Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E65944E8088A11EFA2E05B03017001B1.roa
File: E65944E8088A11EFA2E05B03017001B1.roa (raw, json)
Hash identifier: wVh6ROePFnwAkPhcHH01x1Wa/bMizs+4mrcg0Rv6tWA=
Subject key identifier: 92:C7:3D:CE:51:F0:36:DD:F7:37:AF:73:82:93:07:3D:2F:CC:AB:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B3FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E65944E8088A11EFA2E05B03017001B1.roa
Signing time: Thu 02 May 2024 13:50:13 +0000
ROA not before: Thu 02 May 2024 13:50:10 +0000
ROA not after: Sun 12 May 2024 13:50:10 +0000
asID: 39600
IP address blocks: 154.94.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46074 (0xb3fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 13:50:10 2024 GMT
Not After : May 12 13:50:10 2024 GMT
Subject: CN=66339a15-6998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2e:45:c3:87:c2:f3:4f:b7:49:e6:82:b2:51:
77:ea:0d:15:50:b6:08:1d:13:e4:6c:b7:94:14:4d:
96:eb:80:0a:51:ae:2b:21:84:4c:08:f8:4c:97:f1:
cb:d8:d7:ed:52:89:94:15:d5:6a:69:e4:2b:0f:e3:
f7:11:6c:1f:14:c3:da:61:0e:b6:7c:ce:50:ab:5d:
2b:03:67:d7:41:58:82:ff:af:eb:00:67:a8:4f:64:
e6:bb:b1:4f:fd:2f:70:04:a4:e3:ec:29:75:90:72:
b2:38:d2:2a:0d:04:90:1b:8a:ae:ef:f6:ce:54:c1:
e0:c2:52:b2:a1:57:e1:84:33:66:36:43:93:5f:3b:
cc:32:b9:dc:82:3b:44:06:a5:81:2c:fe:63:a7:57:
e5:48:19:3b:bb:98:cd:18:49:fc:8a:a3:a2:2a:9c:
ff:90:2d:eb:99:10:db:26:a4:f8:11:0c:ff:3f:7f:
6e:79:35:9b:cd:0d:37:6d:42:df:4d:4a:8f:cb:e4:
89:c3:5c:55:8e:a7:ee:3b:43:c2:de:f1:ce:d2:d0:
89:ce:34:06:8e:5f:cc:c7:c4:c0:52:e3:3f:21:10:
ee:80:a2:2c:95:c9:2d:4d:72:61:b7:8c:04:12:f6:
22:5d:ea:18:9b:d5:12:a1:dd:81:e1:8c:d0:27:79:
63:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C7:3D:CE:51:F0:36:DD:F7:37:AF:73:82:93:07:3D:2F:CC:AB:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E65944E8088A11EFA2E05B03017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.54.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:3c:a3:e2:09:c6:63:c5:77:02:4b:a1:ac:d8:2d:67:de:1a:
53:9a:cd:34:c7:ac:d9:4b:f4:6a:03:26:f4:6f:e8:de:7a:7c:
94:aa:f0:3a:4c:1e:39:42:89:a7:4a:df:1e:b3:ed:d4:7a:2a:
78:2d:b5:ef:6f:bb:56:d8:0f:d1:18:7c:bf:e3:e6:97:7d:b8:
f3:44:22:84:79:53:bf:75:5f:21:2c:36:11:e6:54:9a:c3:95:
5d:64:bc:2d:48:de:77:e2:ee:5e:45:4a:ad:f6:00:13:47:5c:
62:47:d4:94:64:06:b0:3d:ba:3e:11:a4:8b:c3:eb:c7:6f:62:
2a:63:31:8d:92:1d:5e:b1:6f:10:98:22:2d:0a:cf:24:34:35:
6d:a3:ef:8d:af:bf:31:e0:a5:d6:10:b0:d2:0d:6c:24:60:38:
f5:07:e4:82:1f:5f:42:62:87:9a:4e:00:3b:b2:59:28:07:e5:
dc:46:80:53:12:03:39:cc:ae:51:d0:db:49:e4:1c:82:41:36:
53:8a:b3:48:b9:01:fc:99:5d:5a:37:c9:b2:34:cc:a4:03:83:
0b:e7:b6:eb:ad:6c:b8:a0:d5:47:6c:da:e7:cc:98:c6:ff:cf:
fd:6e:75:01:93:b9:18:8c:3b:b2:44:4f:e5:9a:9b:6e:fb:fe:
d5:00:09:73
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALP6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTAyMTM1MDEwWhcNMjQwNTEyMTM1MDEwWjAYMRYw
FAYDVQQDEw02NjMzOWExNS02OTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzi5Fw4fC80+3SeaCslF36g0VULYIHRPkbLeUFE2W64AKUa4rIYRMCPhM
l/HL2NftUomUFdVqaeQrD+P3EWwfFMPaYQ62fM5Qq10rA2fXQViC/6/rAGeoT2Tm
u7FP/S9wBKTj7Cl1kHKyONIqDQSQG4qu7/bOVMHgwlKyoVfhhDNmNkOTXzvMMrnc
gjtEBqWBLP5jp1flSBk7u5jNGEn8iqOiKpz/kC3rmRDbJqT4EQz/P39ueTWbzQ03
bULfTUqPy+SJw1xVjqfuO0PC3vHO0tCJzjQGjl/Mx8TAUuM/IRDugKIslcktTXJh
t4wEEvYiXeoYm9USod2B4YzQJ3lj6wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJLH
Pc5R8Dbd9zevc4KTBz0vzKsTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNjU5NDRFODA4OEExMUVGQTJFMDVCMDMwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml42MA0GCSqGSIb3DQEB
CwUAA4IBAQDYPKPiCcZjxXcCS6Gs2C1n3hpTms00x6zZS/RqAyb0b+jeenyUqvA6
TB45QomnSt8es+3Ueip4LbXvb7tW2A/RGHy/4+aXfbjzRCKEeVO/dV8hLDYR5lSa
w5VdZLwtSN534u5eRUqt9gATR1xiR9SUZAawPbo+EaSLw+vHb2IqYzGNkh1esW8Q
mCItCs8kNDVto++Nr78x4KXWELDSDWwkYDj1B+SCH19CYoeaTgA7slkoB+XcRoBT
EgM5zK5R0NtJ5ByCQTZTirNIuQH8mV1aN8myNMykA4ML57brrWy4oNVHbNrnzJjG
/8/9bnUBk7kYjDuyRE/lmptu+/7VAAlz
-----END CERTIFICATE-----
Generated at Mon May 13 01:46:22 2024 by rpki-client on console-ams.rpki-client.org