Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/021A0C46E47611EE97B9F285775412E6.roa
File: 021A0C46E47611EE97B9F285775412E6.roa (raw, json)
Hash identifier: k9ZUSeQ0uStyU1ZQZfNTft0YU4Gi2GkA6Ozgbw1S3Fo=
Subject key identifier: 9A:14:AE:48:D5:6A:06:D8:3A:C6:99:87:25:96:DE:23:E2:BC:25:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A255
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/021A0C46E47611EE97B9F285775412E6.roa
Signing time: Sun 17 Mar 2024 15:49:59 +0000
ROA not before: Sun 17 Mar 2024 15:49:55 +0000
ROA not after: Tue 30 Apr 2024 15:49:55 +0000
asID: 63139
IP address blocks: 154.94.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41557 (0xa255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 15:49:55 2024 GMT
Not After : Apr 30 15:49:55 2024 GMT
Subject: CN=65f71127-6f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:5f:4f:32:90:00:01:9e:04:26:52:06:dd:
75:75:c2:50:4a:9d:f8:da:93:74:87:42:75:02:8c:
28:70:3c:94:ac:33:0b:10:12:51:49:e6:22:5a:7a:
8f:f6:69:f9:5e:74:bb:ad:36:18:df:06:c4:9e:2c:
68:58:46:40:3b:2e:41:1e:f7:fa:af:00:7e:8f:a8:
1c:3e:41:a7:61:af:cd:8a:34:b9:90:5c:53:b3:df:
9b:2e:b8:20:64:2a:cd:7a:9e:d6:fd:eb:60:a7:f3:
28:94:fd:92:f1:66:a6:5b:fd:43:b5:7d:e4:be:b2:
52:a6:f6:17:84:61:fa:96:6f:02:e3:3b:4e:01:ba:
82:fa:77:bc:a5:2f:11:a8:8f:55:35:11:72:8e:f6:
04:66:e8:3a:c2:da:75:a2:4e:4b:a9:1a:22:d5:bd:
76:a7:e7:5e:64:7e:2e:43:f4:72:a5:40:37:2b:de:
8a:be:b1:65:6b:fb:90:dc:aa:05:12:e2:9f:94:3e:
97:dc:39:67:f0:ec:b0:fd:83:3b:06:70:67:54:df:
57:76:7e:0d:9d:7a:fc:a4:46:81:20:ec:71:63:3c:
6f:57:5e:04:5d:d9:c2:02:89:23:a4:fd:c6:47:a2:
2a:4d:64:64:9a:2c:3e:9f:e2:fa:0b:c3:5e:bb:ab:
fd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:14:AE:48:D5:6A:06:D8:3A:C6:99:87:25:96:DE:23:E2:BC:25:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/021A0C46E47611EE97B9F285775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.104.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ff:8c:80:ef:08:b3:a0:be:64:2f:29:9d:9b:1a:f6:f4:22:
1f:d0:a1:83:ef:57:a9:81:dd:a3:9b:88:85:55:f7:fc:4a:92:
68:0c:85:a3:ab:41:ba:ec:27:3d:c1:a5:a3:2e:05:51:fc:d6:
12:a1:48:c2:c6:34:d6:86:22:1e:fa:19:45:7f:4d:7a:70:17:
7e:1f:f5:aa:3e:03:9d:67:21:dc:f5:6b:29:e3:22:be:d1:1b:
a5:e2:11:fa:63:ad:04:b3:60:fa:5f:d8:4e:f4:47:30:ad:e9:
f0:b6:38:c4:8d:3b:50:a9:c9:cd:23:59:55:9a:39:17:b3:5f:
29:e0:14:88:43:ff:a9:24:de:21:c2:26:fe:b2:c5:26:20:4d:
7b:cd:a9:ec:eb:12:ea:6a:4b:44:26:66:e0:fa:61:ae:1c:e0:
8e:7c:a4:41:31:4e:ca:ba:3d:f6:92:bb:b4:76:0f:17:96:f7:
54:40:53:6a:30:2e:79:43:8d:e9:a0:68:f1:2d:ff:16:99:d2:
87:b0:a4:1f:1d:e1:06:9e:49:fa:7a:9c:25:35:21:c9:57:e0:
dd:0e:5e:f8:0f:22:47:8f:13:87:41:48:ac:14:e5:16:b5:2f:
a7:8a:39:99:6a:7c:fa:b0:8f:79:dc:0a:8b:7a:c7:d7:95:ae:
47:ed:ce:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKJVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzE3MTU0OTU1WhcNMjQwNDMwMTU0OTU1WjAYMRYw
FAYDVQQDEw02NWY3MTEyNy02ZjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0Y1fTzKQAAGeBCZSBt11dcJQSp342pN0h0J1AowocDyUrDMLEBJRSeYi
WnqP9mn5XnS7rTYY3wbEnixoWEZAOy5BHvf6rwB+j6gcPkGnYa/NijS5kFxTs9+b
LrggZCrNep7W/etgp/MolP2S8WamW/1DtX3kvrJSpvYXhGH6lm8C4ztOAbqC+ne8
pS8RqI9VNRFyjvYEZug6wtp1ok5LqRoi1b12p+deZH4uQ/RypUA3K96KvrFla/uQ
3KoFEuKflD6X3Dln8Oyw/YM7BnBnVN9Xdn4NnXr8pEaBIOxxYzxvV14EXdnCAokj
pP3GR6IqTWRkmiw+n+L6C8Neu6v9IwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJoU
rkjVagbYOsaZhyWW3iPivCWOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMjFBMEM0NkU0NzYxMUVFOTdCOUYyODU3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5oMA0GCSqGSIb3DQEB
CwUAA4IBAQAo/4yA7wizoL5kLymdmxr29CIf0KGD71epgd2jm4iFVff8SpJoDIWj
q0G67Cc9waWjLgVR/NYSoUjCxjTWhiIe+hlFf016cBd+H/WqPgOdZyHc9Wsp4yK+
0Rul4hH6Y60Es2D6X9hO9EcwrenwtjjEjTtQqcnNI1lVmjkXs18p4BSIQ/+pJN4h
wib+ssUmIE17zans6xLqaktEJmbg+mGuHOCOfKRBMU7Kuj32kru0dg8XlvdUQFNq
MC55Q43poGjxLf8WmdKHsKQfHeEGnkn6epwlNSHJV+DdDl74DyJHjxOHQUisFOUW
tS+nijmZanz6sI953AqLesfXla5H7c77
-----END CERTIFICATE-----
Generated at Wed May 1 02:40:36 2024 by rpki-client on console-fra.rpki-client.org