Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBE2B58E0DC711EF80289333017001B1.roa
File: DBE2B58E0DC711EF80289333017001B1.roa (raw, json)
Hash identifier: 3PMBBIMya1PpkP5asUAbQMwPOZHWXuyn4X4XvyAOIE4=
Subject key identifier: 3F:10:6B:FD:11:4A:1D:DF:F1:72:58:E3:1C:68:53:22:64:62:01:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B609
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBE2B58E0DC711EF80289333017001B1.roa
Signing time: Thu 09 May 2024 05:49:11 +0000
ROA not before: Thu 09 May 2024 05:49:08 +0000
ROA not after: Sun 19 May 2024 05:49:08 +0000
asID: 5065
IP address blocks: 154.94.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46601 (0xb609)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 05:49:08 2024 GMT
Not After : May 19 05:49:08 2024 GMT
Subject: CN=663c63d7-62de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:e9:6b:80:99:2e:3f:f7:36:f1:33:1c:b7:
1e:df:ed:ff:48:ff:51:32:3d:62:58:46:9f:06:f3:
2d:54:ee:d6:c7:4c:e0:42:14:f6:e3:d7:9b:18:73:
c4:66:32:f3:ca:48:54:53:e0:a3:d6:5f:37:f1:a5:
56:72:da:af:82:d9:60:b6:02:5b:85:b6:6d:44:ae:
4e:df:02:ec:2d:bc:36:d9:02:13:d1:45:9b:88:84:
0f:90:d1:23:04:48:74:6d:43:6b:b9:72:e1:56:1f:
c6:e3:d4:50:94:1e:b6:94:e6:d7:9e:c9:07:3a:0c:
18:fa:96:26:a3:d5:94:cc:f0:0f:64:65:6b:83:e6:
8f:44:01:8f:4a:dc:c0:1d:85:64:10:8f:1a:5c:0e:
8e:e1:f1:14:68:e0:58:f8:73:67:83:79:39:30:0e:
fc:47:a2:7f:db:eb:ee:07:5d:06:7b:af:e8:83:f3:
6d:ea:f4:fb:f7:fd:18:b5:49:67:2a:4a:2a:a8:4d:
0e:ef:99:a7:c5:cf:d3:d9:38:b9:87:e8:3f:44:2f:
fe:c6:35:af:f6:c1:24:89:d4:1b:23:65:88:c8:a7:
9d:ab:dd:29:3d:cc:2e:ca:e2:13:a1:e1:72:14:1f:
c8:af:e4:ff:94:bf:84:c1:a6:41:6c:75:87:4f:62:
c9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:10:6B:FD:11:4A:1D:DF:F1:72:58:E3:1C:68:53:22:64:62:01:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBE2B58E0DC711EF80289333017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.53.0/24
Signature Algorithm: sha256WithRSAEncryption
58:1c:b2:d9:c4:ec:19:aa:59:4e:89:08:1e:9d:04:8c:0f:35:
80:dc:3f:59:07:d4:b1:a1:b5:12:06:58:80:d3:66:3f:54:01:
b1:29:94:d3:b7:93:08:19:b0:95:94:fd:f4:6f:9c:1e:9a:40:
c9:27:4a:37:6f:02:5e:2a:3a:90:9e:58:2c:8d:e0:06:f7:1d:
7f:9d:2d:47:dd:b9:27:2a:a9:09:61:11:e8:9d:65:33:6d:5f:
bd:e3:6c:9a:e7:69:70:eb:6c:55:5d:fd:5d:de:e5:44:0a:a6:
9d:c7:8a:68:30:0b:7e:de:bc:91:82:ff:3b:6d:e9:f1:53:8d:
83:cb:81:52:9e:03:43:c1:b7:ad:b3:ea:17:d8:3c:f2:59:ed:
94:f5:d2:0d:a8:8f:ac:2c:da:60:2d:8d:3e:67:8e:b5:30:1e:
fb:9d:92:63:c0:91:9d:01:18:0f:a3:36:c5:ab:e0:43:a9:1c:
1d:cc:39:20:83:fe:ed:1c:5d:8f:10:c8:6c:58:4f:f0:cf:1f:
0f:cd:9b:b1:60:00:95:8b:73:9a:03:11:52:bf:ac:1e:fb:09:
19:a9:9e:df:fa:0b:63:1b:a6:ab:04:4a:cc:65:16:22:17:e1:
ed:b3:4d:56:6c:f1:f3:f6:65:2a:f9:1b:98:b5:b0:b6:e8:d3:
66:4c:3c:93
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALYJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA5MDU0OTA4WhcNMjQwNTE5MDU0OTA4WjAYMRYw
FAYDVQQDEw02NjNjNjNkNy02MmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvznpa4CZLj/3NvEzHLce3+3/SP9RMj1iWEafBvMtVO7Wx0zgQhT249eb
GHPEZjLzykhUU+Cj1l838aVWctqvgtlgtgJbhbZtRK5O3wLsLbw22QIT0UWbiIQP
kNEjBEh0bUNruXLhVh/G49RQlB62lObXnskHOgwY+pYmo9WUzPAPZGVrg+aPRAGP
StzAHYVkEI8aXA6O4fEUaOBY+HNng3k5MA78R6J/2+vuB10Ge6/og/Nt6vT79/0Y
tUlnKkoqqE0O75mnxc/T2Ti5h+g/RC/+xjWv9sEkidQbI2WIyKedq90pPcwuyuIT
oeFyFB/Ir+T/lL+EwaZBbHWHT2LJ3wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFD8Q
a/0RSh3f8XJY4xxoUyJkYgGtMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQkUyQjU4RTBEQzcxMUVGODAyODkzMzMwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml41MA0GCSqGSIb3DQEB
CwUAA4IBAQBYHLLZxOwZqllOiQgenQSMDzWA3D9ZB9SxobUSBliA02Y/VAGxKZTT
t5MIGbCVlP30b5wemkDJJ0o3bwJeKjqQnlgsjeAG9x1/nS1H3bknKqkJYRHonWUz
bV+942ya52lw62xVXf1d3uVECqadx4poMAt+3ryRgv87benxU42Dy4FSngNDwbet
s+oX2DzyWe2U9dINqI+sLNpgLY0+Z461MB77nZJjwJGdARgPozbFq+BDqRwdzDkg
g/7tHF2PEMhsWE/wzx8PzZuxYACVi3OaAxFSv6we+wkZqZ7f+gtjG6arBErMZRYi
F+Hts01WbPHz9mUq+RuYtbC26NNmTDyT
-----END CERTIFICATE-----
Generated at Mon May 20 01:57:15 2024 by rpki-client on console-ams.rpki-client.org