Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C557388207A811EF8A39DA51017001B1.roa
File: C557388207A811EF8A39DA51017001B1.roa (raw, json)
Hash identifier: mK4HuKmmBbDf6S46UfCiWEc1CgEksPjdkERpJtWNy1c=
Subject key identifier: 5E:48:39:36:22:3E:46:BB:5A:45:1C:05:D5:65:D4:CF:AC:AC:3A:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B352
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C557388207A811EF8A39DA51017001B1.roa
Signing time: Wed 01 May 2024 10:51:32 +0000
ROA not before: Wed 01 May 2024 10:51:28 +0000
ROA not after: Sat 11 May 2024 10:51:28 +0000
asID: 136933
IP address blocks: 154.213.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45906 (0xb352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 10:51:28 2024 GMT
Not After : May 11 10:51:28 2024 GMT
Subject: CN=66321eb4-ecdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:60:77:d0:4b:4a:d7:a3:93:74:94:ff:65:5f:
fc:10:41:d5:81:44:9a:3c:4c:5a:a4:43:b0:b3:a2:
df:f4:52:1a:37:54:46:a2:e5:78:27:1f:a9:6f:8c:
f0:e3:57:db:d8:98:ea:b1:82:ac:65:b9:bb:3b:63:
81:98:6f:e9:62:6e:3a:a6:b5:1f:69:e2:20:ab:f7:
9c:ec:7c:30:a5:14:3e:9e:3a:1e:b4:c2:1e:4f:7b:
b1:7d:10:a9:97:e0:f3:7f:55:44:14:62:3c:b4:db:
6e:88:e3:ad:8a:39:85:2e:ee:e3:af:c4:c1:97:27:
4e:85:6f:cc:42:61:76:5e:cf:c4:66:4f:de:ea:ca:
6d:fc:54:ca:92:58:3c:da:3d:32:94:71:1a:f8:84:
a8:fe:e6:68:3f:bf:a9:ec:06:e8:ac:00:80:4d:70:
54:4d:34:67:ee:f8:0c:87:53:f4:03:60:b3:5a:ff:
3a:b0:97:aa:bc:c3:d9:60:09:68:83:72:fe:bf:b8:
0e:6b:8e:2d:f6:a7:73:f1:38:95:48:5a:03:3c:fd:
de:18:fd:10:1a:8b:ba:18:50:0c:78:a6:2a:8f:20:
d9:08:6f:4c:15:2f:cb:ea:ab:d9:53:0a:9b:92:c9:
5a:3a:fd:1c:43:74:fc:e9:39:24:77:e1:97:71:08:
73:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:48:39:36:22:3E:46:BB:5A:45:1C:05:D5:65:D4:CF:AC:AC:3A:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C557388207A811EF8A39DA51017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.22.0/24
Signature Algorithm: sha256WithRSAEncryption
90:bc:84:62:66:65:eb:75:07:fa:14:1b:4d:63:ae:01:c1:e8:
03:f5:07:08:25:83:f4:f7:d1:e8:c0:b6:91:13:d9:28:4e:22:
13:e9:c1:de:89:f3:35:c8:ae:cc:e1:54:63:31:2b:50:6d:98:
a4:7f:80:ef:0a:5d:1c:b8:2a:0a:1a:57:76:7c:40:dd:6a:5b:
11:9c:e2:b0:ef:d8:21:b6:09:43:1f:f7:dd:80:50:f0:d4:d5:
29:b9:38:c7:a0:1c:85:75:a3:6b:7b:94:a6:fb:5b:69:85:54:
cf:09:64:36:b7:c4:4f:79:00:54:ff:c5:aa:a3:af:55:74:55:
af:49:c4:5a:22:c6:26:7d:ef:fe:21:b9:82:82:fe:ed:b9:52:
5f:6b:db:5a:8e:d4:53:6f:14:70:53:a6:30:9e:22:43:37:9e:
c3:07:51:47:39:a5:cf:b8:b4:ba:25:e1:5b:dd:42:fd:68:97:
cf:58:7a:ba:f3:81:58:cc:27:35:8d:56:93:8f:4b:29:ec:59:
ae:02:c3:27:7b:85:10:74:a8:21:de:41:fe:5e:8d:90:75:2a:
d7:ea:3d:4d:60:f0:bf:00:c7:a6:d2:58:a6:a1:96:9c:dd:4c:
a4:80:7b:1f:36:72:14:39:4f:bd:0c:4c:67:bc:9d:c3:f4:50:
97:7a:aa:9e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALNSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTAxMTA1MTI4WhcNMjQwNTExMTA1MTI4WjAYMRYw
FAYDVQQDEw02NjMyMWViNC1lY2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx2B30EtK16OTdJT/ZV/8EEHVgUSaPExapEOws6Lf9FIaN1RGouV4Jx+p
b4zw41fb2JjqsYKsZbm7O2OBmG/pYm46prUfaeIgq/ec7HwwpRQ+njoetMIeT3ux
fRCpl+Dzf1VEFGI8tNtuiOOtijmFLu7jr8TBlydOhW/MQmF2Xs/EZk/e6spt/FTK
klg82j0ylHEa+ISo/uZoP7+p7AborACATXBUTTRn7vgMh1P0A2CzWv86sJeqvMPZ
YAlog3L+v7gOa44t9qdz8TiVSFoDPP3eGP0QGou6GFAMeKYqjyDZCG9MFS/L6qvZ
UwqbkslaOv0cQ3T86Tkkd+GXcQhziQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF5I
OTYiPka7WkUcBdVl1M+srDrdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNTU3Mzg4MjA3QTgxMUVGOEEzOURBNTEwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtUWMA0GCSqGSIb3DQEB
CwUAA4IBAQCQvIRiZmXrdQf6FBtNY64BwegD9QcIJYP099HowLaRE9koTiIT6cHe
ifM1yK7M4VRjMStQbZikf4DvCl0cuCoKGld2fEDdalsRnOKw79ghtglDH/fdgFDw
1NUpuTjHoByFdaNre5Sm+1tphVTPCWQ2t8RPeQBU/8Wqo69VdFWvScRaIsYmfe/+
IbmCgv7tuVJfa9tajtRTbxRwU6YwniJDN57DB1FHOaXPuLS6JeFb3UL9aJfPWHq6
84FYzCc1jVaTj0sp7FmuAsMne4UQdKgh3kH+Xo2QdSrX6j1NYPC/AMem0limoZac
3UykgHsfNnIUOU+9DExnvJ3D9FCXeqqe
-----END CERTIFICATE-----
Generated at Sun May 12 02:36:21 2024 by rpki-client on console-ams.rpki-client.org