Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDCAC3CC57CF11EC94C3C4B55A40D577.roa
File: FDCAC3CC57CF11EC94C3C4B55A40D577.roa (raw, json)
Hash identifier: +A96EVJ8UdzPb7jjMETcGwfLO3L2IGe8CxOS80/kA0A=
Subject key identifier: E0:73:C2:10:7E:C8:E1:E4:24:58:2C:4C:A2:53:CD:CC:52:C1:77:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1325
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDCAC3CC57CF11EC94C3C4B55A40D577.roa
Signing time: Wed 08 Dec 2021 02:38:57 +0000
ROA not before: Wed 08 Dec 2021 02:38:53 +0000
ROA not after: Fri 30 Dec 2022 02:38:53 +0000
asID: 9009
IP address blocks: 154.95.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4901 (0x1325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 8 02:38:53 2021 GMT
Not After : Dec 30 02:38:53 2022 GMT
Subject: CN=61b01ac1-38a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:ad:2f:e1:33:8d:81:e6:c6:cd:32:86:f7:
a0:5e:50:59:cc:cb:45:7f:ee:ba:e5:59:ec:8c:69:
29:a8:32:0f:c4:96:be:bb:68:64:05:63:85:24:89:
1b:3c:89:92:6f:ae:da:13:7b:f6:8a:d9:70:45:39:
bb:01:81:9b:5f:77:0b:07:c3:27:29:30:92:a6:c8:
14:5a:b7:a0:da:4f:f9:0e:78:41:aa:7a:7e:2b:a5:
4b:1c:20:c8:58:a0:82:96:c6:e3:e5:0d:bc:dc:28:
43:7e:f7:2b:41:67:1e:cc:87:6b:9f:14:40:44:99:
49:f7:d8:89:b3:18:4b:83:c1:4c:89:72:7a:a5:01:
61:d2:06:3d:5e:98:ba:b8:a5:75:7e:ff:42:a1:0a:
b4:c1:95:b5:e5:b4:82:18:14:40:e0:af:fe:c5:7e:
07:6f:b5:ad:44:a4:ad:10:d3:0a:bf:01:49:5f:05:
30:59:d9:45:78:21:f6:94:c1:ef:b4:74:c6:87:f4:
fc:0e:d0:7a:97:6c:28:ba:af:e2:1b:92:fe:43:0a:
51:fb:73:9a:56:22:7a:5d:b2:d6:f2:ac:fc:ea:4d:
10:cb:1a:c9:13:86:7b:c8:37:95:5d:81:57:17:03:
91:98:3d:3f:8a:52:a1:5c:e3:ac:3c:f8:77:8b:c7:
56:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:73:C2:10:7E:C8:E1:E4:24:58:2C:4C:A2:53:CD:CC:52:C1:77:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDCAC3CC57CF11EC94C3C4B55A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.35.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:20:a5:6f:58:d5:20:70:da:b2:ec:8f:e5:85:52:62:f2:12:
80:52:3d:8d:9c:25:bf:4e:bf:b5:56:7e:04:64:6b:ea:70:c3:
de:26:af:6f:fc:f2:0d:09:2c:e6:83:98:ca:71:1c:15:7e:3b:
25:5b:7e:5b:53:9e:38:68:11:1c:53:f4:15:43:53:61:02:36:
e4:4a:02:10:ef:9a:de:b5:3f:5d:06:a9:9d:3b:7f:d2:40:4c:
95:26:f6:9c:ff:7f:e0:1a:fc:c6:0d:59:aa:f1:81:df:24:81:
4e:23:45:9a:02:37:7d:f2:c5:43:5b:5a:59:81:3c:0c:85:78:
c7:11:ee:d4:f5:7e:f8:cc:5a:99:0a:47:74:74:be:7b:cf:2a:
11:ee:46:91:17:43:33:35:a0:f2:a1:6e:fc:84:03:d2:6e:e5:
f2:cc:d0:63:7a:93:1f:e8:89:8d:ec:d5:90:2c:b5:b5:ad:f1:
11:02:97:92:fb:05:62:42:c1:65:2a:0f:a5:e7:8e:63:c2:1f:
56:f0:a8:84:b0:e4:c2:c8:b6:5b:a7:3c:e3:81:71:01:3e:6a:
bb:b3:6d:dd:60:e1:e5:b4:d6:7b:a8:d1:e3:a7:a0:b3:41:f3:
4b:e1:d4:5e:c4:cd:7d:e8:74:49:87:0b:70:74:12:f0:fb:36:
f6:77:09:af
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEyUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTEyMDgwMjM4NTNaFw0yMjEyMzAwMjM4NTNaMBgxFjAU
BgNVBAMMDTYxYjAxYWMxLTM4YTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCf8a0v4TONgebGzTKG96BeUFnMy0V/7rrlWeyMaSmoMg/Elr67aGQFY4Uk
iRs8iZJvrtoTe/aK2XBFObsBgZtfdwsHwycpMJKmyBRat6DaT/kOeEGqen4rpUsc
IMhYoIKWxuPlDbzcKEN+9ytBZx7Mh2ufFEBEmUn32ImzGEuDwUyJcnqlAWHSBj1e
mLq4pXV+/0KhCrTBlbXltIIYFEDgr/7Ffgdvta1EpK0Q0wq/AUlfBTBZ2UV4IfaU
we+0dMaH9PwO0HqXbCi6r+Ibkv5DClH7c5pWInpdstbyrPzqTRDLGskThnvIN5Vd
gVcXA5GYPT+KUqFc46w8+HeLx1ZRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU4HPC
EH7I4eQkWCxMolPNzFLBdxswHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0ZEQ0FDM0NDNTdDRjExRUM5NEMzQzRCNTVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaXyMwDQYJKoZIhvcNAQEL
BQADggEBAKUgpW9Y1SBw2rLsj+WFUmLyEoBSPY2cJb9Ov7VWfgRka+pww94mr2/8
8g0JLOaDmMpxHBV+OyVbfltTnjhoERxT9BVDU2ECNuRKAhDvmt61P10GqZ07f9JA
TJUm9pz/f+Aa/MYNWarxgd8kgU4jRZoCN33yxUNbWlmBPAyFeMcR7tT1fvjMWpkK
R3R0vnvPKhHuRpEXQzM1oPKhbvyEA9Ju5fLM0GN6kx/oiY3s1ZAstbWt8RECl5L7
BWJCwWUqD6XnjmPCH1bwqISw5MLItlunPOOBcQE+aruzbd1g4eW01nuo0eOnoLNB
80vh1F7EzX3odEmHC3B0EvD7NvZ3Ca8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:15 2023 by rpki-client on console-fra.rpki-client.org