Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF2A9FAE014C11EF985D62FE007001B1.roa
File: DF2A9FAE014C11EF985D62FE007001B1.roa (raw, json)
Hash identifier: /LpyVtRBaQ/8uLlNJmBBEKf36n7FBSm8/juMp9r9Cd4=
Subject key identifier: 84:09:A4:32:80:48:D0:DB:DC:07:DA:63:BC:29:14:17:61:ED:C0:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AF23
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF2A9FAE014C11EF985D62FE007001B1.roa
Signing time: Tue 23 Apr 2024 08:38:35 +0000
ROA not before: Tue 23 Apr 2024 08:38:31 +0000
ROA not after: Sun 26 May 2024 08:38:31 +0000
asID: 18013
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44835 (0xaf23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 08:38:31 2024 GMT
Not After : May 26 08:38:31 2024 GMT
Subject: CN=6627738a-6295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cf:81:4b:59:96:85:0a:cc:79:2d:b9:9e:a9:
2e:0b:e3:5c:d4:aa:e6:7c:39:46:c7:32:af:ff:35:
83:47:f3:21:87:92:ff:2a:de:18:a6:3d:f0:50:6f:
0b:07:e8:2a:87:d4:e4:26:c1:2f:fb:11:12:c1:0c:
ed:7d:1a:ba:e6:74:7f:75:6d:06:3e:2b:f6:73:74:
20:0f:77:94:62:e0:46:f1:c0:a2:3d:4c:50:63:c4:
22:15:be:62:3c:3f:94:dc:c2:13:d5:bb:ab:ac:6a:
e5:48:ee:fc:d6:83:7f:0d:76:76:66:a8:b8:ba:1f:
5e:ab:01:f5:64:cd:cb:c9:7e:f5:6c:cd:24:cc:03:
e9:02:79:da:47:86:e7:48:ed:71:5d:bd:30:27:8a:
fd:af:ca:b7:c5:d5:5b:15:62:b9:49:27:c1:ae:f6:
3d:ce:2a:ac:61:03:0a:fb:c3:29:be:7d:90:62:1a:
cd:e7:f9:29:99:da:5b:d8:27:bc:44:03:66:20:ab:
bf:02:4a:d7:13:30:be:cf:ad:ec:bb:10:e7:d8:43:
67:9a:c1:81:1a:87:d4:03:21:67:67:db:b0:15:54:
dc:c3:a8:5d:03:40:81:0e:b8:27:29:a6:fa:26:a8:
b7:9b:88:dd:0e:0a:6f:d6:64:55:2e:4d:0a:17:e0:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:09:A4:32:80:48:D0:DB:DC:07:DA:63:BC:29:14:17:61:ED:C0:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF2A9FAE014C11EF985D62FE007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
61:52:b6:3b:27:dd:1a:32:ca:60:a4:f8:b9:03:76:47:b0:03:
9e:2b:e0:8e:5d:35:d9:c8:34:29:e9:db:7b:f3:5d:5c:82:d1:
3c:05:ba:40:8d:12:65:6d:5e:e6:c3:08:a7:01:0f:b1:a4:f3:
2b:57:e8:bb:0e:8e:d7:57:c2:14:17:03:a6:1c:59:d0:46:6a:
c9:85:47:eb:b8:69:bb:48:f8:29:2c:ff:21:dd:29:09:50:45:
c3:34:d6:fb:91:91:fe:05:cb:c0:7d:da:ac:ad:fe:35:8a:87:
1f:f1:ae:2e:3b:37:c2:19:76:eb:6f:5a:fb:e1:67:11:c3:3b:
9b:ab:f6:a9:98:62:3e:fc:fb:b8:ca:99:aa:2c:32:e1:e1:dd:
6d:49:99:81:7d:72:15:5c:4f:db:a2:2f:62:e7:e1:70:a0:97:
3c:85:37:6c:f4:f3:cf:a7:50:a8:31:da:6f:02:f8:1e:64:29:
d5:25:36:d7:58:1c:56:a0:a3:12:a6:d8:a0:ee:cf:6d:e9:5f:
85:9b:25:65:09:48:f1:8f:74:09:94:69:38:46:9b:58:c3:8a:
0e:86:40:4d:49:5e:01:e7:b6:f7:28:d5:51:e9:43:4b:bd:51:
98:5a:e5:73:72:e6:aa:bb:3e:27:d1:4d:7f:8d:45:f5:45:73:
03:74:77:70
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK8jMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDIzMDgzODMxWhcNMjQwNTI2MDgzODMxWjAYMRYw
FAYDVQQDEw02NjI3NzM4YS02Mjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4M+BS1mWhQrMeS25nqkuC+Nc1KrmfDlGxzKv/zWDR/Mhh5L/Kt4Ypj3w
UG8LB+gqh9TkJsEv+xESwQztfRq65nR/dW0GPiv2c3QgD3eUYuBG8cCiPUxQY8Qi
Fb5iPD+U3MIT1burrGrlSO781oN/DXZ2Zqi4uh9eqwH1ZM3LyX71bM0kzAPpAnna
R4bnSO1xXb0wJ4r9r8q3xdVbFWK5SSfBrvY9ziqsYQMK+8Mpvn2QYhrN5/kpmdpb
2Ce8RANmIKu/AkrXEzC+z63suxDn2ENnmsGBGofUAyFnZ9uwFVTcw6hdA0CBDrgn
Kab6Jqi3m4jdDgpv1mRVLk0KF+C89QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIQJ
pDKASNDb3AfaY7wpFBdh7cCKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ERjJBOUZBRTAxNEMxMUVGOTg1RDYyRkUwMDcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmslAMA0GCSqGSIb3DQEB
CwUAA4IBAQBhUrY7J90aMspgpPi5A3ZHsAOeK+COXTXZyDQp6dt7811cgtE8BbpA
jRJlbV7mwwinAQ+xpPMrV+i7Do7XV8IUFwOmHFnQRmrJhUfruGm7SPgpLP8h3SkJ
UEXDNNb7kZH+BcvAfdqsrf41iocf8a4uOzfCGXbrb1r74WcRwzubq/apmGI+/Pu4
ypmqLDLh4d1tSZmBfXIVXE/boi9i5+FwoJc8hTds9PPPp1CoMdpvAvgeZCnVJTbX
WBxWoKMSptig7s9t6V+FmyVlCUjxj3QJlGk4RptYw4oOhkBNSV4B57b3KNVR6UNL
vVGYWuVzcuaquz4n0U1/jUX1RXMDdHdw
-----END CERTIFICATE-----
Generated at Mon May 27 03:45:17 2024 by rpki-client on console-ams.rpki-client.org