Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/223E32F40DC511EFB567691D017001B1.roa
File: 223E32F40DC511EFB567691D017001B1.roa (raw, json)
Hash identifier: b7xgQHqqLC4TvLxpu7YvYBowbixZUNCzRThVnaoCDEM=
Subject key identifier: 83:4C:27:B6:2E:D7:35:87:09:17:75:0E:99:F3:BA:3B:F0:E6:1E:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B5E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/223E32F40DC511EFB567691D017001B1.roa
Signing time: Thu 09 May 2024 05:29:41 +0000
ROA not before: Thu 09 May 2024 05:29:37 +0000
ROA not after: Sun 19 May 2024 05:29:37 +0000
asID: 5065
IP address blocks: 154.94.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46565 (0xb5e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 05:29:37 2024 GMT
Not After : May 19 05:29:37 2024 GMT
Subject: CN=663c5f44-639f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:41:a5:45:00:05:39:99:a9:d7:87:25:5c:92:
f1:ce:21:da:32:d5:ae:33:44:2e:d9:76:11:e4:b8:
c9:11:b9:e2:50:d8:e6:06:64:36:c0:83:78:6f:2e:
a4:6d:ba:24:f9:06:85:12:6f:3f:e5:c9:45:32:8b:
c6:9a:ba:5a:e0:fa:50:2b:df:21:13:b5:c1:a8:c3:
fa:bb:4d:0d:57:10:c2:04:eb:09:fe:70:53:38:83:
ec:51:72:9d:d8:7a:1a:00:53:60:a3:14:df:22:0a:
19:40:bd:73:dc:88:f9:b4:26:34:b4:6e:a2:ab:ca:
b0:cb:99:6c:c4:b3:1e:a6:47:ca:30:bb:ec:f7:c9:
46:ba:92:85:1c:e5:3b:8a:35:a4:1b:39:06:c1:89:
be:25:a5:a4:a8:52:cc:46:a3:c7:05:4d:05:56:89:
b4:db:94:12:62:37:a7:ea:b1:a4:e4:7c:ce:4c:e9:
61:03:6d:a9:2d:d2:bf:48:2d:b3:94:4e:fb:7e:7e:
e8:de:db:0a:c7:9b:74:24:89:17:63:83:4f:a6:08:
3a:42:d3:7a:e0:90:cf:13:c9:a6:4f:73:28:5b:60:
27:b4:fa:be:4e:e5:47:ee:d8:a7:7a:b1:5b:86:34:
21:cc:c0:0d:4e:e9:08:03:92:f7:ea:e4:12:33:a1:
6a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4C:27:B6:2E:D7:35:87:09:17:75:0E:99:F3:BA:3B:F0:E6:1E:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/223E32F40DC511EFB567691D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.46.0/24
Signature Algorithm: sha256WithRSAEncryption
43:20:56:c5:ca:56:78:0b:08:dc:84:89:6b:b8:ef:e5:41:bf:
6c:59:a3:88:1c:e4:8c:71:52:62:a6:68:f7:92:1f:8c:f2:27:
5f:77:ff:9c:12:c6:61:fd:64:63:3b:d4:0a:88:84:62:7d:10:
a6:79:7f:c8:69:2a:76:6f:a2:83:f1:a8:b3:36:b2:1a:ef:10:
87:2f:8d:8b:8f:44:bb:24:af:02:ee:bf:7b:87:2a:ee:9f:d6:
43:a3:23:75:b0:2a:9d:32:f5:af:c2:de:d1:3f:20:d0:31:52:
09:a2:fe:c0:2e:d7:1c:1b:2b:7c:e8:d6:b6:6c:7c:26:e7:74:
69:5e:cf:2d:7b:18:1e:01:7a:35:77:38:dd:99:c3:97:34:ff:
11:d6:85:9b:f1:e6:23:54:8f:18:5f:91:77:ab:ed:f4:55:fa:
c3:90:4b:5b:2e:cc:19:83:29:f1:c3:f9:08:ae:00:37:7c:39:
3f:ff:70:02:f5:4d:fb:3c:e6:41:26:a9:77:b2:b4:8c:76:24:
5c:d7:12:18:24:8a:3c:16:ec:cc:0f:13:6f:6c:46:49:c0:a4:
6c:98:92:7d:62:11:03:e4:d4:32:34:a6:37:99:bf:9c:a6:b7:
07:e8:8f:c3:26:7e:e3:4c:a0:16:20:e7:11:ad:49:44:3a:72:
17:94:f9:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALXlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA5MDUyOTM3WhcNMjQwNTE5MDUyOTM3WjAYMRYw
FAYDVQQDEw02NjNjNWY0NC02MzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxkGlRQAFOZmp14clXJLxziHaMtWuM0Qu2XYR5LjJEbniUNjmBmQ2wIN4
by6kbbok+QaFEm8/5clFMovGmrpa4PpQK98hE7XBqMP6u00NVxDCBOsJ/nBTOIPs
UXKd2HoaAFNgoxTfIgoZQL1z3Ij5tCY0tG6iq8qwy5lsxLMepkfKMLvs98lGupKF
HOU7ijWkGzkGwYm+JaWkqFLMRqPHBU0FVom025QSYjen6rGk5HzOTOlhA22pLdK/
SC2zlE77fn7o3tsKx5t0JIkXY4NPpgg6QtN64JDPE8mmT3MoW2AntPq+TuVH7tin
erFbhjQhzMANTukIA5L36uQSM6Fq6QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFINM
J7Yu1zWHCRd1Dpnzujvw5h6mMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMjNFMzJGNDBEQzUxMUVGQjU2NzY5MUQwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml4uMA0GCSqGSIb3DQEB
CwUAA4IBAQBDIFbFylZ4CwjchIlruO/lQb9sWaOIHOSMcVJipmj3kh+M8idfd/+c
EsZh/WRjO9QKiIRifRCmeX/IaSp2b6KD8aizNrIa7xCHL42Lj0S7JK8C7r97hyru
n9ZDoyN1sCqdMvWvwt7RPyDQMVIJov7ALtccGyt86Na2bHwm53RpXs8texgeAXo1
dzjdmcOXNP8R1oWb8eYjVI8YX5F3q+30VfrDkEtbLswZgynxw/kIrgA3fDk//3AC
9U37POZBJql3srSMdiRc1xIYJIo8FuzMDxNvbEZJwKRsmJJ9YhED5NQyNKY3mb+c
prcH6I/DJn7jTKAWIOcRrUlEOnIXlPmD
-----END CERTIFICATE-----
Generated at Mon May 20 01:57:13 2024 by rpki-client on console-ams.rpki-client.org