Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2C2CC1C148B11EDB1106DF6F1222468.roa
File: F2C2CC1C148B11EDB1106DF6F1222468.roa (raw, json)
Hash identifier: a5yLcTGLhh0XO1k9DcQEDW6UtcY1/KAS+Wnmlnteq2U=
Subject key identifier: 55:32:75:78:F6:09:37:8E:79:B0:BD:3C:29:1F:63:06:DD:14:4F:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1819
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2C2CC1C148B11EDB1106DF6F1222468.roa
Signing time: Fri 05 Aug 2022 06:58:02 +0000
ROA not before: Fri 05 Aug 2022 06:57:59 +0000
ROA not after: Fri 30 Dec 2022 06:57:59 +0000
asID: 328608
IP address blocks: 154.91.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6169 (0x1819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 5 06:57:59 2022 GMT
Not After : Dec 30 06:57:59 2022 GMT
Subject: CN=62ecbf7a-ed29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:96:b8:77:f7:f6:be:e7:cf:74:a6:b0:bd:ea:
5e:29:97:e6:ce:20:49:58:e5:9f:20:9b:d7:80:cf:
9e:f4:0f:01:96:91:2a:3e:be:12:82:6c:fb:f9:5e:
61:53:06:a1:2b:db:0f:f9:56:65:0a:65:7b:c2:44:
ca:5c:9d:a4:bf:72:de:a3:d3:46:78:83:b9:c7:7c:
4b:d0:58:6f:9a:cc:17:d0:04:fa:be:18:86:28:12:
93:fd:a0:2f:b3:c1:06:f4:a5:e8:b4:1e:e7:91:f4:
27:09:4a:14:01:77:c0:9d:25:90:0f:9f:f3:79:f8:
13:f0:bc:df:07:5a:8c:4d:49:a4:c9:28:3b:75:85:
a3:7a:16:e9:3e:83:63:85:f6:d0:87:08:d6:f9:1f:
7b:91:d9:20:b9:b9:40:12:fc:a9:68:5e:5d:02:fb:
5b:fd:8b:37:19:49:1e:3a:72:d3:b3:e4:8b:5d:5f:
bd:5c:a5:6c:b2:f3:6b:79:94:09:08:9f:ed:2a:5b:
f1:9d:fe:03:5f:07:68:40:82:82:98:b5:e3:a9:75:
cf:50:e0:ba:35:37:71:c2:45:bd:d2:2c:cd:40:65:
ee:ca:d8:57:85:6a:27:d8:c0:98:a6:29:0c:c8:e9:
32:45:fe:5f:b1:fd:c8:bb:d6:ec:1d:39:f4:3c:c0:
ec:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:32:75:78:F6:09:37:8E:79:B0:BD:3C:29:1F:63:06:DD:14:4F:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2C2CC1C148B11EDB1106DF6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.199.0/24
Signature Algorithm: sha256WithRSAEncryption
55:11:32:ff:d8:19:3e:ff:a3:ed:ee:41:08:c3:a5:cf:9d:fc:
ac:74:f4:26:53:71:d8:d8:f4:cd:ec:cb:93:c5:35:9f:4f:68:
94:6c:36:4f:69:bd:c7:fa:d4:52:b9:e9:fd:5e:fa:6b:9d:79:
71:33:ab:0b:85:1a:e1:47:44:37:17:16:da:af:de:82:7c:9c:
93:fa:67:07:06:19:74:8f:da:d1:b7:62:2c:85:9e:ef:c5:e9:
a9:4c:33:c0:94:4a:4c:ca:1b:96:08:e5:0b:d1:57:18:41:1f:
de:2c:96:45:e4:30:6d:bd:d4:41:34:25:96:e8:d9:19:20:d3:
f8:58:fd:63:5f:44:dc:b7:82:c1:93:a9:b0:a0:4f:85:3f:b3:
f0:24:18:37:f7:85:47:90:16:6d:59:cf:60:16:47:a1:06:e2:
60:69:3c:af:a6:b7:34:37:c5:06:b7:bc:c3:0a:27:ce:d7:f3:
24:30:a4:d1:2f:ab:34:a2:e6:4b:72:da:a6:a9:ea:d8:26:e5:
c8:99:aa:e1:32:34:72:6f:65:13:eb:dd:3b:90:34:4e:6e:17:
f2:44:ab:8d:ce:37:16:f5:8d:84:b0:be:81:15:d7:a6:31:15:
08:ee:cc:bb:ba:8f:dc:76:a1:45:44:98:03:9d:f2:d7:07:f6:
62:3a:5a:4f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGBkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA4MDUwNjU3NTlaFw0yMjEyMzAwNjU3NTlaMBgxFjAU
BgNVBAMMDTYyZWNiZjdhLWVkMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUlrh39/a+5890prC96l4pl+bOIElY5Z8gm9eAz570DwGWkSo+vhKCbPv5
XmFTBqEr2w/5VmUKZXvCRMpcnaS/ct6j00Z4g7nHfEvQWG+azBfQBPq+GIYoEpP9
oC+zwQb0pei0HueR9CcJShQBd8CdJZAPn/N5+BPwvN8HWoxNSaTJKDt1haN6Fuk+
g2OF9tCHCNb5H3uR2SC5uUAS/KloXl0C+1v9izcZSR46ctOz5ItdX71cpWyy82t5
lAkIn+0qW/Gd/gNfB2hAgoKYteOpdc9Q4Lo1N3HCRb3SLM1AZe7K2FeFaifYwJim
KQzI6TJF/l+x/ci71uwdOfQ8wOyXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUVTJ1
ePYJN455sL08KR9jBt0UT0IwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0YyQzJDQzFDMTQ4QjExRURCMTEwNkRGNkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaW8cwDQYJKoZIhvcNAQEL
BQADggEBAFURMv/YGT7/o+3uQQjDpc+d/Kx09CZTcdjY9M3sy5PFNZ9PaJRsNk9p
vcf61FK56f1e+mudeXEzqwuFGuFHRDcXFtqv3oJ8nJP6ZwcGGXSP2tG3YiyFnu/F
6alMM8CUSkzKG5YI5QvRVxhBH94slkXkMG291EE0JZbo2Rkg0/hY/WNfRNy3gsGT
qbCgT4U/s/AkGDf3hUeQFm1Zz2AWR6EG4mBpPK+mtzQ3xQa3vMMKJ87X8yQwpNEv
qzSi5kty2qap6tgm5ciZquEyNHJvZRPr3TuQNE5uF/JEq43ONxb1jYSwvoEV16Yx
FQjuzLu6j9x2oUVEmAOd8tcH9mI6Wk8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:13 2023 by rpki-client on console-ams.rpki-client.org