Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5BC360C0DBD11EF8B57EA62017001B1.roa
File: E5BC360C0DBD11EF8B57EA62017001B1.roa (raw, json)
Hash identifier: zFS43xDchxhg+PO/yq9VvrzJyAO9+6aSdJrm+q1++Bc=
Subject key identifier: E5:24:B6:27:A9:52:B6:D4:45:9A:D6:77:9E:13:E2:48:BE:F1:79:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B5DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5BC360C0DBD11EF8B57EA62017001B1.roa
Signing time: Thu 09 May 2024 04:37:53 +0000
ROA not before: Thu 09 May 2024 04:37:49 +0000
ROA not after: Sun 19 May 2024 04:37:49 +0000
asID: 39600
IP address blocks: 154.94.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46557 (0xb5dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 04:37:49 2024 GMT
Not After : May 19 04:37:49 2024 GMT
Subject: CN=663c5320-8cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:82:b1:44:a6:eb:38:b3:5f:e2:4f:32:1c:
eb:c7:c4:42:e8:f5:b7:ab:a5:e4:62:5d:1c:6a:dd:
f6:38:1e:28:1d:b8:04:be:1d:f6:c8:d7:49:ca:14:
92:24:5e:90:cd:65:4e:51:bc:1d:df:c5:9e:29:bd:
dc:62:d3:56:25:e1:d5:87:f6:b1:9d:e8:89:20:82:
6e:40:75:c1:58:3f:e8:86:4f:80:e2:90:4e:82:a0:
64:50:07:56:ae:d2:8b:b8:f6:40:26:5f:5c:11:d4:
d7:10:38:8b:98:95:a3:13:30:0d:7b:c1:80:29:df:
d1:fa:41:d6:37:78:df:8d:32:5c:f4:38:69:f9:c7:
e7:99:39:4a:e5:e5:92:72:e5:44:97:70:9d:23:26:
aa:35:b2:e0:a6:c2:b0:6b:09:01:20:6c:2d:c7:44:
5e:e7:94:a8:1b:af:58:eb:ee:23:d5:25:16:ab:e0:
25:79:70:f7:7a:f9:70:7c:0f:52:27:8b:a4:bc:04:
e7:85:e2:d3:ad:1e:cc:23:56:c7:23:00:37:e5:d4:
46:c2:e5:2d:6d:e6:0c:05:26:6a:e3:a6:13:21:ea:
0c:c0:a3:2d:1e:69:69:03:ba:50:fa:75:c9:a2:69:
12:dd:a8:42:cf:e3:8c:0c:b1:21:0c:69:a0:22:41:
59:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:24:B6:27:A9:52:B6:D4:45:9A:D6:77:9E:13:E2:48:BE:F1:79:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5BC360C0DBD11EF8B57EA62017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.51.0/24
Signature Algorithm: sha256WithRSAEncryption
12:18:28:d0:06:99:1e:03:e0:5a:1a:05:d0:c4:6a:92:a8:d0:
b6:84:20:fa:9c:3d:53:4c:41:91:ea:25:2b:4b:8a:d3:47:eb:
0b:9b:0b:94:a6:ed:35:c1:cc:76:8e:a9:20:a7:4e:7b:8d:b7:
eb:18:97:3e:e2:e6:41:5d:be:53:74:22:bc:aa:e5:c6:fc:76:
91:40:78:80:a4:9d:fb:b8:1d:6a:d0:b5:fd:83:88:9c:57:b7:
1d:5b:53:05:b5:7a:7c:2b:bf:f5:c7:83:68:e9:09:41:4a:b8:
55:38:ee:2c:52:7c:ee:59:8e:69:90:11:69:2b:02:08:77:38:
04:24:2c:3c:bb:6f:1e:6e:ac:27:96:d9:7f:2b:c6:d2:9b:28:
a7:73:a4:63:0d:a7:18:65:42:55:a7:80:9b:9e:48:c5:7c:28:
5b:53:5f:9e:5e:9e:5a:7f:6a:1f:0f:c1:2c:74:01:cb:a4:f2:
0e:6e:9b:e3:fc:bc:e6:73:36:05:01:7f:23:e6:04:de:29:93:
2e:e0:aa:f0:ed:53:50:71:cb:0a:7f:51:7c:c3:bb:46:c3:da:
4b:70:29:90:79:e6:96:26:e7:41:90:7b:5a:14:59:b5:67:5e:
af:28:8f:45:04:dc:eb:e3:c3:61:53:16:64:e2:ff:76:1f:7e:
d0:e7:c4:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALXdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA5MDQzNzQ5WhcNMjQwNTE5MDQzNzQ5WjAYMRYw
FAYDVQQDEw02NjNjNTMyMC04Y2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnwCCsUSm6zizX+JPMhzrx8RC6PW3q6XkYl0cat32OB4oHbgEvh32yNdJ
yhSSJF6QzWVOUbwd38WeKb3cYtNWJeHVh/axneiJIIJuQHXBWD/ohk+A4pBOgqBk
UAdWrtKLuPZAJl9cEdTXEDiLmJWjEzANe8GAKd/R+kHWN3jfjTJc9Dhp+cfnmTlK
5eWScuVEl3CdIyaqNbLgpsKwawkBIGwtx0Re55SoG69Y6+4j1SUWq+AleXD3evlw
fA9SJ4ukvATnheLTrR7MI1bHIwA35dRGwuUtbeYMBSZq46YTIeoMwKMtHmlpA7pQ
+nXJomkS3ahCz+OMDLEhDGmgIkFZJwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOUk
tiepUrbURZrWd54T4ki+8XnpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNUJDMzYwQzBEQkQxMUVGOEI1N0VBNjIwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml4zMA0GCSqGSIb3DQEB
CwUAA4IBAQASGCjQBpkeA+BaGgXQxGqSqNC2hCD6nD1TTEGR6iUrS4rTR+sLmwuU
pu01wcx2jqkgp057jbfrGJc+4uZBXb5TdCK8quXG/HaRQHiApJ37uB1q0LX9g4ic
V7cdW1MFtXp8K7/1x4No6QlBSrhVOO4sUnzuWY5pkBFpKwIIdzgEJCw8u28ebqwn
ltl/K8bSmyinc6RjDacYZUJVp4CbnkjFfChbU1+eXp5af2ofD8EsdAHLpPIObpvj
/LzmczYFAX8j5gTeKZMu4Krw7VNQccsKf1F8w7tGw9pLcCmQeeaWJudBkHtaFFm1
Z16vKI9FBNzr48NhUxZk4v92H37Q58Ss
-----END CERTIFICATE-----
Generated at Mon May 20 01:57:49 2024 by rpki-client on console-fra.rpki-client.org