Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/7D20898AE05A11E9A2D1FA66F8AEA228.roa
File: 7D20898AE05A11E9A2D1FA66F8AEA228.roa (raw, json)
Hash identifier: FXqaG7HbgwwiQrdq1L5fTfm7TjSJYCGWefLBiubrxaY=
Subject key identifier: C1:E7:0A:14:7D:AC:41:ED:AE:D9:D6:60:93:C1:E2:93:05:C2:6F:D2
Certificate issuer: /CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Certificate serial: 8E
Authority key identifier: 7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/7D20898AE05A11E9A2D1FA66F8AEA228.roa
Signing time: Thu 26 Sep 2019 12:38:07 +0000
ROA not before: Thu 26 Sep 2019 12:38:02 +0000
ROA not after: Thu 26 Sep 2024 12:38:02 +0000
asID: 327804
IP address blocks: 154.68.164.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Validity
Not Before: Sep 26 12:38:02 2019 GMT
Not After : Sep 26 12:38:02 2024 GMT
Subject: CN=5d8cb12e-388c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:61:3d:fd:9f:7b:0f:58:d6:23:0b:68:d6:c6:
31:6c:bd:d4:17:3f:b7:c1:60:d4:3b:bc:80:1f:fc:
06:3c:87:20:22:fe:f0:b4:f6:78:a9:7a:1b:18:d0:
f6:44:e6:3b:f9:f3:b3:89:40:ca:a9:99:b4:4a:7d:
d4:fc:69:9b:7a:48:6a:69:3f:71:ef:89:97:60:f8:
6e:41:6f:41:0c:dc:4c:17:c5:68:28:e4:ac:21:41:
01:f3:7d:f4:e4:ad:37:6e:5a:61:06:b8:9f:48:d7:
3f:be:82:98:9c:59:ca:ac:6d:19:9e:df:93:87:6e:
83:96:97:9e:b1:d6:9e:55:43:ac:88:a8:d5:37:52:
ad:2d:77:61:b4:17:fd:76:33:1e:12:97:2d:9a:d2:
a4:6e:5f:53:2b:de:d3:c3:e8:0d:73:8e:db:b8:63:
f1:71:c1:8a:cd:65:c6:3b:aa:aa:35:eb:23:6f:b0:
d6:52:f3:a8:c1:66:cd:ee:d7:64:fa:e3:08:4f:94:
17:83:26:62:ae:9c:5a:39:c2:b2:c8:f9:18:b2:b9:
eb:a2:3e:1c:d4:59:f9:cf:e4:76:c9:ea:6d:a0:ff:
47:fc:87:5a:e7:17:93:60:9d:39:db:66:58:ea:36:
75:ee:2e:40:39:ca:ec:32:b9:4f:25:98:81:58:c3:
1e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E7:0A:14:7D:AC:41:ED:AE:D9:D6:60:93:C1:E2:93:05:C2:6F:D2
X509v3 Authority Key Identifier:
keyid:7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/7D20898AE05A11E9A2D1FA66F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
154.68.164.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:3a:11:15:db:1c:c9:c7:13:4e:44:fa:a0:3b:db:ce:e4:35:
f7:04:a2:1f:9c:88:b3:76:22:92:1d:a8:8e:3b:57:07:88:be:
ba:93:80:77:98:44:85:f5:00:61:0f:a0:97:39:dc:ba:ad:02:
69:05:7a:02:a1:54:b3:5d:b8:16:85:67:26:f2:02:9b:09:de:
