Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2F8FE3A037911EFA9B0B037017001B1.roa
File: E2F8FE3A037911EFA9B0B037017001B1.roa (raw, json)
Hash identifier: PSQIjmr4eOuDG1R/BF2WU+sz0sVNWt6nLGpigaWiGc0=
Subject key identifier: EE:83:8E:AC:4B:35:D7:03:02:51:C2:08:6E:CB:15:1E:56:58:B7:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B110
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2F8FE3A037911EFA9B0B037017001B1.roa
Signing time: Fri 26 Apr 2024 03:05:51 +0000
ROA not before: Fri 26 Apr 2024 03:05:47 +0000
ROA not after: Tue 14 May 2024 03:05:47 +0000
asID: 133180
IP address blocks: 154.194.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45328 (0xb110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 03:05:47 2024 GMT
Not After : May 14 03:05:47 2024 GMT
Subject: CN=662b1a0e-a5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:e9:92:7a:63:aa:d5:15:56:3c:f4:89:b1:90:
4f:7d:34:e1:69:af:8e:e8:36:d0:d0:2e:b3:49:0c:
16:e0:c5:6b:67:21:2b:9f:1d:28:17:c7:93:e2:ff:
13:0b:ae:92:bf:93:ee:6b:b3:30:fc:9c:36:cb:04:
7b:87:98:a4:b0:65:35:b9:26:b2:ad:48:e0:b5:7c:
57:ae:cb:a2:a4:21:46:6a:0d:4e:55:71:c2:b2:e5:
21:43:42:3b:41:68:2e:a0:b9:55:11:97:6a:26:93:
80:28:44:57:24:7e:71:17:31:df:28:d4:96:e0:48:
77:31:45:73:6e:92:ea:64:58:e8:af:4b:0b:f3:1f:
27:df:b8:86:97:0e:d3:c3:fd:77:3f:37:06:1f:6a:
c5:7b:5c:f7:b9:77:cf:c3:71:85:90:48:19:b4:66:
49:01:c9:7b:ff:34:c6:34:f4:5b:4a:bb:5a:4a:4b:
25:9b:90:44:67:7d:d2:2b:7b:82:de:c9:84:f3:39:
8b:fe:c6:21:96:a7:4b:e7:94:2a:6d:ae:75:52:c1:
5c:38:a6:77:b8:e5:4f:33:5b:3a:c9:6c:28:6a:44:
b9:6e:b1:db:6b:00:a4:75:c8:1d:ad:69:f3:46:69:
0f:69:cd:5d:32:64:d9:84:32:2c:fe:72:62:49:25:
6a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:83:8E:AC:4B:35:D7:03:02:51:C2:08:6E:CB:15:1E:56:58:B7:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2F8FE3A037911EFA9B0B037017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.128.0/18
Signature Algorithm: sha256WithRSAEncryption
76:da:35:28:1d:23:2a:9c:45:41:cf:0d:35:a0:14:97:95:7e:
3d:dd:9e:16:86:f5:2c:64:00:b6:e0:b6:44:ad:b9:d0:fa:d1:
2b:03:b3:5a:a7:c5:eb:69:6d:99:75:f7:e3:c5:69:1e:7f:a2:
4d:76:99:cb:2a:d0:2d:79:27:74:85:aa:16:5c:8d:3b:56:d7:
c7:be:74:74:ee:8a:76:5f:1d:c2:bf:0d:0b:78:aa:d2:28:e3:
70:12:e8:e0:25:f5:e5:bb:4a:43:97:f3:0c:9e:f2:b3:0d:37:
0d:bf:91:a0:47:35:44:f1:b6:b7:62:e1:16:6f:70:a3:e8:5e:
72:c1:48:a4:5c:65:01:66:52:ed:1d:7a:89:c1:42:cb:f1:22:
0c:76:af:0c:37:18:b5:b7:b9:a2:e5:81:22:88:78:ab:cd:3d:
5c:47:1d:3c:f1:bb:3b:f3:44:b4:a0:57:57:8a:ca:fe:43:e8:
25:5c:87:d9:d3:f4:9c:3f:80:73:1a:d8:15:72:b7:0a:9e:07:
fa:f4:b3:c0:02:52:53:e8:19:1d:70:14:53:0a:30:d0:c9:cf:
01:1f:01:8d:60:91:12:44:42:6e:08:c8:0c:e1:47:6c:37:50:
a9:13:95:74:b9:3f:50:f3:f8:1c:28:2b:37:50:c8:75:2f:98:
58:2d:60:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALEQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDI2MDMwNTQ3WhcNMjQwNTE0MDMwNTQ3WjAYMRYw
FAYDVQQDEw02NjJiMWEwZS1hNWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA+emSemOq1RVWPPSJsZBPfTThaa+O6DbQ0C6zSQwW4MVrZyErnx0oF8eT
4v8TC66Sv5Pua7Mw/Jw2ywR7h5iksGU1uSayrUjgtXxXrsuipCFGag1OVXHCsuUh
Q0I7QWguoLlVEZdqJpOAKERXJH5xFzHfKNSW4Eh3MUVzbpLqZFjor0sL8x8n37iG
lw7Tw/13PzcGH2rFe1z3uXfPw3GFkEgZtGZJAcl7/zTGNPRbSrtaSkslm5BEZ33S
K3uC3smE8zmL/sYhlqdL55Qqba51UsFcOKZ3uOVPM1s6yWwoakS5brHbawCkdcgd
rWnzRmkPac1dMmTZhDIs/nJiSSVqvwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFO6D
jqxLNdcDAlHCCG7LFR5WWLdnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMkY4RkUzQTAzNzkxMUVGQTlCMEIwMzcwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmsKAMA0GCSqGSIb3DQEB
CwUAA4IBAQB22jUoHSMqnEVBzw01oBSXlX493Z4WhvUsZAC24LZErbnQ+tErA7Na
p8XraW2ZdffjxWkef6JNdpnLKtAteSd0haoWXI07VtfHvnR07op2Xx3Cvw0LeKrS
KONwEujgJfXlu0pDl/MMnvKzDTcNv5GgRzVE8ba3YuEWb3Cj6F5ywUikXGUBZlLt
HXqJwULL8SIMdq8MNxi1t7mi5YEiiHirzT1cRx088bs780S0oFdXisr+Q+glXIfZ
0/ScP4BzGtgVcrcKngf69LPAAlJT6BkdcBRTCjDQyc8BHwGNYJESREJuCMgM4Uds
N1CpE5V0uT9Q8/gcKCs3UMh1L5hYLWDd
-----END CERTIFICATE-----
Generated at Tue May 14 08:18:29 2024 by rpki-client on console-ams.rpki-client.org