Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/342C27A2088711EF88F42265017001B1.roa
File: 342C27A2088711EF88F42265017001B1.roa (raw, json)
Hash identifier: uj2UtcK3LtCvFiwbTlKCP1gKpGp+NA3rs6Fh/KXQq5k=
Subject key identifier: E3:47:3F:22:2C:81:92:3C:BE:01:E2:63:9A:B3:1E:74:15:8D:A6:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B3D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/342C27A2088711EF88F42265017001B1.roa
Signing time: Thu 02 May 2024 13:23:46 +0000
ROA not before: Thu 02 May 2024 13:23:43 +0000
ROA not after: Sun 12 May 2024 13:23:43 +0000
asID: 5065
IP address blocks: 154.94.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46036 (0xb3d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 13:23:43 2024 GMT
Not After : May 12 13:23:43 2024 GMT
Subject: CN=663393e2-3ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:d2:ef:01:f9:ae:e7:c1:06:88:f7:25:4e:
e5:a4:1e:6d:57:81:b7:ea:ee:23:6d:fa:31:ad:9a:
2d:e0:9a:47:0c:18:5f:b7:f3:ae:22:69:19:ab:9c:
e2:f6:2a:c4:88:2a:59:ae:e0:75:62:14:ce:a6:42:
40:b3:6f:77:19:80:19:dc:02:ec:4b:ee:c7:7f:e1:
83:74:7e:2a:b1:40:6a:56:58:34:0c:7f:4c:cc:cc:
72:76:3f:81:db:2f:b8:c5:2a:04:b8:f3:f3:40:f0:
44:7e:c7:28:fe:a6:f8:46:f2:b1:ae:be:78:03:f5:
df:81:c5:98:80:72:a0:6d:4a:1f:59:08:ee:79:36:
ae:54:73:07:9e:50:01:99:c2:de:0d:dc:3f:b2:a7:
71:33:95:6e:e8:25:74:9e:ed:23:bd:50:5e:58:fb:
3f:37:82:de:a7:c3:dd:b9:56:d2:08:8a:5e:92:9a:
c3:70:02:6a:b7:70:7c:08:e6:73:5e:12:bb:85:58:
6f:cd:5b:ed:9f:3a:90:71:17:32:1a:7f:27:0a:2d:
40:13:3e:98:d5:f4:40:07:0a:0b:aa:b4:b2:69:f8:
14:ff:31:51:86:80:b6:5a:5b:4c:f9:e7:60:46:c3:
9a:19:d0:36:88:be:51:c9:21:c3:db:43:f9:2c:56:
42:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:47:3F:22:2C:81:92:3C:BE:01:E2:63:9A:B3:1E:74:15:8D:A6:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/342C27A2088711EF88F42265017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.48.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c3:0c:0b:6d:50:f4:ec:a6:ce:1f:89:9c:4b:6b:c1:9c:43:
c7:cc:78:dd:da:01:36:02:d5:a1:e5:d1:e9:c3:4c:34:49:70:
1c:29:37:b3:e7:96:02:c1:9a:0e:53:ad:80:a7:5b:24:af:b4:
93:19:91:d7:16:f8:59:57:bf:71:3f:d3:dc:66:f9:b3:de:34:
37:11:af:a3:30:a6:61:4f:84:5e:1e:a9:4f:b9:68:70:0e:ab:
1c:ff:a9:a7:16:55:15:f2:a6:4a:96:5f:d6:69:db:2a:ba:8e:
14:dd:ab:ed:cf:1a:d0:62:cb:21:a4:f9:61:d1:75:04:94:e0:
38:79:35:9d:f7:54:11:a7:d7:1f:3b:54:a3:0a:55:b6:5a:4e:
b5:d2:61:a6:46:72:e1:bd:b9:c6:56:4c:96:8b:7a:0c:7b:26:
12:3b:9a:7e:19:90:57:f0:0f:e5:ca:19:0c:3d:22:67:c2:2b:
82:ba:27:88:c9:51:e8:ee:65:35:fd:cd:fe:12:9e:b6:90:51:
40:c2:a1:d4:6d:3d:4e:92:f4:e4:ff:9e:e0:a1:b3:ef:06:34:
a4:71:76:c7:64:a7:2f:48:4c:61:bd:93:5e:fa:b4:37:d7:31:
11:86:a9:66:01:d7:a5:f7:42:43:24:76:6e:1b:69:69:67:d2:
6b:95:7c:4d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALPUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTAyMTMyMzQzWhcNMjQwNTEyMTMyMzQzWjAYMRYw
FAYDVQQDEw02NjMzOTNlMi0zY2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxeDS7wH5rufBBoj3JU7lpB5tV4G36u4jbfoxrZot4JpHDBhft/OuImkZ
q5zi9irEiCpZruB1YhTOpkJAs293GYAZ3ALsS+7Hf+GDdH4qsUBqVlg0DH9MzMxy
dj+B2y+4xSoEuPPzQPBEfsco/qb4RvKxrr54A/XfgcWYgHKgbUofWQjueTauVHMH
nlABmcLeDdw/sqdxM5Vu6CV0nu0jvVBeWPs/N4Lep8PduVbSCIpekprDcAJqt3B8
COZzXhK7hVhvzVvtnzqQcRcyGn8nCi1AEz6Y1fRABwoLqrSyafgU/zFRhoC2WltM
+edgRsOaGdA2iL5RySHD20P5LFZCUQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFONH
PyIsgZI8vgHiY5qzHnQVjabYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNDJDMjdBMjA4ODcxMUVGODhGNDIyNjUwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml4wMA0GCSqGSIb3DQEB
CwUAA4IBAQAwwwwLbVD07KbOH4mcS2vBnEPHzHjd2gE2AtWh5dHpw0w0SXAcKTez
55YCwZoOU62Ap1skr7STGZHXFvhZV79xP9PcZvmz3jQ3Ea+jMKZhT4ReHqlPuWhw
Dqsc/6mnFlUV8qZKll/Wadsquo4U3avtzxrQYsshpPlh0XUElOA4eTWd91QRp9cf
O1SjClW2Wk610mGmRnLhvbnGVkyWi3oMeyYSO5p+GZBX8A/lyhkMPSJnwiuCuieI
yVHo7mU1/c3+Ep62kFFAwqHUbT1OkvTk/57gobPvBjSkcXbHZKcvSExhvZNe+rQ3
1zERhqlmAdel90JDJHZuG2lpZ9JrlXxN
-----END CERTIFICATE-----
Generated at Mon May 13 02:12:05 2024 by rpki-client on console-fra.rpki-client.org