Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92D08C780CEA11EF9AA05B25017001B1.roa
File: 92D08C780CEA11EF9AA05B25017001B1.roa (raw, json)
Hash identifier: gANgiKjLHawW6/ZGwTjAUkAfknQOFVz5uUtmO8sBqr0=
Subject key identifier: 86:5D:B4:AA:DD:B8:43:8E:EE:45:F5:BA:DE:57:C3:1F:1E:F2:B3:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B57C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92D08C780CEA11EF9AA05B25017001B1.roa
Signing time: Wed 08 May 2024 03:25:10 +0000
ROA not before: Wed 08 May 2024 03:25:06 +0000
ROA not after: Sat 18 May 2024 03:25:06 +0000
asID: 39600
IP address blocks: 154.206.120.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46460 (0xb57c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 03:25:06 2024 GMT
Not After : May 18 03:25:06 2024 GMT
Subject: CN=663af096-e6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:3b:a9:a6:10:f9:79:95:22:dd:ba:08:e1:
90:df:92:d3:de:fe:ed:98:e6:c6:a5:9d:aa:7d:51:
cc:5a:26:20:7d:32:18:9b:2d:86:c2:e1:6b:f7:56:
ee:4b:48:5f:18:0c:d7:ad:44:97:b6:4d:1f:00:99:
bd:14:32:a7:6c:ca:7a:30:ea:d2:d0:9c:b2:7f:c6:
60:ad:26:6d:53:3f:b7:95:d0:97:46:b5:ea:8d:c0:
6e:e8:9c:34:d0:5e:70:89:7b:49:41:b0:55:63:1a:
1a:22:ef:f2:e9:61:50:75:3b:e3:c7:17:ca:df:26:
4a:1f:08:0a:2c:9d:47:03:5d:fa:3c:f7:5d:af:94:
0a:de:8d:22:0f:90:bc:d0:4a:92:3c:aa:0e:5b:5b:
e8:7f:8c:bb:69:01:16:19:60:09:c8:44:ac:fe:08:
51:18:d5:89:ff:0d:4f:12:e6:0b:2b:34:1e:3b:3b:
c8:7d:f0:f5:82:0f:13:20:56:93:37:6d:9e:ed:67:
ad:a4:9c:ef:6f:29:5b:65:57:f9:fb:77:5d:a7:ab:
cd:e9:fb:85:b7:bc:52:60:dd:e2:64:23:28:c8:a4:
e7:55:be:44:f3:84:37:ca:57:b7:37:6d:e4:46:4c:
f8:06:65:96:91:04:94:23:f9:f5:5a:92:d2:0d:cb:
a6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5D:B4:AA:DD:B8:43:8E:EE:45:F5:BA:DE:57:C3:1F:1E:F2:B3:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92D08C780CEA11EF9AA05B25017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.120.0/21
Signature Algorithm: sha256WithRSAEncryption
38:8c:b2:de:36:d5:74:e7:6d:a5:a2:19:55:be:ec:26:08:41:
54:a6:0a:ab:3b:fc:d5:aa:94:74:6b:21:b3:8f:ef:96:6f:06:
e9:cc:2b:cb:be:f8:a7:57:2e:e7:53:41:f4:76:3e:5f:cb:32:
0b:48:6b:3b:09:86:e2:98:16:bc:0f:ea:83:d1:e9:b7:42:34:
d4:99:8d:80:2b:e8:1f:7e:b7:02:00:52:38:a2:50:c6:da:bf:
26:e2:37:4d:9a:9d:30:90:93:10:e8:76:3c:8c:46:66:5b:2d:
bb:e1:16:0f:49:a0:34:95:b0:f3:d7:e7:b4:7f:4f:bb:17:3c:
09:ec:bc:77:b4:8d:51:5e:aa:2f:0b:e5:58:f1:35:9b:6a:b7:
b8:2b:11:e6:3b:37:aa:85:52:63:91:39:3a:d2:37:f3:d2:8f:
14:07:75:3d:15:2c:50:a2:da:8a:fe:73:7b:d5:c0:d6:5a:c5:
11:7c:38:9f:12:6c:5b:de:72:74:99:0f:f2:0f:6c:dd:46:aa:
8d:98:fe:4f:71:07:2c:fc:ec:ed:54:7d:9e:17:ac:3b:7c:b9:
37:8e:fe:30:5a:89:a8:3e:30:53:99:13:c0:c2:c7:69:a8:e7:
8a:99:f4:3a:ef:dd:ad:a8:94:8e:2b:f8:df:7c:28:3d:84:dd:
53:21:df:49
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALV8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA4MDMyNTA2WhcNMjQwNTE4MDMyNTA2WjAYMRYw
FAYDVQQDEw02NjNhZjA5Ni1lNmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArnA7qaYQ+XmVIt26COGQ35LT3v7tmObGpZ2qfVHMWiYgfTIYmy2GwuFr
91buS0hfGAzXrUSXtk0fAJm9FDKnbMp6MOrS0Jyyf8ZgrSZtUz+3ldCXRrXqjcBu
6Jw00F5wiXtJQbBVYxoaIu/y6WFQdTvjxxfK3yZKHwgKLJ1HA136PPddr5QK3o0i
D5C80EqSPKoOW1vof4y7aQEWGWAJyESs/ghRGNWJ/w1PEuYLKzQeOzvIffD1gg8T
IFaTN22e7WetpJzvbylbZVf5+3ddp6vN6fuFt7xSYN3iZCMoyKTnVb5E84Q3yle3
N23kRkz4BmWWkQSUI/n1WpLSDcum5QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIZd
tKrduEOO7kX1ut5Xwx8e8rMCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MkQwOEM3ODBDRUExMUVGOUFBMDVCMjUwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDms54MA0GCSqGSIb3DQEB
CwUAA4IBAQA4jLLeNtV0522lohlVvuwmCEFUpgqrO/zVqpR0ayGzj++WbwbpzCvL
vvinVy7nU0H0dj5fyzILSGs7CYbimBa8D+qD0em3QjTUmY2AK+gffrcCAFI4olDG
2r8m4jdNmp0wkJMQ6HY8jEZmWy274RYPSaA0lbDz1+e0f0+7FzwJ7Lx3tI1RXqov
C+VY8TWbare4KxHmOzeqhVJjkTk60jfz0o8UB3U9FSxQotqK/nN71cDWWsURfDif
Emxb3nJ0mQ/yD2zdRqqNmP5PcQcs/OztVH2eF6w7fLk3jv4wWomoPjBTmRPAwsdp
qOeKmfQ6792tqJSOK/jffCg9hN1TId9J
-----END CERTIFICATE-----
Generated at Sun May 19 02:08:29 2024 by rpki-client on console-ams.rpki-client.org