Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FFB93FE06D211EF89DA5004017001B1.roa
File: 7FFB93FE06D211EF89DA5004017001B1.roa (raw, json)
Hash identifier: +wPp3AFAcW3Xq/D11/32WQSawv64NY337bHIeYLNmYc=
Subject key identifier: CA:2C:9A:19:F3:08:F9:F4:39:4D:15:B7:41:BF:34:35:56:2D:27:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B2B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FFB93FE06D211EF89DA5004017001B1.roa
Signing time: Tue 30 Apr 2024 09:17:43 +0000
ROA not before: Tue 30 Apr 2024 09:17:40 +0000
ROA not after: Fri 10 May 2024 09:17:40 +0000
asID: 142062
IP address blocks: 154.196.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45753 (0xb2b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 09:17:40 2024 GMT
Not After : May 10 09:17:40 2024 GMT
Subject: CN=6630b737-3c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:15:ff:0e:d9:93:e8:34:b3:9b:cd:94:ab:
e5:51:7f:81:1f:b1:28:f1:de:54:f4:e6:3a:f3:c6:
51:59:2e:f2:33:15:6f:d3:bc:5c:e7:b7:7d:84:c2:
4b:1a:e0:1c:68:10:bd:47:67:af:76:96:69:d4:59:
43:42:b2:6c:39:ae:75:26:ef:49:e3:49:10:51:bd:
0d:d9:b8:b3:cf:80:cd:4f:16:43:bf:1f:87:d5:ec:
85:6f:08:24:a3:97:8f:cb:b7:33:df:02:59:20:e2:
64:3a:e3:21:15:31:e2:08:3b:43:c2:b0:ba:f9:6a:
4d:a0:ee:68:f2:9a:d8:26:35:1a:e4:fd:27:51:cc:
72:f8:20:04:d2:ca:6c:db:a6:c3:ed:50:37:c6:66:
07:79:26:fb:78:74:5e:32:7e:d5:c6:b2:70:2e:8a:
e1:3d:5a:2e:88:94:02:28:6f:18:81:99:d1:cf:7d:
2b:77:46:9e:08:38:c5:1f:78:82:55:6c:77:59:31:
2a:0b:55:8a:8b:92:ff:d2:39:55:24:0c:5b:dc:9a:
e4:d6:f9:18:a4:b0:47:28:46:88:ab:08:24:6d:5b:
84:89:0f:2f:9c:6b:63:55:69:af:e7:43:64:c9:29:
32:dd:79:17:b8:72:c2:c7:08:8b:a6:b5:ee:e1:6c:
d8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2C:9A:19:F3:08:F9:F4:39:4D:15:B7:41:BF:34:35:56:2D:27:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FFB93FE06D211EF89DA5004017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.96.0/19
Signature Algorithm: sha256WithRSAEncryption
b0:f0:4d:f4:f1:70:c3:d5:af:ea:e9:cc:6c:0e:6c:96:1a:8b:
91:96:b6:e0:b0:79:d0:e4:e2:44:9c:e8:25:20:44:ab:38:d3:
d6:f8:a7:67:18:68:a8:21:9f:2e:c8:07:64:09:4d:79:92:e3:
73:3d:3f:57:98:8e:d9:50:0a:2c:49:ef:84:21:63:b0:c8:c6:
79:93:ea:4f:57:d0:c9:c7:03:c7:4a:94:39:90:29:34:49:43:
1c:96:c0:d1:ab:3b:47:c0:f0:5e:4e:9f:22:56:23:5a:2e:a8:
ca:1b:c6:31:4f:f9:4c:49:6b:63:ab:a4:32:20:23:90:72:86:
27:1f:90:8d:6f:60:31:ee:df:c3:95:32:56:44:ad:f8:9d:5b:
31:24:dd:0b:ba:11:72:7e:33:8e:40:f3:b3:7e:69:4f:13:84:
9a:55:73:88:71:2c:ae:1c:25:70:01:88:16:c3:11:e8:3f:d1:
e1:54:76:ae:e4:22:3e:19:cc:0a:97:10:0c:4a:bf:f7:93:a3:
89:66:72:fc:b6:fe:7f:65:c8:47:bd:67:81:8d:7a:11:b8:f5:
cc:3d:22:35:76:2b:62:eb:df:0c:c4:f6:5f:a2:f9:19:2c:a4:
38:94:da:fc:60:f5:6b:e8:73:ed:df:70:c4:5c:a3:1d:5a:1a:
5f:57:62:75
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALK5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDMwMDkxNzQwWhcNMjQwNTEwMDkxNzQwWjAYMRYw
FAYDVQQDEw02NjMwYjczNy0zYzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwuQV/w7Zk+g0s5vNlKvlUX+BH7Eo8d5U9OY688ZRWS7yMxVv07xc57d9
hMJLGuAcaBC9R2evdpZp1FlDQrJsOa51Ju9J40kQUb0N2bizz4DNTxZDvx+H1eyF
bwgko5ePy7cz3wJZIOJkOuMhFTHiCDtDwrC6+WpNoO5o8prYJjUa5P0nUcxy+CAE
0sps26bD7VA3xmYHeSb7eHReMn7VxrJwLorhPVouiJQCKG8YgZnRz30rd0aeCDjF
H3iCVWx3WTEqC1WKi5L/0jlVJAxb3Jrk1vkYpLBHKEaIqwgkbVuEiQ8vnGtjVWmv
50NkySky3XkXuHLCxwiLprXu4WzYowIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMos
mhnzCPn0OU0Vt0G/NDVWLScUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RkZCOTNGRTA2RDIxMUVGODlEQTUwMDQwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmsRgMA0GCSqGSIb3DQEB
CwUAA4IBAQCw8E308XDD1a/q6cxsDmyWGouRlrbgsHnQ5OJEnOglIESrONPW+Kdn
GGioIZ8uyAdkCU15kuNzPT9XmI7ZUAosSe+EIWOwyMZ5k+pPV9DJxwPHSpQ5kCk0
SUMclsDRqztHwPBeTp8iViNaLqjKG8YxT/lMSWtjq6QyICOQcoYnH5CNb2Ax7t/D
lTJWRK34nVsxJN0LuhFyfjOOQPOzfmlPE4SaVXOIcSyuHCVwAYgWwxHoP9HhVHau
5CI+GcwKlxAMSr/3k6OJZnL8tv5/ZchHvWeBjXoRuPXMPSI1diti698MxPZfovkZ
LKQ4lNr8YPVr6HPt33DEXKMdWhpfV2J1
-----END CERTIFICATE-----
Generated at Fri May 10 13:13:59 2024 by rpki-client on console-ams.rpki-client.org