Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50BE65900C0D11EFB530860C017001B1.roa
File: 50BE65900C0D11EFB530860C017001B1.roa (raw, json)
Hash identifier: J0qSCpcRjjuCNfPBK++HPRg3vdhVQbU2NDiH95Y2ClI=
Subject key identifier: 18:04:EF:0A:2B:96:C7:70:10:AB:98:CF:77:C0:89:08:09:64:B7:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B54B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50BE65900C0D11EFB530860C017001B1.roa
Signing time: Tue 07 May 2024 01:01:21 +0000
ROA not before: Tue 07 May 2024 01:01:16 +0000
ROA not after: Thu 16 May 2024 01:01:16 +0000
asID: 147176
IP address blocks: 154.215.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46411 (0xb54b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 01:01:16 2024 GMT
Not After : May 16 01:01:16 2024 GMT
Subject: CN=66397d60-b526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:4a:f1:5b:2a:c2:8b:7a:3b:df:0b:f2:55:
f1:62:b9:e9:09:32:b7:ae:e7:e9:d6:1b:40:83:fa:
56:63:54:66:12:76:2b:31:a0:73:c9:d9:5d:62:48:
fa:d0:86:08:fa:eb:fc:32:48:ab:da:02:82:80:51:
a6:bc:a9:a1:50:c5:79:72:35:33:91:3a:9e:49:a7:
24:0a:9c:98:18:3d:1d:a3:1d:51:4c:3b:8d:df:3e:
61:d6:4d:9b:a9:45:f2:02:71:d3:1d:cc:41:84:16:
5f:7f:a0:0f:c4:ba:36:ce:00:be:ed:1c:d2:c3:4a:
58:ab:0c:ee:cd:03:23:b4:d4:bc:b6:0e:9b:fa:7c:
61:c5:69:33:d6:08:45:a7:e1:cc:e7:04:b8:b4:5f:
cb:b9:d7:82:e0:45:67:86:47:61:f6:a2:0e:8b:ab:
e3:09:03:a2:ec:33:61:b6:26:71:b3:b8:61:da:cd:
8a:82:c1:01:f6:94:84:2f:a1:f6:c6:6b:33:23:4f:
7c:2f:2f:e8:6a:ec:d8:77:85:e8:37:e6:bc:f5:f0:
5f:07:a7:19:76:b0:cf:57:5e:f5:25:da:24:e9:0f:
95:d4:63:54:3b:9e:b1:4c:30:ad:4e:1e:30:f0:4e:
98:c8:3c:c4:03:75:80:d5:f5:89:94:38:71:4d:9a:
fb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:04:EF:0A:2B:96:C7:70:10:AB:98:CF:77:C0:89:08:09:64:B7:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50BE65900C0D11EFB530860C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.14.0/24
Signature Algorithm: sha256WithRSAEncryption
89:14:59:8f:fa:50:da:b0:7c:1c:5c:18:1a:96:5e:0e:d2:48:
18:b9:0c:bf:af:d5:43:35:64:7a:a1:75:f6:f9:d4:b7:94:d7:
a4:2f:d0:98:fd:f0:da:59:c2:8e:1c:ed:6d:f0:7a:02:5f:c0:
0f:78:44:d1:e0:b5:47:8f:6d:87:a3:ac:ba:db:ab:db:49:91:
bc:5c:1c:7a:82:52:33:d7:15:f2:a7:c1:a0:fc:3a:d4:3c:a9:
81:a0:b1:d0:48:38:4c:2d:e5:1b:5d:f0:37:a7:db:51:10:85:
cd:bb:dc:48:b0:fd:59:5b:64:81:78:2c:5f:bf:05:8b:5e:bf:
2f:21:0d:5a:51:7b:c6:2f:78:ba:ee:81:ce:4e:ef:b3:ae:77:
56:96:46:f0:cc:04:b1:da:5e:6c:06:7d:de:93:4a:a6:f3:0b:
39:c0:2a:9a:b1:ee:85:62:ff:63:8b:75:97:a2:95:35:d8:c5:
9f:0b:4a:5d:c8:58:c0:ab:6c:b0:77:2e:16:14:fa:af:ab:7d:
66:48:7a:20:14:0c:4a:7f:4c:50:04:ae:9d:14:bf:f2:39:2a:
ed:6b:2d:ff:28:e0:39:e7:5c:1f:94:21:9a:e6:af:cd:df:11:
46:6c:a9:80:3a:a8:33:bb:07:c9:31:a1:ca:ac:95:6a:d9:69:
d0:6b:75:9b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALVLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA3MDEwMTE2WhcNMjQwNTE2MDEwMTE2WjAYMRYw
FAYDVQQDEw02NjM5N2Q2MC1iNTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApztK8Vsqwot6O98L8lXxYrnpCTK3rufp1htAg/pWY1RmEnYrMaBzydld
Ykj60IYI+uv8Mkir2gKCgFGmvKmhUMV5cjUzkTqeSackCpyYGD0dox1RTDuN3z5h
1k2bqUXyAnHTHcxBhBZff6APxLo2zgC+7RzSw0pYqwzuzQMjtNS8tg6b+nxhxWkz
1ghFp+HM5wS4tF/LudeC4EVnhkdh9qIOi6vjCQOi7DNhtiZxs7hh2s2KgsEB9pSE
L6H2xmszI098Ly/oauzYd4XoN+a89fBfB6cZdrDPV171Jdok6Q+V1GNUO56xTDCt
Th4w8E6YyDzEA3WA1fWJlDhxTZr7zQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBgE
7worlsdwEKuYz3fAiQgJZLeGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MEJFNjU5MDBDMEQxMUVGQjUzMDg2MEMwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtcOMA0GCSqGSIb3DQEB
CwUAA4IBAQCJFFmP+lDasHwcXBgall4O0kgYuQy/r9VDNWR6oXX2+dS3lNekL9CY
/fDaWcKOHO1t8HoCX8APeETR4LVHj22Ho6y626vbSZG8XBx6glIz1xXyp8Gg/DrU
PKmBoLHQSDhMLeUbXfA3p9tREIXNu9xIsP1ZW2SBeCxfvwWLXr8vIQ1aUXvGL3i6
7oHOTu+zrndWlkbwzASx2l5sBn3ek0qm8ws5wCqase6FYv9ji3WXopU12MWfC0pd
yFjAq2ywdy4WFPqvq31mSHogFAxKf0xQBK6dFL/yOSrtay3/KOA551wflCGa5q/N
3xFGbKmAOqgzuwfJMaHKrJVq2WnQa3Wb
-----END CERTIFICATE-----
Generated at Thu May 16 07:46:20 2024 by rpki-client on console-ams.rpki-client.org