Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAD85968088C11EF8BFCA913017001B1.roa
File: DAD85968088C11EF8BFCA913017001B1.roa (raw, json)
Hash identifier: PvtAtA1yedh/WCk4fMbnfLZc0nKHjd0iUnFRiIdI1nE=
Subject key identifier: FA:17:27:02:3A:CF:BC:AB:84:13:75:FB:41:14:81:0E:44:2D:2C:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B404
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAD85968088C11EF8BFCA913017001B1.roa
Signing time: Thu 02 May 2024 14:04:13 +0000
ROA not before: Thu 02 May 2024 14:04:10 +0000
ROA not after: Sat 11 May 2024 14:04:10 +0000
asID: 39600
IP address blocks: 154.202.72.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46084 (0xb404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 14:04:10 2024 GMT
Not After : May 11 14:04:10 2024 GMT
Subject: CN=66339d5d-4f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7d:a2:07:2b:50:2a:c4:b3:c5:3a:ec:28:d6:
3a:2c:fd:1d:19:67:60:ea:2d:17:cd:bd:72:7d:e2:
8e:50:49:e5:0d:16:1b:b9:b2:b6:f8:51:44:e8:18:
1d:7f:0c:2b:2d:3b:fb:6e:7b:df:cc:ce:9d:45:8f:
3a:3b:37:40:a1:f6:ca:3d:1f:04:8c:86:de:cf:b8:
d6:9f:fe:95:be:7f:76:c9:14:7e:bb:c5:36:da:de:
f8:af:1a:3f:40:56:c3:c6:d4:63:4c:a6:9a:68:20:
fd:b4:e8:b0:c1:e9:8b:56:2e:b9:f3:3e:a0:7c:d4:
5c:48:b2:d5:59:87:35:36:a7:db:3a:f0:e8:70:33:
15:24:93:a2:ef:f7:76:30:b8:a3:b3:67:9c:69:a3:
b4:54:44:fb:08:d4:c3:10:19:a1:31:4b:96:6b:4b:
af:55:85:d1:f7:70:f5:2b:45:a6:01:dd:78:cc:3f:
c5:39:f1:82:60:65:0a:d8:2d:e7:66:7f:1b:20:25:
06:8b:c3:8d:9a:1d:7c:29:c0:0a:f2:36:a8:3d:a1:
e2:0e:07:bd:95:17:98:e2:81:a7:db:7a:13:90:78:
76:9c:17:ea:24:1c:b9:13:22:0a:91:2a:94:ac:3a:
b1:a5:ad:0b:89:36:66:04:59:3d:22:74:f1:42:cb:
94:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:17:27:02:3A:CF:BC:AB:84:13:75:FB:41:14:81:0E:44:2D:2C:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAD85968088C11EF8BFCA913017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.72.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:52:7a:7b:b7:33:83:40:9f:cd:fa:ec:4b:01:dd:cc:58:8b:
91:02:6d:d8:4e:1d:69:68:c1:55:99:67:09:3a:ec:73:61:be:
93:7e:e1:ec:85:77:cd:50:2e:e5:ab:1d:f3:70:38:8d:ef:9b:
98:3d:65:68:3a:1c:4e:9b:eb:5b:17:de:69:62:5b:16:3d:ee:
b7:1c:e3:e4:29:f4:0d:fd:3a:eb:c0:97:43:30:94:7f:a2:e7:
58:65:f0:34:be:ee:39:75:48:49:32:1a:5c:83:e5:3b:c5:31:
41:c2:da:65:f4:95:f3:ab:34:2e:7a:97:5f:76:ed:21:a5:ba:
52:1c:dc:f8:a3:e2:2a:c3:58:de:8b:a0:0d:5b:d1:9a:1e:d5:
88:c1:78:9f:27:ac:44:68:20:42:87:07:74:0d:c4:d2:0d:56:
42:4e:30:d2:b1:1f:44:27:fb:43:f4:d4:2b:ec:4b:de:66:44:
14:27:a8:44:42:ee:85:a6:86:40:05:71:3c:00:53:6e:91:d6:
16:b0:f9:a5:7a:c2:8d:f5:e1:ff:af:85:d4:e1:da:50:41:f6:
d2:82:57:55:07:68:2d:1e:93:e2:41:e5:aa:a6:f3:5b:18:73:
08:c1:24:e4:88:a4:81:06:77:27:ca:45:06:a4:bc:9a:dd:ad:
53:a0:67:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALQEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTAyMTQwNDEwWhcNMjQwNTExMTQwNDEwWjAYMRYw
FAYDVQQDEw02NjMzOWQ1ZC00Zjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8H2iBytQKsSzxTrsKNY6LP0dGWdg6i0Xzb1yfeKOUEnlDRYbubK2+FFE
6BgdfwwrLTv7bnvfzM6dRY86OzdAofbKPR8EjIbez7jWn/6Vvn92yRR+u8U22t74
rxo/QFbDxtRjTKaaaCD9tOiwwemLVi658z6gfNRcSLLVWYc1NqfbOvDocDMVJJOi
7/d2MLijs2ecaaO0VET7CNTDEBmhMUuWa0uvVYXR93D1K0WmAd14zD/FOfGCYGUK
2C3nZn8bICUGi8ONmh18KcAK8jaoPaHiDge9lReY4oGn23oTkHh2nBfqJBy5EyIK
kSqUrDqxpa0LiTZmBFk9InTxQsuUEQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPoX
JwI6z7yrhBN1+0EUgQ5ELSzCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQUQ4NTk2ODA4OEMxMUVGOEJGQ0E5MTMwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmspIMA0GCSqGSIb3DQEB
CwUAA4IBAQCaUnp7tzODQJ/N+uxLAd3MWIuRAm3YTh1paMFVmWcJOuxzYb6TfuHs
hXfNUC7lqx3zcDiN75uYPWVoOhxOm+tbF95pYlsWPe63HOPkKfQN/TrrwJdDMJR/
oudYZfA0vu45dUhJMhpcg+U7xTFBwtpl9JXzqzQuepdfdu0hpbpSHNz4o+Iqw1je
i6ANW9GaHtWIwXifJ6xEaCBChwd0DcTSDVZCTjDSsR9EJ/tD9NQr7EveZkQUJ6hE
Qu6FpoZABXE8AFNukdYWsPmlesKN9eH/r4XU4dpQQfbSgldVB2gtHpPiQeWqpvNb
GHMIwSTkiKSBBncnykUGpLya3a1ToGfw
-----END CERTIFICATE-----
Generated at Sun May 12 02:36:22 2024 by rpki-client on console-ams.rpki-client.org