Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEB57EBC060D11EFB170E141017001B1.roa
File: CEB57EBC060D11EFB170E141017001B1.roa (raw, json)
Hash identifier: hPJDbrEgvAgK+c/q3rolXlZo07cAxZ3u2g3PLQ7kcZw=
Subject key identifier: A2:DB:55:AF:BC:35:5C:60:5E:E4:67:AD:E9:32:A0:CA:80:3C:24:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B214
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEB57EBC060D11EFB170E141017001B1.roa
Signing time: Mon 29 Apr 2024 09:49:45 +0000
ROA not before: Mon 29 Apr 2024 09:49:41 +0000
ROA not after: Wed 15 May 2024 09:49:41 +0000
asID: 5065
IP address blocks: 154.90.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45588 (0xb214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 09:49:41 2024 GMT
Not After : May 15 09:49:41 2024 GMT
Subject: CN=662f6d38-6ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2b:b3:58:22:02:45:d9:66:86:9c:ae:30:e3:
5c:51:78:29:1c:d7:53:47:5b:d5:36:17:2a:49:bc:
25:4e:fd:ff:8f:4c:26:56:73:1e:7f:80:cf:71:a5:
0a:dc:e0:7b:5d:61:0a:c1:31:b9:bc:8b:d5:fb:00:
a1:cd:91:84:e9:26:2e:a1:2f:43:ce:51:03:06:1f:
6e:3f:39:13:f4:04:7c:71:f4:9e:95:52:83:42:ae:
c2:63:15:75:0c:66:5f:12:57:9f:1c:87:a9:8e:e8:
00:44:22:de:2d:38:3a:74:ff:f6:0d:38:67:67:61:
33:ed:0b:62:ef:99:e6:1c:2e:28:92:f1:9f:5a:15:
3b:d8:58:ed:29:05:a8:0d:70:51:32:7b:46:21:26:
78:93:c0:0d:0f:af:e1:b2:82:aa:81:c3:0f:eb:8d:
70:d9:6e:84:8a:de:27:86:e5:60:4c:8e:cf:07:c5:
87:ba:b3:38:6e:80:32:b7:83:ed:bb:13:00:c2:f2:
66:13:92:0f:d0:9f:7a:3d:aa:5a:80:55:d6:b2:e9:
b0:c0:72:d0:7b:e9:55:fc:93:e6:c0:6d:d5:d9:ff:
1d:8c:b4:f0:08:e5:9c:8e:32:c5:39:9d:c2:b8:b0:
b6:54:cc:be:cb:24:66:78:fe:1c:5f:e9:b2:6c:3b:
9b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DB:55:AF:BC:35:5C:60:5E:E4:67:AD:E9:32:A0:CA:80:3C:24:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEB57EBC060D11EFB170E141017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.24.0/22
Signature Algorithm: sha256WithRSAEncryption
cc:88:02:2b:4b:52:16:ea:6f:ec:87:05:6c:21:3e:1f:70:ca:
a4:45:a5:92:61:ce:f6:6b:64:b2:38:30:86:af:86:3e:80:79:
73:73:03:01:22:7b:69:d2:38:b6:48:3d:7d:f9:d3:5b:dc:6d:
8c:1e:74:37:ec:4e:f9:ae:69:c0:48:0d:09:c6:e0:d5:31:51:
a1:fb:a3:ae:22:61:ef:6c:23:c9:1e:55:2e:55:79:68:cf:42:
38:36:ba:d3:3d:5a:7c:ce:ff:af:2b:da:29:3a:49:d0:db:b2:
a7:51:9d:3f:1b:14:3a:3f:55:96:ad:7d:08:1d:26:83:4f:5d:
d6:fe:89:d3:2b:53:fc:f1:af:03:c7:92:7f:8b:90:8b:26:ef:
22:3f:39:a0:3f:00:80:2b:93:05:5a:64:0b:89:60:20:9e:cf:
ca:c1:5d:00:07:fb:31:00:d0:ec:01:4d:02:9d:74:ce:cd:34:
20:3b:1a:80:2d:2b:6d:6d:ad:86:1e:2d:72:e0:29:79:78:38:
ed:d5:0f:e4:a4:51:5d:48:11:22:69:fe:8d:ba:b0:d2:89:08:
c5:bc:f8:9e:52:df:26:2d:51:01:ef:c3:ec:3f:8f:d0:10:6a:
ef:99:b2:f7:27:f5:37:5b:de:0b:cd:b1:33:e8:45:f2:5a:38:
a8:12:fe:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALIUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDI5MDk0OTQxWhcNMjQwNTE1MDk0OTQxWjAYMRYw
FAYDVQQDEw02NjJmNmQzOC02ZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1iuzWCICRdlmhpyuMONcUXgpHNdTR1vVNhcqSbwlTv3/j0wmVnMef4DP
caUK3OB7XWEKwTG5vIvV+wChzZGE6SYuoS9DzlEDBh9uPzkT9AR8cfSelVKDQq7C
YxV1DGZfElefHIepjugARCLeLTg6dP/2DThnZ2Ez7Qti75nmHC4okvGfWhU72Fjt
KQWoDXBRMntGISZ4k8AND6/hsoKqgcMP641w2W6Eit4nhuVgTI7PB8WHurM4boAy
t4PtuxMAwvJmE5IP0J96PapagFXWsumwwHLQe+lV/JPmwG3V2f8djLTwCOWcjjLF
OZ3CuLC2VMy+yyRmeP4cX+mybDubXQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKLb
Va+8NVxgXuRnrekyoMqAPCQZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DRUI1N0VCQzA2MEQxMUVGQjE3MEUxNDEwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmloYMA0GCSqGSIb3DQEB
CwUAA4IBAQDMiAIrS1IW6m/shwVsIT4fcMqkRaWSYc72a2SyODCGr4Y+gHlzcwMB
Intp0ji2SD19+dNb3G2MHnQ37E75rmnASA0JxuDVMVGh+6OuImHvbCPJHlUuVXlo
z0I4NrrTPVp8zv+vK9opOknQ27KnUZ0/GxQ6P1WWrX0IHSaDT13W/onTK1P88a8D
x5J/i5CLJu8iPzmgPwCAK5MFWmQLiWAgns/KwV0AB/sxANDsAU0CnXTOzTQgOxqA
LSttba2GHi1y4Cl5eDjt1Q/kpFFdSBEiaf6NurDSiQjFvPieUt8mLVEB78PsP4/Q
EGrvmbL3J/U3W94LzbEz6EXyWjioEv6Y
-----END CERTIFICATE-----
Generated at Thu May 16 01:35:16 2024 by rpki-client on console-fra.rpki-client.org