Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E60AD458E57D11EB85DE9D2AF8AEA228.roa
File: E60AD458E57D11EB85DE9D2AF8AEA228.roa (raw, json)
Hash identifier: xXdEOmdttgIMndAnlulu1BC9dfCKJG0XrC0tf6mPQ5M=
Subject key identifier: 8C:17:31:B3:C5:FD:BF:24:76:D9:B4:39:2C:AB:92:F3:85:49:E3:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 07BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E60AD458E57D11EB85DE9D2AF8AEA228.roa
Signing time: Thu 15 Jul 2021 15:04:06 +0000
ROA not before: Thu 15 Jul 2021 15:04:01 +0000
ROA not after: Sat 09 Jul 2022 15:04:01 +0000
asID: 397630
IP address blocks: 154.201.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1978 (0x7ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 15:04:01 2021 GMT
Not After : Jul 9 15:04:01 2022 GMT
Subject: CN=60f04e66-0ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ab:a6:a3:8e:c8:4e:61:ce:90:b1:ab:de:05:
62:43:54:7b:8d:2b:15:2b:76:e8:d4:92:99:2e:d4:
89:df:57:ed:4b:40:b0:2d:e9:85:9d:74:38:c2:7f:
0a:39:31:3b:2e:e9:c3:f0:95:4c:17:07:3d:3d:f2:
22:1a:e6:5d:2f:c6:68:97:9a:f4:d8:f2:08:8d:b7:
4b:e6:c2:8b:10:6e:c2:68:96:70:46:a9:9d:a3:df:
63:76:d4:c1:f2:aa:93:c3:52:bd:ad:8b:45:fe:30:
3b:21:1b:79:06:f6:29:d5:3d:d2:92:2a:bd:67:66:
b2:40:e9:78:5c:ca:5c:49:d5:a0:0d:51:75:35:9f:
5b:83:8d:1d:95:c9:fc:89:34:f4:aa:9c:bc:10:14:
33:61:7f:2e:62:b0:c5:3c:dd:e6:2c:0e:e3:e5:81:
8e:0a:67:dd:aa:08:3b:11:1b:94:d0:bd:d2:36:bd:
45:72:e8:9d:5e:3d:e4:32:ca:18:1b:2b:1d:b0:ee:
d2:50:58:3d:87:9f:f6:66:10:f8:50:94:37:12:28:
4f:f5:b2:d2:e8:d1:9c:d6:b1:80:19:ea:dc:af:b7:
73:dd:ed:fe:f0:4a:29:ad:9e:28:06:7a:07:b1:a5:
1e:36:5f:a9:99:52:aa:36:d9:14:72:26:ed:e4:c7:
43:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:17:31:B3:C5:FD:BF:24:76:D9:B4:39:2C:AB:92:F3:85:49:E3:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E60AD458E57D11EB85DE9D2AF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.43.0/24
Signature Algorithm: sha256WithRSAEncryption
14:14:d0:34:6e:85:cd:4d:4e:f6:62:6e:95:ae:ab:91:85:d3:
2b:a7:12:6b:eb:3a:be:7b:d7:a7:11:5e:3b:c3:ca:ed:27:2d:
9a:6b:4b:bb:79:a0:30:e1:97:fe:c9:9a:de:ac:26:a7:df:2d:
07:67:4c:39:56:48:aa:8b:4b:84:80:83:3c:bd:2a:e1:20:5f:
20:22:7f:d6:a2:e7:81:f6:65:ef:93:c2:c6:34:e7:b1:69:a2:
84:7d:0b:a7:4f:7d:3c:7d:a5:88:78:0e:b5:3c:59:4d:8c:4d:
c9:2c:27:46:ea:4a:23:bb:6b:f9:e7:cd:a9:d4:f0:d1:d9:d1:
cf:52:e8:8e:46:7c:41:3b:be:7f:29:4f:8c:18:01:c9:03:55:
18:07:a1:64:c7:33:5d:54:f7:c7:c6:1f:26:f2:ea:ee:74:c2:
a3:40:e4:09:81:e5:13:13:e5:d5:e9:f5:73:e7:dd:3f:71:9f:
f3:ca:60:44:a3:26:39:8d:44:e2:7b:44:33:9d:59:20:72:18:
1a:ab:fb:03:7d:54:f2:18:76:55:7f:75:9f:9f:bd:65:a4:fa:
a7:0e:70:90:90:87:37:90:c3:95:3f:18:70:ae:83:75:40:7b:
87:e4:1b:50:7f:e1:ef:ef:ac:09:0a:a1:05:e4:51:ce:33:66:
d0:0a:d6:51
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB7owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTA3MTUxNTA0MDFaFw0yMjA3MDkxNTA0MDFaMBgxFjAU
BgNVBAMTDTYwZjA0ZTY2LTBlYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCVq6ajjshOYc6QsaveBWJDVHuNKxUrdujUkpku1InfV+1LQLAt6YWddDjC
fwo5MTsu6cPwlUwXBz098iIa5l0vxmiXmvTY8giNt0vmwosQbsJolnBGqZ2j32N2
1MHyqpPDUr2ti0X+MDshG3kG9inVPdKSKr1nZrJA6XhcylxJ1aANUXU1n1uDjR2V
yfyJNPSqnLwQFDNhfy5isMU83eYsDuPlgY4KZ92qCDsRG5TQvdI2vUVy6J1ePeQy
yhgbKx2w7tJQWD2Hn/ZmEPhQlDcSKE/1stLo0ZzWsYAZ6tyvt3Pd7f7wSimtnigG
egexpR42X6mZUqo22RRyJu3kx0OvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUjBcx
s8X9vyR22bQ5LKuS84VJ41kwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0U2MEFENDU4RTU3RDExRUI4NURFOUQyQUY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaySswDQYJKoZIhvcNAQEL
BQADggEBABQU0DRuhc1NTvZibpWuq5GF0yunEmvrOr5716cRXjvDyu0nLZprS7t5
oDDhl/7Jmt6sJqffLQdnTDlWSKqLS4SAgzy9KuEgXyAif9ai54H2Ze+TwsY057Fp
ooR9C6dPfTx9pYh4DrU8WU2MTcksJ0bqSiO7a/nnzanU8NHZ0c9S6I5GfEE7vn8p
T4wYAckDVRgHoWTHM11U98fGHyby6u50wqNA5AmB5RMT5dXp9XPn3T9xn/PKYESj
JjmNROJ7RDOdWSByGBqr+wN9VPIYdlV/dZ+fvWWk+qcOcJCQhzeQw5U/GHCug3VA
e4fkG1B/4e/vrAkKoQXkUc4zZtAK1lE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-fra.rpki-client.org