ad:4c:fe:
d5:d9:d5:c0:b4:59:c0:cf:5a:e1:d0:b7:00:a8:1e:fd:23:3b:
5b:50:39:23:b3:0b:ec:0d:ec:ce:b1:c3:94:f0:b5:36:e0:be:
aa:3d:3d:d0:85:e2:bc:b3:6f:29:d7:92:1c:66:96:f5:e4:b9:
bf:1f:c6:3f:3a:db:57:97:d3:80:86:49:23:82:80:59:29:90:
f5:aa:c0:23:c4:f5:c2:51:5b:24:2b:e5:88:55:d4:5c:f5:ed:
db:88:1d:b9:6d:31:fa:3e:ea:e9:46:07:bc:2a:85:b2:33:0c:
2c:05:5b:ca:9e:20:34:91:4a:d9:0e:89:14:bc:b2:77:0e:8b:
79:9a:f3:11:e8:db:f9:71:39:2b:0f:d4:46:25:06:2b:32:11:
db:8b:8d:ea:50:68:a5:7b:01:17:a6:fc:27:db:cc:0a:8f:5c:
79:63:3a:f4:96:e5:f0:e3:c7:77:a6:e7:17:11:58:b3:ed:78:
fb:e5:ea:6b:7c:fb:25:00:d9:ad:39:48:9d:ed:4c:2f:f9:82:
e6:19:45:00
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGTgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA5MzAwMTI1NTdaFw0yMzEwMDUwMTI1NTdaMBgxFjAU
BgNVBAMMDTYzMzY0NWE4LTk0Y2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIiniAcypQj83lU09yPvOgwbn6V7+NYI6g4L4si3YcjY6WuqDqhY2jhnWw
9SNMiUBAPArmWsGEpwcTbkjJGOiLTFcWQWLKtaTPO5txCQjmv8uKxmQ4H3lTMYRT
t83RLBbt2lWe9bo6o5KJKuSeickaAUIPrCP550iBznUK8brUbHZsNXcD69fpP57p
RZ6cJNXVEF0JLHvaMof1QllOdFH7xGSNb6TxaRceIn+yDaunj/dS6d5PHpedF3Y0
pEYANmKE8o+SV/LM/Ph3CfJMkfehEWa1roO7P5v1xs6H3OT3HLq8r5adJGp1buz6
QGtQBA4cMAb3F798V1pvNdD1DAxxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUNhxI
OQ+Wpvz+KatdbQF3TwScI1QwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0Q3MjM1Nzk4NDA1RTExRUQ5MEM1RjdGOEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKazbQwDQYJKoZIhvcNAQEL
BQADggEBAIaG+nckMhLdMk9ZA4WXy3hZhXSPNBJ+akV/UWlxupiTVCsHLwEujupo
O8Eqg2RTlacwqq1M/tXZ1cC0WcDPWuHQtwCoHv0jO1tQOSOzC+wN7M6xw5TwtTbg
vqo9PdCF4ryzbynXkhxmlvXkub8fxj8621eX04CGSSOCgFkpkPWqwCPE9cJRWyQr
5YhV1Fz17duIHbltMfo+6ulGB7wqhbIzDCwFW8qeIDSRStkOiRS8sncOi3ma8xHo
2/lxOSsP1EYlBisyEduLjepQaKV7ARem/CfbzAqPXHljOvSW5fDjx3em5xcRWLPt
ePvl6mt8+yUA2a05SJ3tTC/5guYZRQA=
-----END CERTIFICATE-----
Generated at Fri Oct 6 01:29:46 2023 by rpki-client on console-fra.rpki-client.org