Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CFAECF40B4711EF85DE6E40017001B1.roa
File: 6CFAECF40B4711EF85DE6E40017001B1.roa (raw, json)
Hash identifier: lG8WWVvWEiRT+XdmX7TzbGtK3uLntXU8eZOvOszwvv8=
Subject key identifier: 11:C1:F2:21:D9:DC:7E:64:2A:51:62:07:24:7F:B1:CB:EE:95:55:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B44C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CFAECF40B4711EF85DE6E40017001B1.roa
Signing time: Mon 06 May 2024 01:24:47 +0000
ROA not before: Mon 06 May 2024 01:24:44 +0000
ROA not after: Wed 15 May 2024 01:24:44 +0000
asID: 140227
IP address blocks: 154.86.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46156 (0xb44c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 01:24:44 2024 GMT
Not After : May 15 01:24:44 2024 GMT
Subject: CN=6638315f-e6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:0a:3b:12:ec:3d:95:be:ad:1c:e6:06:68:
84:1d:9a:f7:2a:b9:9d:bc:c1:da:6e:10:ea:a5:81:
b4:ec:88:4a:8c:bc:fe:53:6a:06:36:99:c6:ca:dd:
9e:88:68:4f:b7:2c:0b:b5:e5:5e:11:45:52:10:b5:
58:c2:97:af:80:92:16:36:e7:64:ef:b2:75:b3:98:
f7:b6:ab:6c:32:3c:83:1e:5b:7d:fd:f1:6f:5f:2f:
fe:7f:f8:f1:04:0b:59:af:a5:bd:92:a5:1a:10:89:
4c:5e:7c:29:97:d9:81:82:e9:15:3b:53:49:ab:25:
fc:c8:59:23:12:67:26:9c:fb:83:f9:eb:50:2f:d5:
87:32:c1:c4:5d:f2:41:62:da:2d:cf:1b:3d:20:b4:
4f:51:60:a7:18:0f:aa:27:b2:66:0c:36:09:95:31:
73:bb:df:26:81:63:62:0d:0e:bc:6b:7d:fd:24:b5:
ff:00:b2:f9:f1:fc:10:e9:af:4b:dd:5e:b0:49:a2:
1f:37:90:75:54:6e:b2:dc:66:50:f4:ce:0e:70:6f:
7b:a9:c5:0a:3b:78:27:b6:e5:ce:0a:50:ab:35:c4:
fc:a1:59:9b:f6:89:40:3b:35:a3:13:5a:06:33:bf:
71:f3:aa:b8:f1:6f:34:7d:15:55:e0:b9:66:7a:ec:
dc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C1:F2:21:D9:DC:7E:64:2A:51:62:07:24:7F:B1:CB:EE:95:55:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CFAECF40B4711EF85DE6E40017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
24:53:10:af:46:3a:6b:a1:13:ae:0c:fe:e8:29:a7:1c:11:66:
7f:3a:ae:00:c3:0e:6c:96:2f:51:fe:ae:7b:a2:ad:1e:30:25:
7d:de:eb:74:e7:f3:e3:d6:60:e2:4c:e2:ce:8d:c6:ea:9e:e0:
89:16:b8:86:3f:9f:c1:7a:9c:60:f0:c8:e6:f2:ac:62:d2:ee:
2d:53:c6:36:8e:73:ad:2d:1a:4f:ca:07:db:03:67:99:bb:60:
41:0b:ba:d9:a2:a0:f0:5f:ea:ce:54:f7:13:b2:48:67:27:9c:
1e:c8:85:4f:38:26:1c:52:a5:7b:f5:ac:80:9b:bc:82:71:9d:
4f:3e:d0:72:ef:f8:67:bc:56:8b:4d:f6:20:ca:9d:63:3c:f3:
88:a8:58:08:db:9d:d9:f7:be:2c:02:d9:6f:bb:81:b8:06:bb:
28:15:ac:cf:8c:d1:b3:a9:ff:98:44:74:e5:bc:b7:7a:87:8f:
41:ca:f6:42:4d:a0:ca:d5:64:b9:fe:70:57:92:3a:b9:52:b0:
73:c0:8f:57:e6:80:f4:ee:51:1a:30:e0:03:23:af:35:08:20:
96:7f:79:cc:67:cd:d1:83:d0:ab:2e:95:97:24:f9:10:aa:de:
15:8d:b7:1c:f8:36:19:ed:b1:95:51:aa:0e:bd:9c:9b:58:47:
ba:71:4f:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALRMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA2MDEyNDQ0WhcNMjQwNTE1MDEyNDQ0WjAYMRYw
FAYDVQQDEw02NjM4MzE1Zi1lNmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwBgKOxLsPZW+rRzmBmiEHZr3KrmdvMHabhDqpYG07IhKjLz+U2oGNpnG
yt2eiGhPtywLteVeEUVSELVYwpevgJIWNudk77J1s5j3tqtsMjyDHlt9/fFvXy/+
f/jxBAtZr6W9kqUaEIlMXnwpl9mBgukVO1NJqyX8yFkjEmcmnPuD+etQL9WHMsHE
XfJBYtotzxs9ILRPUWCnGA+qJ7JmDDYJlTFzu98mgWNiDQ68a339JLX/ALL58fwQ
6a9L3V6wSaIfN5B1VG6y3GZQ9M4OcG97qcUKO3gntuXOClCrNcT8oVmb9olAOzWj
E1oGM79x86q48W80fRVV4LlmeuzcewIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBHB
8iHZ3H5kKlFiByR/scvulVVPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82Q0ZBRUNGNDBCNDcxMUVGODVERTZFNDAwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmlYQMA0GCSqGSIb3DQEB
CwUAA4IBAQAkUxCvRjproROuDP7oKaccEWZ/Oq4Aww5sli9R/q57oq0eMCV93ut0
5/Pj1mDiTOLOjcbqnuCJFriGP5/Bepxg8Mjm8qxi0u4tU8Y2jnOtLRpPygfbA2eZ
u2BBC7rZoqDwX+rOVPcTskhnJ5weyIVPOCYcUqV79ayAm7yCcZ1PPtBy7/hnvFaL
TfYgyp1jPPOIqFgI253Z974sAtlvu4G4BrsoFazPjNGzqf+YRHTlvLd6h49ByvZC
TaDK1WS5/nBXkjq5UrBzwI9X5oD07lEaMOADI681CCCWf3nMZ83Rg9CrLpWXJPkQ
qt4Vjbcc+DYZ7bGVUaoOvZybWEe6cU/g
-----END CERTIFICATE-----
Generated at Wed May 15 03:09:53 2024 by rpki-client on console-fra.rpki-client.org