Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/505DB096CCAD11EE9AA68C6A775412E6.roa
File: 505DB096CCAD11EE9AA68C6A775412E6.roa (raw, json)
Hash identifier: IEUnP1q+UtkT1XGtwei1B4GypN10BLc0+Eh9K+OsAn0=
Subject key identifier: C8:DF:81:A9:80:2F:E9:9E:BF:F1:A6:9E:32:B7:A2:CE:D1:C6:EB:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8A79
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/505DB096CCAD11EE9AA68C6A775412E6.roa
Signing time: Fri 16 Feb 2024 09:25:25 +0000
ROA not before: Fri 16 Feb 2024 09:25:21 +0000
ROA not after: Fri 26 Apr 2024 09:25:21 +0000
asID: 9009
IP address blocks: 154.218.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35449 (0x8a79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 09:25:21 2024 GMT
Not After : Apr 26 09:25:21 2024 GMT
Subject: CN=65cf2a04-f70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:94:79:4e:d2:f0:1e:87:4b:2f:5b:52:6f:97:
80:1a:c0:af:43:9c:c5:4a:32:35:f1:0d:d5:18:6a:
25:df:2a:3e:36:98:00:c0:3a:a4:58:eb:63:f2:a3:
1d:f1:6b:a4:8c:39:71:48:9a:50:6e:e4:29:64:85:
ef:2d:81:07:a6:37:d6:10:04:4e:46:71:26:b3:6e:
2c:c5:a3:74:db:d8:e1:69:a1:2b:e0:b5:9a:40:fb:
96:b1:ec:e0:69:bb:fc:df:8d:eb:a1:ef:45:f3:0c:
60:21:0d:ed:e9:6b:cc:5e:79:bd:14:79:27:20:60:
94:1a:00:7f:1a:6f:84:78:87:1a:b1:73:26:2c:e1:
4d:3e:84:25:83:37:40:73:5d:d5:4c:04:7a:a9:eb:
f3:6e:82:7c:9c:93:5a:91:ba:80:dd:28:84:aa:f6:
e7:f6:71:67:52:0b:d5:e0:39:3c:fc:a5:7d:58:00:
01:ac:ab:83:63:2a:96:6b:0c:b7:98:c1:29:24:e9:
ea:35:6f:f2:e4:34:fc:78:08:0a:d3:96:5d:ca:d1:
84:30:cd:ba:21:a8:e0:70:47:bf:a1:51:ee:10:3b:
d1:da:d6:cb:ed:a4:7c:e9:ab:05:3e:69:b3:61:66:
85:4c:ee:93:a4:c0:51:e2:29:7d:e9:e2:06:d7:ca:
a2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DF:81:A9:80:2F:E9:9E:BF:F1:A6:9E:32:B7:A2:CE:D1:C6:EB:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/505DB096CCAD11EE9AA68C6A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.220.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:66:9e:5f:26:21:e9:5b:53:02:77:f7:9c:13:2c:2f:76:01:
64:5f:6e:a7:3a:00:a0:33:cc:8d:da:ea:25:1b:6a:3c:61:91:
e5:7d:76:5c:64:74:28:b7:4d:0f:dc:03:37:74:14:0c:3f:de:
ca:e9:fe:e3:56:1d:84:a3:93:13:67:d2:5f:ab:3b:56:0d:ed:
4d:ec:91:94:2d:14:92:e2:d6:ed:9e:a3:01:a5:75:6f:41:a7:
31:fb:12:b1:16:83:1f:77:82:4b:70:5b:fa:f6:89:90:cb:6e:
8d:0d:17:0a:48:86:fe:a3:93:6e:77:a7:1b:5c:be:5c:b2:d9:
e9:47:4b:26:55:36:3a:87:56:9f:cb:d8:0a:fd:1b:68:fa:ed:
88:67:92:3a:23:75:a2:eb:99:7c:28:52:b6:bc:9d:ea:27:a6:
b8:7b:d7:12:12:d7:9d:20:d1:c0:12:0e:40:c8:df:58:1c:05:
66:df:14:93:59:ea:c7:97:aa:cb:96:8e:1a:98:05:d4:8a:7e:
1f:fc:b4:c9:b3:02:e7:2f:a9:e9:4a:ba:04:47:22:18:c3:a8:
16:37:0b:57:b7:0f:cf:ea:70:bc:41:2e:f0:b3:c1:d2:6d:89:
3e:d7:51:0c:22:8a:bb:77:6c:78:4f:dd:bf:00:a8:49:60:a2:
6b:e9:cc:3e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAIp5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMjE2MDkyNTIxWhcNMjQwNDI2MDkyNTIxWjAYMRYw
FAYDVQQDEw02NWNmMmEwNC1mNzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA25R5TtLwHodLL1tSb5eAGsCvQ5zFSjI18Q3VGGol3yo+NpgAwDqkWOtj
8qMd8WukjDlxSJpQbuQpZIXvLYEHpjfWEARORnEms24sxaN029jhaaEr4LWaQPuW
sezgabv8343roe9F8wxgIQ3t6WvMXnm9FHknIGCUGgB/Gm+EeIcasXMmLOFNPoQl
gzdAc13VTAR6qevzboJ8nJNakbqA3SiEqvbn9nFnUgvV4Dk8/KV9WAABrKuDYyqW
awy3mMEpJOnqNW/y5DT8eAgK05ZdytGEMM26IajgcEe/oVHuEDvR2tbL7aR86asF
PmmzYWaFTO6TpMBR4il96eIG18qidQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMjf
gamAL+mev/GmnjK3os7Rxuv6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MDVEQjA5NkNDQUQxMUVFOUFBNjhDNkE3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtrcMA0GCSqGSIb3DQEB
CwUAA4IBAQCdZp5fJiHpW1MCd/ecEywvdgFkX26nOgCgM8yN2uolG2o8YZHlfXZc
ZHQot00P3AM3dBQMP97K6f7jVh2Eo5MTZ9JfqztWDe1N7JGULRSS4tbtnqMBpXVv
Qacx+xKxFoMfd4JLcFv69omQy26NDRcKSIb+o5Nud6cbXL5cstnpR0smVTY6h1af
y9gK/Rto+u2IZ5I6I3Wi65l8KFK2vJ3qJ6a4e9cSEtedINHAEg5AyN9YHAVm3xST
WerHl6rLlo4amAXUin4f/LTJswLnL6npSroERyIYw6gWNwtXtw/P6nC8QS7ws8HS
bYk+11EMIoq7d2x4T92/AKhJYKJr6cw+
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:35 2024 by rpki-client on console-ams.rpki-client.org