Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F816C85ECCB711EE9427467B775412E6.roa
File: F816C85ECCB711EE9427467B775412E6.roa (raw, json)
Hash identifier: J5sMc9pNEweLtNhQRGJG97bF7HHVTkmEfVe5mMdcOmY=
Subject key identifier: D5:A2:98:A5:60:86:FD:3C:F0:CA:45:EE:4A:D9:87:4F:E9:3D:CA:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8ADB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F816C85ECCB711EE9427467B775412E6.roa
Signing time: Fri 16 Feb 2024 10:41:41 +0000
ROA not before: Fri 16 Feb 2024 10:41:37 +0000
ROA not after: Fri 26 Apr 2024 10:41:37 +0000
asID: 9009
IP address blocks: 154.218.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35547 (0x8adb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 10:41:37 2024 GMT
Not After : Apr 26 10:41:37 2024 GMT
Subject: CN=65cf3be5-5ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:df:c1:9a:ef:1f:1d:93:37:23:44:66:57:
e9:50:b2:4e:fe:8f:b4:c0:40:ac:c7:ca:6e:b6:a0:
31:8a:90:ec:66:7e:fc:e1:95:09:4a:b0:0e:81:85:
34:55:0c:9b:85:41:d7:61:41:19:07:96:8a:51:5b:
83:b2:be:d8:70:bc:89:37:bb:bf:3a:46:87:e2:f4:
83:0a:f5:cb:e7:f1:38:e1:d0:f0:6a:21:95:75:f8:
00:ae:da:b8:79:33:0c:7b:36:1c:ec:eb:c8:18:b7:
b2:82:a1:a3:8e:79:a5:13:ea:f3:37:ef:33:69:fc:
24:f3:46:ef:71:f8:5d:89:a4:e4:db:f0:da:93:e1:
91:99:f4:e5:03:e0:f6:31:0f:29:48:bd:7b:ef:f2:
36:ca:57:9d:fb:66:04:cd:ea:f0:e5:66:ac:b0:46:
df:bd:90:a1:3e:7a:23:0d:a1:b1:8f:63:f6:69:c8:
74:b6:ac:91:ee:10:56:a1:24:f2:c8:46:8f:d4:de:
17:83:cc:78:1b:c8:38:da:14:43:57:6a:b0:bd:f7:
73:5c:4f:63:ab:3a:f0:e2:65:5c:df:f0:60:ae:cd:
59:06:29:87:12:66:f4:55:b1:80:82:50:32:8e:2e:
69:11:cc:4a:04:c0:56:a2:60:d2:5b:cb:ff:60:79:
37:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A2:98:A5:60:86:FD:3C:F0:CA:45:EE:4A:D9:87:4F:E9:3D:CA:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F816C85ECCB711EE9427467B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.251.0/24
Signature Algorithm: sha256WithRSAEncryption
14:20:db:0f:5a:65:be:8f:90:e4:23:57:ba:f8:93:15:e7:8a:
e3:e3:f2:39:f7:6b:0c:f7:7f:1e:1d:9d:9d:a9:15:20:91:ac:
f1:b6:82:c8:00:6c:f6:a6:af:9e:dc:41:91:52:97:ca:87:ba:
ce:b7:6f:83:92:62:24:98:2f:2e:c5:48:26:2d:f1:4b:d2:b0:
64:3d:76:d6:01:72:ec:03:b1:8a:24:0f:74:4a:ee:58:4a:6c:
9a:1e:9e:4d:b3:58:4f:89:7e:ec:ff:b9:fb:42:84:44:24:a7:
08:01:ac:1b:2f:c9:f6:e9:8c:ce:3d:e9:2f:77:d0:61:29:e1:
20:96:66:6d:63:70:b0:46:af:59:b6:e8:48:bc:e7:a3:83:af:
61:8b:b9:1f:3f:83:af:2c:32:19:6d:29:4b:ad:43:c9:38:17:
c9:e8:5a:d5:9a:15:30:90:71:62:9e:ef:02:79:21:96:dc:f2:
bf:47:58:54:e3:de:83:c2:fc:36:1d:36:ff:d3:bc:f2:19:bb:
e9:ba:18:c3:ea:57:7d:c3:f0:95:47:b0:0b:91:29:85:0c:a0:
35:35:43:1c:54:af:96:33:17:cf:dc:94:82:c4:86:a3:69:14:
89:ee:ec:72:9e:0f:f7:79:d1:7c:e4:96:12:0c:e0:38:3f:98:
dd:ec:fc:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAIrbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMjE2MTA0MTM3WhcNMjQwNDI2MTA0MTM3WjAYMRYw
FAYDVQQDEw02NWNmM2JlNS01Y2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw7HfwZrvHx2TNyNEZlfpULJO/o+0wECsx8putqAxipDsZn784ZUJSrAO
gYU0VQybhUHXYUEZB5aKUVuDsr7YcLyJN7u/OkaH4vSDCvXL5/E44dDwaiGVdfgA
rtq4eTMMezYc7OvIGLeygqGjjnmlE+rzN+8zafwk80bvcfhdiaTk2/Dak+GRmfTl
A+D2MQ8pSL177/I2yled+2YEzerw5WassEbfvZChPnojDaGxj2P2ach0tqyR7hBW
oSTyyEaP1N4Xg8x4G8g42hRDV2qwvfdzXE9jqzrw4mVc3/Bgrs1ZBimHEmb0VbGA
glAyji5pEcxKBMBWomDSW8v/YHk3/wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNWi
mKVghv088MpF7krZh0/pPcp6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GODE2Qzg1RUNDQjcxMUVFOTQyNzQ2N0I3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtr7MA0GCSqGSIb3DQEB
CwUAA4IBAQAUINsPWmW+j5DkI1e6+JMV54rj4/I592sM938eHZ2dqRUgkazxtoLI
AGz2pq+e3EGRUpfKh7rOt2+DkmIkmC8uxUgmLfFL0rBkPXbWAXLsA7GKJA90Su5Y
SmyaHp5Ns1hPiX7s/7n7QoREJKcIAawbL8n26YzOPekvd9BhKeEglmZtY3CwRq9Z
tuhIvOejg69hi7kfP4OvLDIZbSlLrUPJOBfJ6FrVmhUwkHFinu8CeSGW3PK/R1hU
496Dwvw2HTb/07zyGbvpuhjD6ld9w/CVR7ALkSmFDKA1NUMcVK+WMxfP3JSCxIaj
aRSJ7uxyng/3edF85JYSDOA4P5jd7PwO
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:50 2024 by rpki-client on console-ams.rpki-client.org