Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2FBE0F207AD11EF9B1311FB007001B1.roa
File: B2FBE0F207AD11EF9B1311FB007001B1.roa (raw, json)
Hash identifier: D9fkcae3608Ls6aU60pNTIVjLEOf/0jco4P8ScnlXzg=
Subject key identifier: 21:8D:32:2E:61:0E:03:20:1F:49:88:7C:C8:0F:12:D0:89:A3:93:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B391
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2FBE0F207AD11EF9B1311FB007001B1.roa
Signing time: Wed 01 May 2024 11:26:49 +0000
ROA not before: Wed 01 May 2024 11:26:44 +0000
ROA not after: Thu 16 May 2024 11:26:44 +0000
asID: 142062
IP address blocks: 154.212.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45969 (0xb391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:26:44 2024 GMT
Not After : May 16 11:26:44 2024 GMT
Subject: CN=663226f8-fdec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5f:9e:b9:9f:30:52:99:72:07:fc:a6:9d:b3:
ca:ae:b7:0c:e1:53:eb:61:92:77:3a:08:48:2f:34:
07:37:d4:8c:92:02:6d:c3:db:5d:5b:a2:10:06:d8:
ae:4c:39:37:44:a8:43:65:a5:7d:e3:0d:db:38:a0:
8e:a4:ad:4f:4e:27:2a:08:e9:fb:fe:fc:3f:77:03:
ae:5c:af:17:8e:cd:65:b5:a9:5a:52:05:23:d7:8f:
6e:a2:7f:85:f8:fc:cc:c6:12:22:b1:13:e2:a0:40:
9d:e6:25:50:8c:3c:f1:92:d1:e6:8e:e7:52:e8:a1:
d5:c4:8a:53:23:7f:a9:3d:a4:17:d3:43:4f:3e:0d:
92:7b:ae:d1:55:fe:02:e8:81:63:33:95:9c:01:23:
d9:2a:ac:4a:1b:75:24:82:28:dd:39:89:23:32:f8:
c8:d9:07:1f:65:db:15:6f:00:25:9f:47:21:c4:4b:
56:98:e7:b5:77:64:c6:bd:e2:d1:d0:21:ad:f1:b5:
ff:5c:f9:f5:c2:26:a0:2c:b4:78:33:25:e7:cd:73:
04:91:5c:2b:81:2a:6a:27:e0:0a:40:07:af:9a:82:
2b:11:dd:55:81:5e:8e:75:66:7e:3b:b8:de:8f:05:
b9:03:21:8a:22:01:66:ab:0e:61:ee:02:b9:8b:73:
a4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8D:32:2E:61:0E:03:20:1F:49:88:7C:C8:0F:12:D0:89:A3:93:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2FBE0F207AD11EF9B1311FB007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.152.0/24
Signature Algorithm: sha256WithRSAEncryption
34:fe:1a:cd:98:40:b6:6d:70:7b:39:5e:08:e6:79:36:51:6f:
4e:e3:86:6e:2c:e9:54:b6:3b:c4:74:93:98:ac:39:5e:fd:69:
c2:10:91:17:a0:ee:94:3a:bf:f7:77:56:f1:ee:5f:f5:a1:2a:
42:34:30:e1:27:39:ab:6f:4b:4f:ff:02:db:40:bb:84:45:4e:
4a:80:9d:66:3a:d3:43:e4:54:70:f9:50:2e:6e:63:8e:fa:12:
b3:fb:c7:86:d5:af:70:57:3a:df:23:cd:af:d3:f9:c2:14:2c:
5f:64:7f:2f:ad:72:c4:54:0c:2c:fb:96:2d:2d:63:57:a5:c6:
42:26:e5:5c:d5:64:1d:36:fd:cf:de:99:1a:1c:89:50:ba:ee:
ca:67:08:51:f7:78:19:54:23:1a:e8:b6:25:28:38:86:64:5b:
39:c5:6e:34:fe:c4:f6:9d:c0:ed:d7:a1:5e:e2:7d:a3:8e:8c:
3a:0e:fb:16:0c:6f:71:3f:29:87:7d:c0:bb:7a:4b:fd:9a:35:
6d:e0:50:e6:71:3e:f1:31:ec:d7:0c:29:04:f7:c1:dd:4e:df:
77:4b:74:0a:49:dc:61:6c:9c:79:d4:aa:e0:8f:6a:cc:8c:63:
5f:a1:9b:d5:90:80:59:85:01:dc:00:ff:0c:47:0f:4c:c3:c3:
dd:2b:55:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALORMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTAxMTEyNjQ0WhcNMjQwNTE2MTEyNjQ0WjAYMRYw
FAYDVQQDEw02NjMyMjZmOC1mZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy1+euZ8wUplyB/ymnbPKrrcM4VPrYZJ3OghILzQHN9SMkgJtw9tdW6IQ
BtiuTDk3RKhDZaV94w3bOKCOpK1PTicqCOn7/vw/dwOuXK8Xjs1ltalaUgUj149u
on+F+PzMxhIisRPioECd5iVQjDzxktHmjudS6KHVxIpTI3+pPaQX00NPPg2Se67R
Vf4C6IFjM5WcASPZKqxKG3UkgijdOYkjMvjI2QcfZdsVbwAln0chxEtWmOe1d2TG
veLR0CGt8bX/XPn1wiagLLR4MyXnzXMEkVwrgSpqJ+AKQAevmoIrEd1VgV6OdWZ+
O7jejwW5AyGKIgFmqw5h7gK5i3OkhwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCGN
Mi5hDgMgH0mIfMgPEtCJo5MrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMkZCRTBGMjA3QUQxMUVGOUIxMzExRkIwMDcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtSYMA0GCSqGSIb3DQEB
CwUAA4IBAQA0/hrNmEC2bXB7OV4I5nk2UW9O44ZuLOlUtjvEdJOYrDle/WnCEJEX
oO6UOr/3d1bx7l/1oSpCNDDhJzmrb0tP/wLbQLuERU5KgJ1mOtND5FRw+VAubmOO
+hKz+8eG1a9wVzrfI82v0/nCFCxfZH8vrXLEVAws+5YtLWNXpcZCJuVc1WQdNv3P
3pkaHIlQuu7KZwhR93gZVCMa6LYlKDiGZFs5xW40/sT2ncDt16Fe4n2jjow6DvsW
DG9xPymHfcC7ekv9mjVt4FDmcT7xMezXDCkE98HdTt93S3QKSdxhbJx51Krgj2rM
jGNfoZvVkIBZhQHcAP8MRw9Mw8PdK1UL
-----END CERTIFICATE-----
Generated at Fri May 17 02:04:04 2024 by rpki-client on console-fra.rpki-client.org