Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02BF95AE018A11EF97BB5069017001B1.roa
File: 02BF95AE018A11EF97BB5069017001B1.roa (raw, json)
Hash identifier: SE8tyZxOhbyblFc+HcyedaVVCfDXlkJ42aM0a9h51EE=
Subject key identifier: 90:05:14:4E:C0:0B:62:64:10:B3:EF:E1:79:3D:E1:5A:A0:BA:B7:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AFA4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02BF95AE018A11EF97BB5069017001B1.roa
Signing time: Tue 23 Apr 2024 15:56:13 +0000
ROA not before: Tue 23 Apr 2024 15:56:09 +0000
ROA not after: Wed 01 May 2024 15:56:09 +0000
asID: 136950
IP address blocks: 154.213.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44964 (0xafa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 15:56:09 2024 GMT
Not After : May 1 15:56:09 2024 GMT
Subject: CN=6627da1d-4b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:88:88:d1:31:5d:c0:0b:7d:d8:53:0e:85:57:
cb:c5:74:cf:d5:39:ef:90:98:17:ae:b4:d5:06:8d:
1c:6d:f3:29:de:6f:c4:19:3a:11:74:bd:0b:6c:21:
a3:d0:4f:e4:a9:14:91:36:96:a2:13:b2:45:27:58:
b1:75:1f:66:27:08:e3:b9:4a:f3:c7:ff:0f:5a:fe:
0f:3e:b5:07:86:05:b6:39:cb:ce:a1:7b:52:54:ad:
f1:14:aa:5c:29:10:00:fa:dc:49:4f:d4:c5:39:3a:
37:3d:b4:25:44:8a:9b:18:46:66:c6:e5:d7:f9:f4:
58:18:47:f8:76:31:6e:2e:d9:80:af:d7:f8:97:a2:
7f:8c:8d:52:53:91:93:ea:36:82:7e:e9:26:fd:3d:
44:ff:cd:bc:9a:96:56:c5:50:01:9d:d8:03:56:71:
3f:e4:0c:73:3d:b0:5e:db:bf:c5:3d:d0:e5:1b:86:
68:9f:02:6e:ce:14:bc:3e:58:e0:6c:8b:a8:6c:2b:
4f:4a:ba:c5:6d:e9:70:a9:01:c5:f1:b4:df:3d:78:
de:13:c8:ca:60:f8:4b:c4:b7:66:1b:45:cd:ef:e6:
fe:4e:1d:8b:71:7a:d3:3d:85:a2:91:4d:5b:80:c6:
ed:14:4c:09:6a:4a:99:94:97:81:1f:00:9f:4a:c0:
c0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:05:14:4E:C0:0B:62:64:10:B3:EF:E1:79:3D:E1:5A:A0:BA:B7:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02BF95AE018A11EF97BB5069017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.27.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:96:2f:7f:22:15:d5:c3:eb:eb:49:64:b1:c6:cf:d9:c1:bd:
44:0a:88:ac:83:56:61:8a:51:40:0f:96:60:20:7f:e9:12:e0:
34:96:bd:ef:11:bd:6b:78:66:f4:28:de:b7:d8:f9:aa:5c:e0:
8e:ef:b1:18:91:07:2e:45:e3:71:a5:37:d5:61:97:9a:18:8c:
93:0b:cc:7a:4c:f5:89:29:ae:4a:32:37:04:00:68:8d:bb:1a:
42:93:79:21:e6:59:5a:17:84:a5:fd:fa:6a:1b:f0:46:15:03:
bb:b9:00:5f:f3:c7:e9:e5:d0:2b:83:1a:a1:57:ea:96:8f:ef:
04:87:b1:fa:8d:ac:97:82:63:dc:7c:76:a1:6c:dd:b5:af:ce:
35:4d:b6:b6:27:22:a1:8d:a0:36:89:51:18:a6:04:11:2b:48:
09:cd:b9:37:99:72:c6:9b:df:cc:0d:35:11:33:79:83:28:ac:
d2:6a:b4:d8:0f:cc:57:9a:8c:17:29:cc:43:2a:00:82:e6:e4:
a4:38:cd:06:a9:b6:a8:41:99:69:5f:72:56:83:54:04:d5:87:
1e:b4:b9:60:fc:6f:8b:92:c6:6c:18:27:f6:5c:b5:c6:96:21:
9b:88:3d:ff:c2:68:4d:43:22:f8:32:db:dc:32:6d:25:b3:5e:
b6:69:78:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK+kMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDIzMTU1NjA5WhcNMjQwNTAxMTU1NjA5WjAYMRYw
FAYDVQQDEw02NjI3ZGExZC00YjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA14iI0TFdwAt92FMOhVfLxXTP1TnvkJgXrrTVBo0cbfMp3m/EGToRdL0L
bCGj0E/kqRSRNpaiE7JFJ1ixdR9mJwjjuUrzx/8PWv4PPrUHhgW2OcvOoXtSVK3x
FKpcKRAA+txJT9TFOTo3PbQlRIqbGEZmxuXX+fRYGEf4djFuLtmAr9f4l6J/jI1S
U5GT6jaCfukm/T1E/828mpZWxVABndgDVnE/5AxzPbBe27/FPdDlG4ZonwJuzhS8
PljgbIuobCtPSrrFbelwqQHF8bTfPXjeE8jKYPhLxLdmG0XN7+b+Th2LcXrTPYWi
kU1bgMbtFEwJakqZlJeBHwCfSsDAdwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJAF
FE7AC2JkELPv4Xk94VqgurdQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMkJGOTVBRTAxOEExMUVGOTdCQjUwNjkwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtUbMA0GCSqGSIb3DQEB
CwUAA4IBAQBeli9/IhXVw+vrSWSxxs/Zwb1ECoisg1ZhilFAD5ZgIH/pEuA0lr3v
Eb1reGb0KN632PmqXOCO77EYkQcuReNxpTfVYZeaGIyTC8x6TPWJKa5KMjcEAGiN
uxpCk3kh5llaF4Sl/fpqG/BGFQO7uQBf88fp5dArgxqhV+qWj+8Eh7H6jayXgmPc
fHahbN21r841Tba2JyKhjaA2iVEYpgQRK0gJzbk3mXLGm9/MDTURM3mDKKzSarTY
D8xXmowXKcxDKgCC5uSkOM0GqbaoQZlpX3JWg1QE1YcetLlg/G+LksZsGCf2XLXG
liGbiD3/wmhNQyL4MtvcMm0ls162aXhx
-----END CERTIFICATE-----
Generated at Thu May 2 03:38:48 2024 by rpki-client on console-ams.rpki-client.org