Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2CF1B1C4B9011EC81A1EA0CD8A014CE.roa
File: F2CF1B1C4B9011EC81A1EA0CD8A014CE.roa (raw, json)
Hash identifier: mdps6ydF+U0thoskTkRkLxnQYnKtQrvr5sAEsSFzxVM=
Subject key identifier: 2F:57:65:2C:B9:AB:50:65:2D:11:AF:F3:FD:05:E0:85:57:A5:FF:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 120A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2CF1B1C4B9011EC81A1EA0CD8A014CE.roa
Signing time: Mon 22 Nov 2021 12:37:26 +0000
ROA not before: Mon 22 Nov 2021 12:37:23 +0000
ROA not after: Sat 19 Nov 2022 12:37:23 +0000
asID: 9009
IP address blocks: 154.85.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4618 (0x120a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 12:37:23 2021 GMT
Not After : Nov 19 12:37:23 2022 GMT
Subject: CN=619b8f06-5b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3c:92:b0:eb:58:2b:8b:46:54:b4:9f:c5:da:
02:62:3a:80:8d:33:0a:7c:24:1c:06:52:33:05:ae:
67:ee:00:d0:7f:0e:c9:9e:b0:54:03:bc:2f:2a:e4:
fb:37:49:c0:22:8d:9f:75:54:5a:a0:2c:39:00:59:
19:b9:ae:47:87:9f:fb:a7:4d:4a:6f:ef:00:33:d0:
64:d0:d6:32:22:00:75:54:46:34:92:c4:90:84:86:
69:87:25:bf:b5:d1:b0:4a:5f:23:1f:c3:36:ed:0f:
9c:22:ef:7c:c5:b0:4b:c2:1b:79:ce:e7:72:b7:a7:
1b:75:a4:0b:38:6c:7d:da:cb:b9:94:15:7e:36:04:
bf:7d:b4:80:fc:a5:d5:aa:db:68:70:75:18:15:a0:
29:4a:ee:83:31:d4:96:a1:6e:40:ef:cf:4e:90:62:
3a:61:50:0d:bd:d6:12:05:55:77:cb:30:1f:d7:bf:
73:49:02:63:bb:17:3b:11:60:bd:5c:12:ce:63:5b:
b0:f6:0e:ae:da:10:41:5e:0b:ee:f0:20:97:cc:3a:
71:ef:bc:2f:e9:00:11:7c:f2:ea:79:05:56:7e:e6:
b2:5c:5b:16:45:b0:31:d4:99:bd:f8:bd:f4:af:32:
23:73:18:76:d8:ad:05:98:8f:d5:a3:f3:a5:93:54:
4a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:57:65:2C:B9:AB:50:65:2D:11:AF:F3:FD:05:E0:85:57:A5:FF:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2CF1B1C4B9011EC81A1EA0CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.103.0/24
Signature Algorithm: sha256WithRSAEncryption
72:52:72:8d:01:c3:d4:0c:e3:1f:b5:1e:28:3b:74:17:88:98:
35:a2:ff:6c:e2:bb:26:7d:fa:53:92:4a:43:cd:62:1c:35:e2:
93:59:9d:06:37:a8:90:da:74:2f:5e:fd:42:6d:76:d9:57:71:
c7:5f:b3:c1:c5:05:87:a8:1b:e9:59:45:8a:2f:f4:a6:10:8d:
0b:4f:bb:df:ab:bd:3e:51:24:9e:6e:00:d7:b3:68:15:c7:6a:
fc:3e:7f:89:17:59:0e:1b:ca:3d:09:5d:70:a6:7d:b6:51:29:
39:bf:c6:7b:98:26:99:87:ce:7d:43:3b:39:17:02:0e:18:6f:
5b:21:5c:e6:0c:94:e1:18:70:f3:82:c9:39:b3:63:81:5e:9c:
79:a8:e6:1b:4c:c5:37:3a:97:85:eb:9c:83:cf:b9:3b:27:2c:
06:52:28:a2:b6:52:66:2f:b4:71:94:90:73:54:a1:af:5e:30:
f1:4a:a5:9f:ad:49:ed:bb:d9:72:73:77:73:6a:68:84:82:93:
c7:01:f6:13:e9:d9:dd:13:53:b4:20:a3:a7:37:13:18:e2:14:
bd:dc:65:4e:85:56:21:d5:fb:7c:46:96:bd:c7:94:c3:8f:bf:
50:18:d2:da:48:38:8e:b9:1f:55:46:b1:d3:68:0c:7a:6f:45:
cb:0e:6e:79
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEgowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTExMjIxMjM3MjNaFw0yMjExMTkxMjM3MjNaMBgxFjAU
BgNVBAMMDTYxOWI4ZjA2LTViMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJPJKw61gri0ZUtJ/F2gJiOoCNMwp8JBwGUjMFrmfuANB/DsmesFQDvC8q
5Ps3ScAijZ91VFqgLDkAWRm5rkeHn/unTUpv7wAz0GTQ1jIiAHVURjSSxJCEhmmH
Jb+10bBKXyMfwzbtD5wi73zFsEvCG3nO53K3pxt1pAs4bH3ay7mUFX42BL99tID8
pdWq22hwdRgVoClK7oMx1JahbkDvz06QYjphUA291hIFVXfLMB/Xv3NJAmO7FzsR
YL1cEs5jW7D2Dq7aEEFeC+7wIJfMOnHvvC/pABF88up5BVZ+5rJcWxZFsDHUmb34
vfSvMiNzGHbYrQWYj9Wj86WTVErpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUL1dl
LLmrUGUtEa/z/QXghVel/5gwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0YyQ0YxQjFDNEI5MDExRUM4MUExRUEwQ0Q4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaVWcwDQYJKoZIhvcNAQEL
BQADggEBAHJSco0Bw9QM4x+1Hig7dBeImDWi/2ziuyZ9+lOSSkPNYhw14pNZnQY3
qJDadC9e/UJtdtlXccdfs8HFBYeoG+lZRYov9KYQjQtPu9+rvT5RJJ5uANezaBXH
avw+f4kXWQ4byj0JXXCmfbZRKTm/xnuYJpmHzn1DOzkXAg4Yb1shXOYMlOEYcPOC
yTmzY4FenHmo5htMxTc6l4XrnIPPuTsnLAZSKKK2UmYvtHGUkHNUoa9eMPFKpZ+t
Se272XJzd3NqaISCk8cB9hPp2d0TU7Qgo6c3ExjiFL3cZU6FViHV+3xGlr3HlMOP
v1AY0tpIOI65H1VGsdNoDHpvRcsObnk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-fra.rpki-client.org