Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E447390CCA511EE93E4305E775412E6.roa
File: 6E447390CCA511EE93E4305E775412E6.roa (raw, json)
Hash identifier: t46mWLbWl0E+PyH1L8p8YQnLTBTbSRMoCmdNpJP6h7E=
Subject key identifier: 1E:40:9F:18:6E:56:E7:64:1A:28:8B:F9:FA:C0:9F:FA:E3:9B:A7:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8A33
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E447390CCA511EE93E4305E775412E6.roa
Signing time: Fri 16 Feb 2024 08:28:59 +0000
ROA not before: Fri 16 Feb 2024 08:28:55 +0000
ROA not after: Fri 26 Apr 2024 08:28:55 +0000
asID: 9009
IP address blocks: 154.218.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35379 (0x8a33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 08:28:55 2024 GMT
Not After : Apr 26 08:28:55 2024 GMT
Subject: CN=65cf1ccb-0062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f5:ea:5a:09:72:49:eb:ff:41:21:af:c7:4e:
24:ce:eb:35:df:4d:c1:91:dd:7f:9a:ad:8b:c6:3a:
6f:51:ae:85:7a:cf:28:e5:ae:d3:df:b5:6e:79:6f:
ac:68:19:80:bc:ce:09:aa:fa:0d:c6:d6:b9:c5:91:
c8:b3:88:9f:28:e3:c5:fa:13:49:7c:f6:65:07:74:
61:32:4e:79:63:04:ad:7d:9c:b6:14:c4:e5:d1:fb:
a8:98:4e:9d:4a:1f:70:b2:a8:d5:fb:cf:df:35:9c:
8c:f7:81:fd:95:ac:4b:ad:60:12:1c:36:76:51:6d:
4b:df:39:a3:7a:94:78:e1:e3:31:8f:d9:87:7e:0c:
20:41:a6:e9:84:46:0e:e6:c1:1c:17:5b:d6:65:c2:
18:f1:5f:99:0f:35:81:fa:aa:d6:2b:8b:12:ef:1e:
2b:e1:96:d4:e9:17:a4:3c:a2:ad:d8:91:3f:5f:95:
87:69:57:ea:99:1f:2c:f5:6a:b3:73:37:b3:f6:23:
a6:40:48:ef:4f:6d:63:28:2d:2b:d9:3b:5e:a2:c2:
32:ac:45:3c:db:85:38:40:e0:75:26:76:80:8f:87:
40:e7:28:de:ea:15:c9:8a:28:9b:d1:53:73:fd:79:
c4:db:bc:bb:d0:2a:52:85:91:e2:93:c0:54:60:4f:
35:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:40:9F:18:6E:56:E7:64:1A:28:8B:F9:FA:C0:9F:FA:E3:9B:A7:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E447390CCA511EE93E4305E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.201.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:49:43:d1:ec:31:16:b9:89:c5:03:f5:a9:35:c1:f6:15:5f:
7b:ad:33:f2:75:85:17:58:31:6f:25:44:1c:c0:8e:69:ff:b0:
79:d5:6d:c2:b6:29:ac:e7:d2:c0:56:c4:ad:c0:89:76:dc:6a:
9c:a1:b8:50:22:58:04:27:7f:14:d9:ce:b4:92:b7:49:da:1a:
53:1b:47:53:f1:8b:c4:00:6c:f0:f3:c8:9f:9a:c2:d3:68:41:
46:e1:55:7c:80:67:b5:fc:e4:42:44:dd:7e:b6:58:4e:88:3b:
32:a6:74:e6:75:3e:a3:c0:10:02:52:dc:d0:c4:ce:9c:b2:37:
c5:ba:9f:6b:98:0e:c8:be:0b:b2:48:e5:4c:a9:1b:0c:f1:22:
e0:35:1d:f8:26:46:0d:c9:b1:ed:e0:3c:02:a6:57:ec:ae:23:
3f:ed:16:c5:b6:4f:f1:24:0c:51:d0:bb:62:e4:91:50:29:de:
61:f5:f8:69:65:83:1d:2d:7d:dd:2a:1a:a0:ef:79:94:1b:29:
4f:2e:52:a2:9e:35:e2:ae:aa:a3:80:d9:78:74:b5:a3:d5:47:
bf:c3:c0:9d:42:6d:7d:54:de:9d:e4:21:b9:fa:08:cd:fe:2b:
6d:ea:ce:52:0c:6f:c0:1b:bc:1b:fb:95:98:8f:42:b6:00:dc:
58:f5:3b:d2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAIozMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMjE2MDgyODU1WhcNMjQwNDI2MDgyODU1WjAYMRYw
FAYDVQQDEw02NWNmMWNjYi0wMDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxvXqWglySev/QSGvx04kzus1303Bkd1/mq2LxjpvUa6Fes8o5a7T37Vu
eW+saBmAvM4JqvoNxta5xZHIs4ifKOPF+hNJfPZlB3RhMk55YwStfZy2FMTl0fuo
mE6dSh9wsqjV+8/fNZyM94H9laxLrWASHDZ2UW1L3zmjepR44eMxj9mHfgwgQabp
hEYO5sEcF1vWZcIY8V+ZDzWB+qrWK4sS7x4r4ZbU6RekPKKt2JE/X5WHaVfqmR8s
9Wqzczez9iOmQEjvT21jKC0r2TteosIyrEU824U4QOB1JnaAj4dA5yje6hXJiiib
0VNz/XnE27y70CpShZHik8BUYE81kwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB5A
nxhuVudkGiiL+frAn/rjm6fCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82RTQ0NzM5MENDQTUxMUVFOTNFNDMwNUU3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtrJMA0GCSqGSIb3DQEB
CwUAA4IBAQDXSUPR7DEWuYnFA/WpNcH2FV97rTPydYUXWDFvJUQcwI5p/7B51W3C
tims59LAVsStwIl23GqcobhQIlgEJ38U2c60krdJ2hpTG0dT8YvEAGzw88ifmsLT
aEFG4VV8gGe1/ORCRN1+tlhOiDsypnTmdT6jwBACUtzQxM6csjfFup9rmA7Ivguy
SOVMqRsM8SLgNR34JkYNybHt4DwCplfsriM/7RbFtk/xJAxR0Lti5JFQKd5h9fhp
ZYMdLX3dKhqg73mUGylPLlKinjXirqqjgNl4dLWj1Ue/w8CdQm19VN6d5CG5+gjN
/itt6s5SDG/AG7wb+5WYj0K2ANxY9TvS
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:39 2024 by rpki-client on console-ams.rpki-client.org