Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87BD75520CFF11EF9D47CC4F017001B1.roa
File: 87BD75520CFF11EF9D47CC4F017001B1.roa (raw, json)
Hash identifier: V7jmDvR8q0AD2Evf4sj9oPopFr0VNHAn5aSW/JsTar0=
Subject key identifier: 15:CB:DA:2E:00:81:47:EF:7D:9C:1C:1A:F4:F4:0C:32:CB:C7:F7:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B590
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87BD75520CFF11EF9D47CC4F017001B1.roa
Signing time: Wed 08 May 2024 05:55:11 +0000
ROA not before: Wed 08 May 2024 05:55:07 +0000
ROA not after: Wed 15 May 2024 05:55:07 +0000
asID: 216038
IP address blocks: 154.86.26.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46480 (0xb590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 05:55:07 2024 GMT
Not After : May 15 05:55:07 2024 GMT
Subject: CN=663b13bf-e3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e2:47:6d:9c:c0:76:0e:c2:62:26:8d:9f:c2:
14:84:c8:fa:42:1b:cb:e6:b8:8d:52:89:47:cf:aa:
9c:73:38:9e:f2:e9:93:12:e9:b6:ec:b0:b3:c3:aa:
36:73:85:3f:e4:47:29:99:3f:e4:2b:f2:08:e6:61:
42:d0:f3:57:0a:65:b9:5c:d5:ce:83:fd:58:ff:05:
bb:ee:6b:9b:27:d5:d1:0a:38:12:2d:dc:1f:58:b7:
42:4d:69:f3:98:cc:4b:43:69:01:f5:86:60:5f:c2:
51:57:f7:21:c1:04:8a:71:b8:ab:87:87:82:f8:b5:
10:64:f5:61:36:d5:f5:a5:50:82:16:0e:34:fa:6a:
4b:fd:8c:a1:91:45:3d:1e:ff:bf:68:0c:e0:60:7d:
d9:91:39:bd:ee:e9:4f:e6:52:6b:ff:4b:2a:69:c9:
1f:79:d5:ad:d6:10:a1:58:76:ce:ef:c4:e1:1f:d6:
7d:53:b1:76:2c:52:82:03:6c:1e:99:49:e8:6d:8f:
34:6f:dd:e8:1a:ab:c3:3c:de:fa:f2:ae:cc:a9:93:
37:c0:6d:7f:2a:e7:f9:7e:b5:64:3e:71:90:6a:13:
31:d9:fe:7b:60:a4:67:78:97:c9:ed:c7:0b:63:4f:
5a:9c:31:a2:03:dc:6c:12:6d:d0:61:d9:06:de:09:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CB:DA:2E:00:81:47:EF:7D:9C:1C:1A:F4:F4:0C:32:CB:C7:F7:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87BD75520CFF11EF9D47CC4F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.26.0/23
Signature Algorithm: sha256WithRSAEncryption
24:bd:19:d5:b3:ee:3a:8a:b0:78:0e:18:d2:32:f7:87:89:b2:
40:50:0e:8e:f0:a2:14:cd:b7:bc:a7:21:de:99:5c:a3:0a:41:
2e:a1:a2:ab:c4:2d:bd:02:e5:f9:92:a8:e9:66:95:ad:b5:80:
0c:b5:eb:61:d2:b2:aa:4b:12:2e:ed:c4:15:7f:3d:b1:39:03:
b9:82:6f:cf:d2:c7:04:f9:eb:f7:de:b5:14:d6:8e:ba:19:a6:
35:35:0c:c0:db:fb:c2:20:58:00:34:ee:13:1c:cf:9a:ae:4f:
02:93:d0:d0:9c:03:72:7a:a0:ce:68:c4:5b:8c:7d:05:4a:4e:
52:33:c9:19:8a:8b:1e:69:78:3a:58:7e:5b:3a:da:06:a2:1d:
81:c3:33:5d:9b:40:74:b8:81:a9:00:f6:e7:4c:7d:da:3a:33:
4f:0c:16:89:ba:e8:ef:85:cb:46:22:3e:df:5e:c5:5d:8b:5b:
e9:3d:ec:62:ef:2e:4e:ef:2d:06:0f:c1:39:7f:4e:7b:1c:36:
65:e7:de:9f:fb:c6:56:85:d3:05:98:f7:0d:f4:38:9f:d6:51:
37:d0:4d:46:49:ca:2f:8c:25:6b:0d:48:1b:9c:e1:b6:3f:97:
cf:2e:cb:a6:08:27:00:e5:fb:5d:12:14:df:2d:07:64:31:ba:
ce:1f:32:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALWQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA4MDU1NTA3WhcNMjQwNTE1MDU1NTA3WjAYMRYw
FAYDVQQDEw02NjNiMTNiZi1lM2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0uJHbZzAdg7CYiaNn8IUhMj6QhvL5riNUolHz6qcczie8umTEum27LCz
w6o2c4U/5EcpmT/kK/II5mFC0PNXCmW5XNXOg/1Y/wW77mubJ9XRCjgSLdwfWLdC
TWnzmMxLQ2kB9YZgX8JRV/chwQSKcbirh4eC+LUQZPVhNtX1pVCCFg40+mpL/Yyh
kUU9Hv+/aAzgYH3ZkTm97ulP5lJr/0sqackfedWt1hChWHbO78ThH9Z9U7F2LFKC
A2wemUnobY80b93oGqvDPN768q7MqZM3wG1/Kuf5frVkPnGQahMx2f57YKRneJfJ
7ccLY09anDGiA9xsEm3QYdkG3gmrLwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBXL
2i4AgUfvfZwcGvT0DDLLx/cSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84N0JENzU1MjBDRkYxMUVGOUQ0N0NDNEYwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlYaMA0GCSqGSIb3DQEB
CwUAA4IBAQAkvRnVs+46irB4DhjSMveHibJAUA6O8KIUzbe8pyHemVyjCkEuoaKr
xC29AuX5kqjpZpWttYAMteth0rKqSxIu7cQVfz2xOQO5gm/P0scE+ev33rUU1o66
GaY1NQzA2/vCIFgANO4THM+ark8Ck9DQnANyeqDOaMRbjH0FSk5SM8kZioseaXg6
WH5bOtoGoh2BwzNdm0B0uIGpAPbnTH3aOjNPDBaJuujvhctGIj7fXsVdi1vpPexi
7y5O7y0GD8E5f057HDZl596f+8ZWhdMFmPcN9Dif1lE30E1GScovjCVrDUgbnOG2
P5fPLsumCCcA5ftdEhTfLQdkMbrOHzKR
-----END CERTIFICATE-----
Generated at Wed May 15 08:46:38 2024 by rpki-client on console-fra.rpki-client.org