Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D718C3A03A211EFBCA0F503017001B1.roa
File: 1D718C3A03A211EFBCA0F503017001B1.roa (raw, json)
Hash identifier: hOCHEkfntGsC/9yyIyH7pFwqe3rLdu7WskimaN90iqw=
Subject key identifier: 3A:83:98:36:30:E5:09:C5:55:E9:6B:30:21:92:95:65:0A:24:A7:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B1A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D718C3A03A211EFBCA0F503017001B1.roa
Signing time: Fri 26 Apr 2024 07:53:49 +0000
ROA not before: Fri 26 Apr 2024 07:53:45 +0000
ROA not after: Thu 09 May 2024 07:53:45 +0000
asID: 44559
IP address blocks: 154.94.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45474 (0xb1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 07:53:45 2024 GMT
Not After : May 9 07:53:45 2024 GMT
Subject: CN=662b5d8c-dcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:a1:f9:c6:41:7d:dd:cb:17:15:eb:48:46:
32:5f:5a:6a:21:c9:b7:ec:6a:54:27:e7:7d:51:11:
e6:33:f6:91:36:7d:4d:ca:51:77:f5:0c:9b:53:f9:
5a:97:53:1f:e1:ef:28:ee:b8:bb:d7:b2:a9:e8:70:
d2:0b:e5:86:95:a9:6c:31:39:e9:0a:bd:61:4d:81:
3b:53:1a:27:1f:17:a8:ef:ac:87:02:6e:bb:10:2f:
80:d4:49:bc:c6:67:19:b7:9f:60:7e:7e:48:85:40:
7b:75:64:51:c1:84:76:5c:4f:07:61:96:1d:fb:16:
99:77:77:a1:c4:e7:33:63:49:59:07:d8:7c:fe:15:
89:c1:e9:94:37:e2:09:53:ba:65:0b:35:b5:9a:53:
f5:d6:aa:87:35:ce:89:7d:6f:f8:09:63:44:2a:f9:
28:53:bf:bc:d1:37:6a:6d:46:e4:ad:7f:40:91:31:
44:0a:09:ea:6a:88:f8:43:9b:bc:58:f7:0b:a0:b4:
42:5c:ff:48:fe:21:bb:11:7f:a9:a0:13:70:ef:2a:
e6:f3:84:c9:74:d3:b4:1e:c2:fe:ec:e0:f5:10:a5:
bb:6a:56:c7:75:00:b4:59:3b:12:db:02:d1:b1:af:
93:50:0a:b9:aa:96:a6:0f:29:b0:7a:92:92:65:43:
06:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:83:98:36:30:E5:09:C5:55:E9:6B:30:21:92:95:65:0A:24:A7:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D718C3A03A211EFBCA0F503017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.128.0/17
Signature Algorithm: sha256WithRSAEncryption
a5:9f:23:a5:c2:f7:3f:d3:0c:ae:35:d5:1b:2d:1b:90:86:bb:
a8:b8:d5:b9:0c:80:57:86:69:46:d5:c8:e8:bd:fc:1c:bf:d2:
57:dc:50:8e:1c:0d:93:26:53:d4:54:94:73:c8:f2:42:86:30:
f3:2a:3e:3a:02:5e:0f:36:22:fa:0a:2c:14:db:93:7b:fa:f1:
fd:18:9f:3a:a6:88:20:57:5c:8d:66:74:72:66:46:95:d8:31:
8b:60:7a:2a:f3:90:e6:3e:e2:34:2a:59:aa:b0:35:37:2d:2a:
98:61:a1:7e:5f:53:4d:c1:8f:af:3a:d8:35:6e:d8:20:14:d3:
bb:b7:15:fb:1e:e9:b4:e1:58:9a:d6:7c:50:eb:3c:40:cd:d9:
11:82:a7:b1:4b:bc:58:b1:cb:5c:e9:31:d0:5e:5a:82:da:8c:
78:ae:6e:33:43:77:3f:21:59:50:26:ab:6d:85:f2:10:6f:b0:
59:4b:51:59:0a:4d:e8:c0:a9:f2:2f:c9:84:a3:a0:23:f8:c3:
0a:4c:fa:96:d2:c3:54:77:b9:fe:ed:76:44:71:bb:3d:57:24:
a9:df:68:38:10:9c:4f:cb:43:d2:2a:4d:78:9c:e2:29:78:2d:
53:e3:27:fd:4d:01:ec:b5:59:da:72:d8:90:4d:5f:e8:47:0a:
e6:f1:49:e4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALGiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDI2MDc1MzQ1WhcNMjQwNTA5MDc1MzQ1WjAYMRYw
FAYDVQQDEw02NjJiNWQ4Yy1kY2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqGSh+cZBfd3LFxXrSEYyX1pqIcm37GpUJ+d9URHmM/aRNn1NylF39Qyb
U/lal1Mf4e8o7ri717Kp6HDSC+WGlalsMTnpCr1hTYE7UxonHxeo76yHAm67EC+A
1Em8xmcZt59gfn5IhUB7dWRRwYR2XE8HYZYd+xaZd3ehxOczY0lZB9h8/hWJwemU
N+IJU7plCzW1mlP11qqHNc6JfW/4CWNEKvkoU7+80TdqbUbkrX9AkTFECgnqaoj4
Q5u8WPcLoLRCXP9I/iG7EX+poBNw7yrm84TJdNO0HsL+7OD1EKW7albHdQC0WTsS
2wLRsa+TUAq5qpamDymwepKSZUMGDQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDqD
mDYw5QnFVelrMCGSlWUKJKeYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRDcxOEMzQTAzQTIxMUVGQkNBMEY1MDMwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHml6AMA0GCSqGSIb3DQEB
CwUAA4IBAQClnyOlwvc/0wyuNdUbLRuQhruouNW5DIBXhmlG1cjovfwcv9JX3FCO
HA2TJlPUVJRzyPJChjDzKj46Al4PNiL6CiwU25N7+vH9GJ86poggV1yNZnRyZkaV
2DGLYHoq85DmPuI0KlmqsDU3LSqYYaF+X1NNwY+vOtg1btggFNO7txX7Hum04Via
1nxQ6zxAzdkRgqexS7xYsctc6THQXlqC2ox4rm4zQ3c/IVlQJqtthfIQb7BZS1FZ
Ck3owKnyL8mEo6Aj+MMKTPqW0sNUd7n+7XZEcbs9VySp32g4EJxPy0PSKk14nOIp
eC1T4yf9TQHstVnactiQTV/oRwrm8Unk
-----END CERTIFICATE-----
Generated at Fri May 10 03:48:02 2024 by rpki-client on console-fra.rpki-client.org