Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AAAA5F00B6F11EF917AD212017001B1.roa
File: 3AAAA5F00B6F11EF917AD212017001B1.roa (raw, json)
Hash identifier: RPj9z4l2811mDwOSverL0Z/+ZxrhSQPnsaiQPgK8H0s=
Subject key identifier: 07:92:6B:BD:56:B1:99:2E:BB:58:34:C9:A7:92:25:41:A9:AF:76:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B514
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AAAA5F00B6F11EF917AD212017001B1.roa
Signing time: Mon 06 May 2024 06:09:43 +0000
ROA not before: Mon 06 May 2024 06:09:39 +0000
ROA not after: Thu 16 May 2024 06:09:39 +0000
asID: 139646
IP address blocks: 154.208.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46356 (0xb514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 06:09:39 2024 GMT
Not After : May 16 06:09:39 2024 GMT
Subject: CN=66387426-51ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:61:4f:71:dc:a9:17:8c:a1:8c:92:15:c1:07:
64:5c:64:34:bb:9f:e9:73:38:de:31:5a:82:bc:48:
17:f4:97:b1:4a:2f:7d:03:3c:18:90:f4:47:7d:09:
9a:76:5d:c2:4e:2f:4b:99:11:29:d6:26:81:a9:42:
bd:6e:29:21:36:6d:e2:20:4d:92:be:2f:5a:b2:e7:
f2:67:28:93:ff:43:ec:4f:02:3d:27:e9:10:45:2b:
27:69:93:dd:7d:8e:62:02:7e:9e:28:97:27:ce:fe:
96:b2:57:07:e8:49:85:75:37:63:3e:85:5a:d7:96:
14:61:d4:c3:ee:c2:13:15:d2:f7:4e:61:39:3a:47:
3b:5a:06:a8:be:00:c1:15:c7:3b:72:12:ba:9d:34:
d0:ad:09:58:61:d3:f9:0c:50:c3:79:c0:b4:68:9a:
13:0a:29:0e:f8:d7:e5:9a:19:04:b3:47:18:94:86:
34:81:c8:47:af:83:1b:8e:b5:88:56:d1:03:74:91:
8f:c8:ad:43:aa:75:5f:a6:dd:e3:dd:7d:2a:f0:70:
e2:3a:ad:5d:03:4e:5f:b5:07:70:2d:d8:f6:7c:82:
aa:52:ae:12:74:a9:6c:56:ab:0a:03:8a:93:90:e7:
cd:0a:85:09:d6:7f:81:ce:1d:1d:47:d8:72:2b:47:
a5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:92:6B:BD:56:B1:99:2E:BB:58:34:C9:A7:92:25:41:A9:AF:76:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AAAA5F00B6F11EF917AD212017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.16.0/20
Signature Algorithm: sha256WithRSAEncryption
52:00:c1:52:44:7b:13:a8:7f:8e:f9:18:fd:08:a9:fe:4d:4a:
86:3b:8b:b1:10:e7:ab:06:bc:55:71:05:59:6d:46:de:48:bc:
f5:0f:8d:d8:56:41:3b:db:fe:43:0a:7d:87:25:92:f2:35:6c:
b8:d4:20:11:c2:2d:9c:72:92:42:df:de:b5:01:f6:72:a1:83:
d3:ee:cc:ea:85:5c:96:ea:86:5e:6d:16:df:73:00:cb:d6:fd:
0a:61:77:a7:6a:72:24:2c:34:21:9b:b3:e4:2c:2e:2b:cd:29:
f3:db:a0:05:a0:02:0a:54:f4:2f:b9:f9:a6:9a:2f:45:41:50:
33:64:6c:4c:ac:30:1d:9d:75:b3:a4:d8:cf:6f:09:58:f7:5e:
68:81:00:95:7f:d0:37:f8:9d:b8:44:4a:75:a5:a1:cc:a3:23:
5b:37:cf:7f:ee:24:88:c0:9c:d3:59:02:12:82:12:ef:bc:f5:
35:c0:0d:bb:27:51:ad:c2:e0:fa:75:e4:35:bb:83:e9:8f:69:
c7:dd:bd:6c:e4:7d:02:0b:5b:27:8e:9b:e8:88:21:07:22:ba:
46:ec:5b:ae:19:04:78:4f:d0:fb:0a:40:fb:13:89:97:51:40:
8a:b2:3f:4b:26:8c:57:38:79:e8:dd:16:1e:90:2d:55:34:0e:
1d:67:b7:42
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALUUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA2MDYwOTM5WhcNMjQwNTE2MDYwOTM5WjAYMRYw
FAYDVQQDEw02NjM4NzQyNi01MWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA62FPcdypF4yhjJIVwQdkXGQ0u5/pczjeMVqCvEgX9JexSi99AzwYkPRH
fQmadl3CTi9LmREp1iaBqUK9bikhNm3iIE2Svi9asufyZyiT/0PsTwI9J+kQRSsn
aZPdfY5iAn6eKJcnzv6WslcH6EmFdTdjPoVa15YUYdTD7sITFdL3TmE5Okc7Wgao
vgDBFcc7chK6nTTQrQlYYdP5DFDDecC0aJoTCikO+NflmhkEs0cYlIY0gchHr4Mb
jrWIVtEDdJGPyK1DqnVfpt3j3X0q8HDiOq1dA05ftQdwLdj2fIKqUq4SdKlsVqsK
A4qTkOfNCoUJ1n+Bzh0dR9hyK0elGwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAeS
a71WsZkuu1g0yaeSJUGpr3Z5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQUFBQTVGMDBCNkYxMUVGOTE3QUQyMTIwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmtAQMA0GCSqGSIb3DQEB
CwUAA4IBAQBSAMFSRHsTqH+O+Rj9CKn+TUqGO4uxEOerBrxVcQVZbUbeSLz1D43Y
VkE72/5DCn2HJZLyNWy41CARwi2ccpJC3961AfZyoYPT7szqhVyW6oZebRbfcwDL
1v0KYXenanIkLDQhm7PkLC4rzSnz26AFoAIKVPQvufmmmi9FQVAzZGxMrDAdnXWz
pNjPbwlY915ogQCVf9A3+J24REp1paHMoyNbN89/7iSIwJzTWQISghLvvPU1wA27
J1GtwuD6deQ1u4Ppj2nH3b1s5H0CC1snjpvoiCEHIrpG7FuuGQR4T9D7CkD7E4mX
UUCKsj9LJoxXOHno3RYekC1VNA4dZ7dC
-----END CERTIFICATE-----
Generated at Thu May 16 07:46:20 2024 by rpki-client on console-ams.rpki-client.org