0b:e6:6a:62:04:92:6d:e0:0e:df:51:f7:07:a8:69:fe:54:22:
16:d9:40:7b:64:a3:da:36:15:48:91:7d:5d:53:c1:06:e2:cf:
fa:5c:ff:f2:f1:8d:86:c7:05:e4:3f:93:a2:4e:e6:55:13:e3:
c5:00:ce:79:ae:ac:9c:b4:84:c7:25:ae:3d:6b:ab:f2:77:b0:
4b:aa:68:3c:b6:ec:6b:54:7d:48:51:50:af:29:ba:36:c0:2c:
29:35:e9:44:61:ae:1a:e7:b0:4f:30:1b:b5:bf:22:f6:05:0d:
fe:42:84:d2:14:de:da:d9:25:24:dd:28:a3:44:cc:bd:56:79:
ab:5e:38:83:ed:99:63:a6:ec:61:02:27:a9:7d:09:8b:48:0d:
6e:bb:12:ac:6e:a0:1d:70:59:63:cb:d8:d4:2f:3f:4f:23:f5:
f1:95:41:fa:29:8d:c8:98:0f:ac:aa:e6:40:11:95:e1:37:89:
9b:ac:54:4f
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzgzNzFBRjExMC8GA1UEBRMoN0I5NjVCNjRDM0U3MjRCOTNGQzAwQjE4NkUxNUUz
NUNFRDUzNURDNzAeFw0xOTA5MjYxMjM4MDJaFw0yNDA5MjYxMjM4MDJaMBgxFjAU
BgNVBAMTDTVkOGNiMTJlLTM4OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDhYT39n3sPWNYjC2jWxjFsvdQXP7fBYNQ7vIAf/AY8hyAi/vC09nipehsY
0PZE5jv587OJQMqpmbRKfdT8aZt6SGppP3HviZdg+G5Bb0EM3EwXxWgo5KwhQQHz
ffTkrTduWmEGuJ9I1z++gpicWcqsbRme35OHboOWl56x1p5VQ6yIqNU3Uq0td2G0
F/12Mx4Sly2a0qRuX1Mr3tPD6A1zjtu4Y/FxwYrNZcY7qqo16yNvsNZS86jBZs3u
12T64whPlBeDJmKunFo5wrLI+RiyueuiPhzUWfnP5HbJ6m2g/0f8h1rnF5NgnTnb
ZljqNnXuLkA5yuwyuU8lmIFYwx6fAgMBAAGjggJuMIICajAdBgNVHQ4EFgQUwecK
FH2sQe2u2dZgk8HikwXCb9IwHwYDVR0jBBgwFoAUe5ZbZMPnJLk/wAsYbhXjXO1T
XccwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM4MzcxL0VDMEFFODc0N0FGQTExRTk4OEEzQzMzQ0Y4QUVBMjI4L2U1WmJa
TVBuSkxrX3dBc1liaFhqWE8xVFhjYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2U1WmJaTVBuSkxrX3dBc1liaFhqWE8xVFhjYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM4MzcxL0VDMEFFODc0N0FGQTExRTk4OEEzQzMzQ0Y4
QUVBMjI4LzdEMjA4OThBRTA1QTExRTlBMkQxRkE2NkY4QUVBMjI4LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAppEpDANBgkqhkiG9w0BAQsFAAOCAQEA
xToRFdscyccTTkT6oDvbzuQ19wSiH5yIs3Yikh2ojjtXB4i+upOAd5hEhfUAYQ+g
lzncuq0CaQV6AqFUs124FoVnJvICmwneC+ZqYgSSbeAO31H3B6hp/lQiFtlAe2Sj
2jYVSJF9XVPBBuLP+lz/8vGNhscF5D+Tok7mVRPjxQDOea6snLSExyWuPWur8new
S6poPLbsa1R9SFFQrym6NsAsKTXpRGGuGuewTzAbtb8i9gUN/kKE0hTe2tklJN0o
o0TMvVZ5q144g+2ZY6bsYQInqX0Ji0gNbrsSrG6gHXBZY8vY1C8/TyP18ZVB+imN
yJgPrKrmQBGV4TeJm6xUTw==
-----END CERTIFICATE-----
Generated at Fri Sep 27 04:44:26 2024 by rpki-client on console-ams.rpki-client.org