Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DB7168A0B4611EFBC1BC434017001B1.roa
File: 3DB7168A0B4611EFBC1BC434017001B1.roa (raw, json)
Hash identifier: 6+WrnqRHJKLVoc817XcwFNoK67TlS2nkZLo7oWXbQJs=
Subject key identifier: F2:51:83:21:04:C0:86:0A:40:AF:87:64:AB:2A:BF:C4:6B:AF:5D:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B442
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DB7168A0B4611EFBC1BC434017001B1.roa
Signing time: Mon 06 May 2024 01:16:18 +0000
ROA not before: Mon 06 May 2024 01:16:15 +0000
ROA not after: Tue 14 May 2024 01:16:15 +0000
asID: 44559
IP address blocks: 154.211.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46146 (0xb442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 01:16:15 2024 GMT
Not After : May 14 01:16:15 2024 GMT
Subject: CN=66382f62-f067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:70:b5:e7:2f:3f:2a:35:42:97:24:38:fb:
e1:38:28:f4:31:d4:13:3b:89:a9:5f:4c:1f:3a:90:
fe:8a:c1:01:b5:7a:fd:97:e6:b6:31:05:da:ba:79:
a7:85:34:6b:37:29:49:9b:62:f6:87:ec:67:7d:bf:
f0:16:4b:ac:7a:c9:d9:d2:38:a1:07:29:b1:e9:42:
ce:4f:85:9b:61:90:88:e1:75:9a:2e:86:4f:1b:9f:
f6:17:0b:e3:ed:e8:69:fa:94:c7:cb:71:52:18:f6:
a1:5d:74:d7:3a:1f:80:c6:78:98:e2:38:34:f4:72:
3a:79:8d:02:2f:11:17:01:10:44:bc:eb:9c:66:88:
d5:d7:eb:26:ae:64:7c:de:c5:be:49:98:58:bc:8a:
36:55:e5:cc:5e:e8:f7:72:f5:2a:5f:92:22:2a:83:
49:87:1e:8c:fd:2d:10:b9:8c:59:54:8d:3e:0d:fc:
d6:44:bf:71:34:d8:e4:fb:e6:cc:3d:07:fa:a9:1e:
da:af:52:9d:65:ed:c1:77:77:26:d4:6e:cb:f4:2c:
7e:35:40:dc:6c:70:c8:9b:8f:a5:45:67:57:1d:bd:
29:f7:e9:e3:ae:d2:17:de:36:0c:11:f9:45:e7:e7:
e2:f6:2f:3d:ff:6c:eb:46:b0:34:59:64:cd:39:43:
f5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:51:83:21:04:C0:86:0A:40:AF:87:64:AB:2A:BF:C4:6B:AF:5D:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DB7168A0B4611EFBC1BC434017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.32.0/19
Signature Algorithm: sha256WithRSAEncryption
66:6b:cb:cf:29:52:b8:ba:23:06:c6:21:2a:06:25:84:d4:06:
c1:56:8e:ca:a1:91:2d:70:72:4b:8f:cf:85:9c:4a:a5:48:d3:
46:7b:ea:c0:9f:3b:9a:38:99:4d:c0:5a:36:d1:4d:84:bf:33:
fc:c7:72:f8:75:67:60:62:cf:5b:dc:91:b0:df:f2:6d:ac:53:
fb:c0:74:2f:88:2b:39:33:aa:da:c5:84:1d:85:da:29:53:1a:
bc:db:83:bf:3b:33:e5:85:e9:4e:c3:b7:33:fe:67:83:4a:db:
12:5b:8a:3f:1b:46:75:4b:3e:40:7a:8b:fb:ee:97:28:99:9f:
bc:f3:90:f8:01:ba:26:ab:4b:14:40:fc:94:b6:f8:24:2a:e8:
c9:9a:4a:fc:3a:3d:63:4a:e5:a1:cc:f0:83:d0:46:4a:38:57:
d9:f8:e0:9f:5f:05:44:d5:23:69:04:d9:4f:88:25:65:1d:af:
58:06:54:65:61:9a:39:4a:cf:dc:13:12:2f:f6:25:39:bc:90:
86:c4:7d:cf:3a:8f:6c:0b:67:72:90:64:d8:2f:d8:e0:38:c9:
54:c4:c8:4f:2d:04:e3:89:eb:61:5b:94:9e:4d:c5:bf:62:6f:
b4:0c:53:1c:83:8c:76:15:a9:59:45:4b:fd:bb:54:cd:96:d6:
9d:d9:b6:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALRCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA2MDExNjE1WhcNMjQwNTE0MDExNjE1WjAYMRYw
FAYDVQQDEw02NjM4MmY2Mi1mMDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwpdwtecvPyo1QpckOPvhOCj0MdQTO4mpX0wfOpD+isEBtXr9l+a2MQXa
unmnhTRrNylJm2L2h+xnfb/wFkusesnZ0jihBymx6ULOT4WbYZCI4XWaLoZPG5/2
Fwvj7ehp+pTHy3FSGPahXXTXOh+AxniY4jg09HI6eY0CLxEXARBEvOucZojV1+sm
rmR83sW+SZhYvIo2VeXMXuj3cvUqX5IiKoNJhx6M/S0QuYxZVI0+DfzWRL9xNNjk
++bMPQf6qR7ar1KdZe3Bd3cm1G7L9Cx+NUDcbHDIm4+lRWdXHb0p9+njrtIX3jYM
EflF5+fi9i89/2zrRrA0WWTNOUP1rwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPJR
gyEEwIYKQK+HZKsqv8Rrr12aMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zREI3MTY4QTBCNDYxMUVGQkMxQkM0MzQwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmtMgMA0GCSqGSIb3DQEB
CwUAA4IBAQBma8vPKVK4uiMGxiEqBiWE1AbBVo7KoZEtcHJLj8+FnEqlSNNGe+rA
nzuaOJlNwFo20U2EvzP8x3L4dWdgYs9b3JGw3/JtrFP7wHQviCs5M6raxYQdhdop
Uxq824O/OzPlhelOw7cz/meDStsSW4o/G0Z1Sz5Aeov77pcomZ+885D4Abomq0sU
QPyUtvgkKujJmkr8Oj1jSuWhzPCD0EZKOFfZ+OCfXwVE1SNpBNlPiCVlHa9YBlRl
YZo5Ss/cExIv9iU5vJCGxH3POo9sC2dykGTYL9jgOMlUxMhPLQTjiethW5SeTcW/
Ym+0DFMcg4x2FalZRUv9u1TNltad2bax
-----END CERTIFICATE-----
Generated at Tue May 14 03:25:15 2024 by rpki-client on console-ams.rpki-client.org