Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E010259E4A6511EF86F3ADB3762E951A.roa
File: E010259E4A6511EF86F3ADB3762E951A.roa (raw, json)
Hash identifier: mvTC3tsB4pWER1nyYy/W83iEeiG08GyJoXQePIxIlf8=
Subject key identifier: 1E:12:FB:5E:17:67:AD:A7:BF:EF:A9:C8:56:6D:BB:BB:29:5B:30:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D716
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E010259E4A6511EF86F3ADB3762E951A.roa
Signing time: Thu 25 Jul 2024 09:11:28 +0000
ROA not before: Thu 25 Jul 2024 09:11:25 +0000
ROA not after: Sat 03 Aug 2024 09:11:25 +0000
asID: 22773
IP address blocks: 154.85.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55062 (0xd716)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 09:11:25 2024 GMT
Not After : Aug 3 09:11:25 2024 GMT
Subject: CN=66a216c0-ce55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:af:dd:81:2f:61:4f:d0:24:14:2d:3f:26:50:
0e:82:5c:03:f6:35:04:55:a5:62:3f:59:45:20:b1:
0c:3a:b3:1f:65:2e:d9:31:16:43:ea:98:7b:e8:d9:
77:9b:32:81:23:fc:63:65:a3:f8:21:45:06:94:68:
27:d7:2e:a5:06:a1:96:46:4c:40:aa:8c:88:08:85:
90:14:ce:2a:fd:66:7c:15:80:4f:d7:05:7b:ec:56:
ae:ef:90:6a:4c:25:eb:53:b4:f1:c9:f5:17:22:f6:
0a:d9:01:65:a5:ed:a7:e0:29:2d:6c:68:1c:fc:f7:
08:10:74:93:6d:6c:bd:60:5c:ed:a3:b5:a4:bb:af:
e5:a8:7e:7a:a0:ad:de:f7:d7:a3:d3:27:75:9a:87:
63:24:51:40:c6:5d:b0:b2:70:ea:b6:08:88:a9:2b:
60:3f:36:7e:6f:e2:8f:da:ac:17:46:a5:c7:62:6b:
64:3c:6a:75:55:ee:5a:cb:df:41:cb:0a:52:35:8d:
de:ee:01:db:c6:53:1d:2a:d4:dc:ed:9e:c8:cd:17:
d9:6e:8f:4c:f3:46:f8:78:51:15:78:e5:eb:9e:9e:
94:49:c6:3b:33:86:c4:59:bc:5f:12:3c:f4:53:71:
17:e6:c9:3e:99:3a:fa:d8:0b:10:5b:a7:0d:09:14:
ac:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:12:FB:5E:17:67:AD:A7:BF:EF:A9:C8:56:6D:BB:BB:29:5B:30:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E010259E4A6511EF86F3ADB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.108.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:70:e7:41:be:72:37:72:1a:de:65:eb:81:90:f3:a0:7b:c9:
06:09:99:66:0a:bb:59:7a:72:d7:73:1c:b0:8c:be:8a:e3:74:
56:ed:a5:68:6a:76:be:a1:70:91:f4:5c:fc:70:78:a9:0e:ef:
8f:08:44:bd:50:84:24:fa:42:41:d6:11:c1:02:ec:55:6c:9d:
ab:46:b4:28:de:f7:57:43:de:d1:1f:66:af:57:bf:d0:11:d8:
33:1e:9d:d3:a0:97:dc:43:74:b7:b0:a1:f9:70:fd:ba:a5:57:
e3:9c:36:45:20:4f:1f:c2:ae:f4:70:2f:4a:11:32:a6:67:f2:
d9:6f:41:e4:da:1b:09:f4:1c:42:b3:69:7f:e9:da:87:24:8e:
32:b1:9d:21:40:96:b7:a8:9e:3a:50:e0:f4:1a:2c:25:6d:b9:
94:24:8d:ff:5f:a5:cc:7d:f6:0a:27:ea:83:56:68:b7:1b:1f:
1b:3d:13:95:15:46:e4:19:1c:02:9e:82:1f:0b:e9:22:8d:6d:
86:14:ea:52:79:c5:1e:c1:ef:8b:78:41:0b:53:d5:ce:08:25:
96:a8:48:e6:d9:75:32:71:48:fd:1a:aa:50:e4:ff:98:20:46:
58:05:02:93:b3:1f:f4:d4:99:7f:e9:d0:77:04:24:3d:73:5f:
e8:bf:09:f5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDANcWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNzI1MDkxMTI1WhcNMjQwODAzMDkxMTI1WjAYMRYw
FAYDVQQDEw02NmEyMTZjMC1jZTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0a/dgS9hT9AkFC0/JlAOglwD9jUEVaViP1lFILEMOrMfZS7ZMRZD6ph7
6Nl3mzKBI/xjZaP4IUUGlGgn1y6lBqGWRkxAqoyICIWQFM4q/WZ8FYBP1wV77Fau
75BqTCXrU7TxyfUXIvYK2QFlpe2n4CktbGgc/PcIEHSTbWy9YFzto7Wku6/lqH56
oK3e99ej0yd1modjJFFAxl2wsnDqtgiIqStgPzZ+b+KP2qwXRqXHYmtkPGp1Ve5a
y99BywpSNY3e7gHbxlMdKtTc7Z7IzRfZbo9M80b4eFEVeOXrnp6UScY7M4bEWbxf
Ejz0U3EX5sk+mTr62AsQW6cNCRSsYQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB4S
+14XZ62nv++pyFZtu7spWzB5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMDEwMjU5RTRBNjUxMUVGODZGM0FEQjM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlVsMA0GCSqGSIb3DQEB
CwUAA4IBAQDIcOdBvnI3chreZeuBkPOge8kGCZlmCrtZenLXcxywjL6K43RW7aVo
ana+oXCR9Fz8cHipDu+PCES9UIQk+kJB1hHBAuxVbJ2rRrQo3vdXQ97RH2avV7/Q
EdgzHp3ToJfcQ3S3sKH5cP26pVfjnDZFIE8fwq70cC9KETKmZ/LZb0Hk2hsJ9BxC
s2l/6dqHJI4ysZ0hQJa3qJ46UOD0GiwlbbmUJI3/X6XMffYKJ+qDVmi3Gx8bPROV
FUbkGRwCnoIfC+kijW2GFOpSecUewe+LeEELU9XOCCWWqEjm2XUycUj9GqpQ5P+Y
IEZYBQKTsx/01Jl/6dB3BCQ9c1/ovwn1
-----END CERTIFICATE-----
Generated at Sun Aug 4 03:57:23 2024 by rpki-client on console-fra.rpki-client.org