Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/444AA70E088B11EF9C56F207017001B1.roa
File: 444AA70E088B11EF9C56F207017001B1.roa (raw, json)
Hash identifier: Wk32unJHPpjy2+JHeftkmASLKxOk/9HLVkjwerfDRvY=
Subject key identifier: AA:00:73:4A:44:A9:70:D4:34:0C:24:07:4B:01:D7:D9:AD:47:27:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B3FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/444AA70E088B11EF9C56F207017001B1.roa
Signing time: Thu 02 May 2024 13:52:51 +0000
ROA not before: Thu 02 May 2024 13:52:48 +0000
ROA not after: Sun 12 May 2024 13:52:48 +0000
asID: 5065
IP address blocks: 154.94.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46078 (0xb3fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 13:52:48 2024 GMT
Not After : May 12 13:52:48 2024 GMT
Subject: CN=66339ab3-ea17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:70:fd:69:ac:1a:8f:65:99:f0:59:46:9f:d3:
55:51:13:24:b1:92:0f:f6:cc:70:ed:bf:1d:0d:a7:
fc:66:3d:f2:68:79:44:5c:75:f8:5f:99:fe:a1:0a:
05:4e:fa:f5:c9:03:94:32:6f:4a:79:b4:2c:9a:a3:
25:49:bc:64:e7:69:ea:2b:88:46:5f:87:7b:a1:18:
03:25:c1:8f:08:06:4a:30:b6:b0:0e:06:9a:73:01:
f1:6f:4b:0e:c5:70:35:37:c8:11:51:18:17:79:67:
32:b9:e0:95:7c:b1:49:f5:76:4c:48:eb:2d:c0:03:
da:4d:5d:b6:3d:9b:bf:a7:eb:c1:0e:65:2e:f0:49:
f4:61:0b:de:f7:f0:24:19:af:e4:09:05:eb:4d:d1:
f7:12:57:03:57:36:88:8d:99:f5:3b:7d:83:e3:e8:
0c:7d:44:1e:e6:74:d8:fa:5a:d4:fc:b2:f9:41:fd:
fa:d6:6f:01:de:ba:eb:51:7b:be:3c:a7:7d:e9:ce:
45:38:b2:8f:2a:53:02:67:d9:10:6b:bf:df:9c:94:
6c:72:83:33:18:71:2c:7e:87:45:83:bc:74:d7:b4:
ea:24:f0:f8:02:06:37:9c:d8:75:69:ef:a6:11:5b:
2c:91:9d:ef:c7:f0:a9:9c:0c:00:01:fb:0f:86:47:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:00:73:4A:44:A9:70:D4:34:0C:24:07:4B:01:D7:D9:AD:47:27:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/444AA70E088B11EF9C56F207017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:98:30:4f:cb:36:a7:14:6f:0c:67:40:8c:ab:76:6e:44:1d:
75:f6:b1:83:0e:fe:75:2d:f0:2d:db:c6:f7:12:3f:8c:af:c3:
65:e9:63:e3:0f:f4:63:8d:26:98:db:62:ad:de:c9:ff:df:1e:
40:31:aa:79:a2:b7:3e:ad:d8:f0:5f:2a:d9:10:96:72:8a:1d:
1b:f5:a2:f9:02:91:61:7e:32:1a:ca:ed:87:e5:d5:e8:17:63:
13:c1:f2:66:0d:87:3e:7e:98:6b:53:5e:cb:44:2f:d7:ae:69:
d1:ba:94:ca:fa:7d:59:6f:f1:1a:0d:d9:57:3c:db:5c:0f:24:
6d:20:1b:b2:7f:a3:15:22:e6:0a:ee:3a:74:70:60:81:d1:3b:
59:44:4f:af:ed:99:17:b6:c2:89:e4:22:31:eb:f0:85:cd:3f:
31:6f:f2:64:90:fd:c9:d5:90:a5:d1:74:77:93:0e:3c:36:c3:
df:e1:3b:48:c1:6f:bd:0b:54:60:36:23:ed:a6:4a:c5:14:89:
74:c3:c3:bc:91:8e:3a:7d:5c:10:b0:8d:ae:87:bf:3d:09:30:
a4:ef:c7:74:d9:b1:f9:a6:74:6d:e9:46:ba:86:7c:85:c9:42:
bc:a8:e8:32:09:9d:97:4e:24:c6:0d:5d:72:17:06:aa:6f:ae:
23:7b:1a:30
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALP+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTAyMTM1MjQ4WhcNMjQwNTEyMTM1MjQ4WjAYMRYw
FAYDVQQDEw02NjMzOWFiMy1lYTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1nD9aawaj2WZ8FlGn9NVURMksZIP9sxw7b8dDaf8Zj3yaHlEXHX4X5n+
oQoFTvr1yQOUMm9KebQsmqMlSbxk52nqK4hGX4d7oRgDJcGPCAZKMLawDgaacwHx
b0sOxXA1N8gRURgXeWcyueCVfLFJ9XZMSOstwAPaTV22PZu/p+vBDmUu8En0YQve
9/AkGa/kCQXrTdH3ElcDVzaIjZn1O32D4+gMfUQe5nTY+lrU/LL5Qf361m8B3rrr
UXu+PKd96c5FOLKPKlMCZ9kQa7/fnJRscoMzGHEsfodFg7x017TqJPD4AgY3nNh1
ae+mEVsskZ3vx/CpnAwAAfsPhkfJtQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKoA
c0pEqXDUNAwkB0sB19mtRycRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NDRBQTcwRTA4OEIxMUVGOUM1NkYyMDcwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml4yMA0GCSqGSIb3DQEB
CwUAA4IBAQCPmDBPyzanFG8MZ0CMq3ZuRB119rGDDv51LfAt28b3Ej+Mr8Nl6WPj
D/RjjSaY22Kt3sn/3x5AMap5orc+rdjwXyrZEJZyih0b9aL5ApFhfjIayu2H5dXo
F2MTwfJmDYc+fphrU17LRC/XrmnRupTK+n1Zb/EaDdlXPNtcDyRtIBuyf6MVIuYK
7jp0cGCB0TtZRE+v7ZkXtsKJ5CIx6/CFzT8xb/JkkP3J1ZCl0XR3kw48NsPf4TtI
wW+9C1RgNiPtpkrFFIl0w8O8kY46fVwQsI2uh789CTCk78d02bH5pnRt6Ua6hnyF
yUK8qOgyCZ2XTiTGDV1yFwaqb64jexow
-----END CERTIFICATE-----
Generated at Mon May 13 02:12:05 2024 by rpki-client on console-fra.rpki-client.org