Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/461362DA294A11EFBDC441177DDC24C2.roa
File: 461362DA294A11EFBDC441177DDC24C2.roa (raw, json)
Hash identifier: JxptDd4fSyqTmXKbbpmkeoPTB9m6KhT5jYRSpNXY1Y8=
Subject key identifier: 1A:7A:59:03:34:E8:43:03:1B:A8:47:98:78:39:8F:41:BB:D1:13:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C1FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/461362DA294A11EFBDC441177DDC24C2.roa
Signing time: Thu 13 Jun 2024 06:00:45 +0000
ROA not before: Thu 13 Jun 2024 06:00:42 +0000
ROA not after: Fri 21 Jun 2024 06:00:42 +0000
asID: 44559
IP address blocks: 154.208.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49662 (0xc1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 06:00:42 2024 GMT
Not After : Jun 21 06:00:42 2024 GMT
Subject: CN=666a8b0d-1178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:f3:dc:67:ab:cb:0c:99:5a:ae:58:20:e4:
f7:3e:6b:b5:91:83:02:9e:91:15:ee:0f:e2:b1:e1:
53:02:a9:9e:5c:f3:ae:1b:d8:0f:7d:14:e6:74:1a:
f1:cc:89:09:e8:b5:ab:9a:b3:42:3e:04:d0:61:83:
ea:3b:4e:55:f5:33:dd:91:ed:3d:6e:13:01:74:15:
76:41:4b:e9:16:36:e7:20:18:75:46:aa:02:89:81:
03:40:0d:59:54:22:92:0e:6f:27:92:e8:c5:60:70:
a1:c4:91:50:0b:b8:be:8b:05:2d:9a:17:a0:7e:dd:
4e:1c:8d:63:df:f6:12:dd:ca:eb:79:d0:c7:db:b4:
61:0e:b8:41:34:4f:de:1a:32:07:a1:96:0a:3f:c9:
51:56:eb:67:35:f2:63:ea:06:86:67:ea:20:53:b5:
8f:5f:5e:19:0c:f7:fd:80:60:b7:6f:df:f8:72:1d:
4c:59:80:35:71:08:c3:fa:b1:19:bf:ea:e8:22:a5:
c3:ff:86:8e:c5:9a:8d:ff:14:f8:2c:c7:fc:75:cf:
87:29:cb:76:42:b4:2f:eb:06:3b:56:9c:4f:c1:f7:
21:04:b5:50:e2:6e:16:b6:e8:0e:8a:97:45:68:38:
2a:18:10:a3:a1:58:9c:9c:24:c3:00:f7:c1:0c:06:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7A:59:03:34:E8:43:03:1B:A8:47:98:78:39:8F:41:BB:D1:13:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/461362DA294A11EFBDC441177DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.176.0/20
Signature Algorithm: sha256WithRSAEncryption
d7:22:31:a3:ce:a9:95:45:da:93:56:46:e3:e2:7c:a7:4c:f2:
35:64:6b:b1:3f:06:2f:de:9b:fa:f5:5e:b4:9a:ff:00:69:23:
e4:20:c1:fe:75:da:63:a0:d4:77:f6:9f:6f:2d:c9:75:88:04:
c1:84:01:cf:f7:37:6a:a1:f0:cf:3d:7e:40:e2:82:2d:94:a4:
76:68:11:c4:c7:52:d2:24:0f:44:bf:b4:66:a2:03:5c:1f:aa:
9d:dc:75:dc:25:4a:20:c2:30:1d:32:6f:68:89:df:96:ce:54:
28:22:17:c1:bb:54:bd:b4:db:28:73:49:db:9d:18:00:a6:44:
dd:cc:a8:6b:91:05:b5:ab:5e:86:4b:49:89:ad:ae:64:d1:3d:
f9:d2:5d:0f:f7:5d:a2:ba:4f:e8:7b:b0:ba:de:ea:ea:11:04:
6d:5f:52:4c:6a:b3:b4:b9:88:99:44:e2:83:6e:0e:31:9f:33:
cb:a4:7c:5f:c3:c6:63:fa:ef:ce:d0:f5:cb:be:3a:4e:32:83:
70:86:e7:37:8a:5f:9e:ca:1d:7e:7a:a7:c6:cb:a0:87:24:94:
d4:df:4c:38:5d:b5:b6:45:1b:3b:d9:db:c6:ec:b3:9b:76:04:
36:e8:23:ec:cb:3d:f2:1c:b1:72:ce:e0:ac:08:57:6f:e3:b3:
a1:21:23:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAMH+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNjEzMDYwMDQyWhcNMjQwNjIxMDYwMDQyWjAYMRYw
FAYDVQQDEw02NjZhOGIwZC0xMTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAugHz3GerywyZWq5YIOT3Pmu1kYMCnpEV7g/iseFTAqmeXPOuG9gPfRTm
dBrxzIkJ6LWrmrNCPgTQYYPqO05V9TPdke09bhMBdBV2QUvpFjbnIBh1RqoCiYED
QA1ZVCKSDm8nkujFYHChxJFQC7i+iwUtmhegft1OHI1j3/YS3crredDH27RhDrhB
NE/eGjIHoZYKP8lRVutnNfJj6gaGZ+ogU7WPX14ZDPf9gGC3b9/4ch1MWYA1cQjD
+rEZv+roIqXD/4aOxZqN/xT4LMf8dc+HKct2QrQv6wY7VpxPwfchBLVQ4m4WtugO
ipdFaDgqGBCjoVicnCTDAPfBDAYI+QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBp6
WQM06EMDG6hHmHg5j0G70RM3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NjEzNjJEQTI5NEExMUVGQkRDNDQxMTc3RERDMjRDMi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmtCwMA0GCSqGSIb3DQEB
CwUAA4IBAQDXIjGjzqmVRdqTVkbj4nynTPI1ZGuxPwYv3pv69V60mv8AaSPkIMH+
ddpjoNR39p9vLcl1iATBhAHP9zdqofDPPX5A4oItlKR2aBHEx1LSJA9Ev7RmogNc
H6qd3HXcJUogwjAdMm9oid+WzlQoIhfBu1S9tNsoc0nbnRgApkTdzKhrkQW1q16G
S0mJra5k0T350l0P912iuk/oe7C63urqEQRtX1JMarO0uYiZROKDbg4xnzPLpHxf
w8Zj+u/O0PXLvjpOMoNwhuc3il+eyh1+eqfGy6CHJJTU30w4XbW2RRs72dvG7LOb
dgQ26CPsyz3yHLFyzuCsCFdv47OhISNB
-----END CERTIFICATE-----
Generated at Sat Jun 22 03:57:30 2024 by rpki-client on console-ams.rpki-client.org