Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47A9D06207A711EF80683946017001B1.roa
File: 47A9D06207A711EF80683946017001B1.roa (raw, json)
Hash identifier: u3roqh87mvOrsRN2WYfKVpmZxfFy39oCaVmSfBDnUYg=
Subject key identifier: B2:57:CA:3C:B3:7F:92:A3:2A:D3:7E:A5:82:51:23:18:70:60:BE:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B344
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47A9D06207A711EF80683946017001B1.roa
Signing time: Wed 01 May 2024 10:40:52 +0000
ROA not before: Wed 01 May 2024 10:40:48 +0000
ROA not after: Sat 11 May 2024 10:40:48 +0000
asID: 136950
IP address blocks: 154.213.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45892 (0xb344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 10:40:48 2024 GMT
Not After : May 11 10:40:48 2024 GMT
Subject: CN=66321c33-e640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:96:ee:e1:d7:de:9a:f4:1b:6a:33:0a:cb:
f0:b9:99:e4:b6:f1:e5:ac:1e:fd:6f:e5:37:92:df:
c4:79:ae:10:5c:e1:24:b7:42:9b:10:63:4a:02:08:
fb:7b:46:d2:88:f5:07:d6:86:ce:58:aa:a9:b0:59:
91:16:fa:5e:ec:00:27:9b:fd:44:a8:b0:6b:55:aa:
6c:39:f7:c5:75:ee:b0:f1:5f:2e:c2:f8:f1:e6:7d:
55:29:68:62:86:ac:a3:c5:ed:b8:e4:42:60:30:13:
21:46:75:37:18:6f:6a:1c:e4:09:f4:f4:5e:cd:8d:
69:28:be:61:bc:dc:da:f0:6a:3a:aa:43:64:93:b3:
46:bf:02:99:8c:9e:37:1c:36:fb:c1:19:d7:63:6c:
c5:ee:7d:3b:0c:08:a0:6e:1c:77:ea:0d:6e:cc:66:
52:9b:22:6c:ab:9e:c7:8a:45:f2:6d:03:f4:9a:c6:
9a:f8:48:c1:a5:19:2e:21:63:f9:ca:c9:5f:ca:bd:
76:79:21:01:2f:15:f5:fb:67:2a:3b:8d:f1:28:0f:
bc:e9:a3:9f:98:41:65:15:2b:b0:00:0b:63:52:89:
0f:b2:99:ff:09:61:c1:94:6b:dc:bb:17:a8:86:59:
cf:37:78:51:bd:d0:b2:75:6f:de:e0:a4:53:4a:22:
50:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:57:CA:3C:B3:7F:92:A3:2A:D3:7E:A5:82:51:23:18:70:60:BE:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47A9D06207A711EF80683946017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.17.0/24
Signature Algorithm: sha256WithRSAEncryption
48:2d:ee:9e:03:bb:6c:92:de:98:81:b7:9c:59:33:50:d7:28:
bd:3a:8a:df:1b:14:de:d0:90:fc:fd:52:b4:15:32:83:15:09:
dc:c4:1a:39:ad:14:aa:1d:c5:d1:03:56:f2:60:af:37:bd:ad:
a4:06:82:27:d0:ed:d9:9a:37:98:fb:ec:13:69:72:bf:84:1d:
9d:34:db:87:7c:5d:bd:c0:ac:ea:07:f4:7c:9b:a1:6e:9e:c0:
57:4d:0f:d4:0d:db:d3:65:22:98:a8:15:96:2b:4e:bc:9b:fd:
51:b5:d1:26:2e:31:8e:5e:87:3d:99:3b:fb:e8:dd:49:62:8f:
06:a1:f9:3d:cb:84:19:3e:7c:19:ee:8e:da:4b:d6:7d:fd:88:
80:c1:a0:ed:fc:88:8b:f1:6d:8b:12:ca:8a:22:4b:9c:aa:77:
52:cf:d1:48:44:89:22:f9:f2:2e:e4:df:40:51:f4:e7:29:1a:
dd:44:0e:28:0c:9c:3c:0a:bf:e2:41:31:93:d0:57:f6:27:c2:
5e:e9:6a:1b:d6:e5:64:3e:30:2a:6c:7b:72:30:36:91:30:79:
de:d7:95:9e:cf:78:d3:d4:cc:2e:39:ae:1e:27:1b:19:b9:85:
b0:79:29:ba:88:e2:f1:39:52:16:ca:43:1c:40:86:1d:7a:ff:
25:37:ce:a5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALNEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTAxMTA0MDQ4WhcNMjQwNTExMTA0MDQ4WjAYMRYw
FAYDVQQDEw02NjMyMWMzMy1lNjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtASW7uHX3pr0G2ozCsvwuZnktvHlrB79b+U3kt/Eea4QXOEkt0KbEGNK
Agj7e0bSiPUH1obOWKqpsFmRFvpe7AAnm/1EqLBrVapsOffFde6w8V8uwvjx5n1V
KWhihqyjxe245EJgMBMhRnU3GG9qHOQJ9PRezY1pKL5hvNza8Go6qkNkk7NGvwKZ
jJ43HDb7wRnXY2zF7n07DAigbhx36g1uzGZSmyJsq57HikXybQP0msaa+EjBpRku
IWP5yslfyr12eSEBLxX1+2cqO43xKA+86aOfmEFlFSuwAAtjUokPspn/CWHBlGvc
uxeohlnPN3hRvdCydW/e4KRTSiJQoQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLJX
yjyzf5KjKtN+pYJRIxhwYL6EMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80N0E5RDA2MjA3QTcxMUVGODA2ODM5NDYwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtURMA0GCSqGSIb3DQEB
CwUAA4IBAQBILe6eA7tskt6YgbecWTNQ1yi9OorfGxTe0JD8/VK0FTKDFQncxBo5
rRSqHcXRA1byYK83va2kBoIn0O3ZmjeY++wTaXK/hB2dNNuHfF29wKzqB/R8m6Fu
nsBXTQ/UDdvTZSKYqBWWK068m/1RtdEmLjGOXoc9mTv76N1JYo8Gofk9y4QZPnwZ
7o7aS9Z9/YiAwaDt/IiL8W2LEsqKIkucqndSz9FIRIki+fIu5N9AUfTnKRrdRA4o
DJw8Cr/iQTGT0Ff2J8Je6Wob1uVkPjAqbHtyMDaRMHne15Wez3jT1MwuOa4eJxsZ
uYWweSm6iOLxOVIWykMcQIYdev8lN86l
-----END CERTIFICATE-----
Generated at Sun May 12 01:39:47 2024 by rpki-client on console-fra.rpki-client.org