Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/058F49CA155711EEB895CF354AD9E6FC.roa
File: 058F49CA155711EEB895CF354AD9E6FC.roa (raw, json)
Hash identifier: 90whbXzWaDja6g9Pmpu32NB/c+t4UZeHY1v2kxBGfDU=
Subject key identifier: DE:F0:C6:EE:6E:E6:B5:D4:12:57:0A:6E:8E:97:F1:2A:FA:19:2C:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2E25
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/058F49CA155711EEB895CF354AD9E6FC.roa
Signing time: Wed 28 Jun 2023 01:56:39 +0000
ROA not before: Wed 28 Jun 2023 01:56:36 +0000
ROA not after: Wed 24 Apr 2024 01:56:36 +0000
asID: 63888
IP address blocks: 154.205.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11813 (0x2e25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 01:56:36 2023 GMT
Not After : Apr 24 01:56:36 2024 GMT
Subject: CN=649b9357-d579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:49:3f:c9:5d:1d:31:c4:72:e3:f9:f4:85:
02:56:da:e9:de:f2:92:4a:20:dc:77:03:8f:8d:ff:
c2:f9:2e:1e:4d:44:cc:e1:f3:9a:48:b7:f1:39:ac:
51:5d:a9:73:58:2b:db:a9:8d:8a:f8:57:5d:29:cd:
fb:0e:4b:de:5f:0c:35:7c:f2:28:ca:b2:a7:10:db:
e0:9e:a6:0e:4d:49:fd:d7:ed:4a:a6:1d:bf:60:49:
3c:3c:b3:9e:9a:58:1d:81:47:e5:e8:ac:14:47:85:
36:a6:f3:40:16:69:8e:ae:f6:bb:db:05:61:8b:3b:
2d:00:d6:91:ce:04:2d:3a:b8:db:ca:af:3f:bf:b9:
05:c3:54:3c:df:fc:4e:8b:5d:6d:22:21:d1:4b:84:
11:30:ea:b3:69:ba:3c:69:6f:6b:7e:c3:f2:64:f7:
af:20:c6:e6:2b:a9:e6:a4:4e:20:ce:48:da:82:fb:
0f:6b:4a:b2:f8:f6:26:e6:3f:3a:be:10:c2:4e:6a:
b9:3f:cf:78:78:0f:78:23:57:f5:10:ed:81:ee:88:
0f:37:a2:d8:dd:d5:f0:9a:b9:91:48:e9:da:91:d3:
a1:14:e7:e9:57:7a:2e:10:d6:ad:8c:9b:40:31:ff:
6a:ea:76:59:bc:96:ef:73:6d:d3:2d:26:ec:39:f1:
ce:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F0:C6:EE:6E:E6:B5:D4:12:57:0A:6E:8E:97:F1:2A:FA:19:2C:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/058F49CA155711EEB895CF354AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.38.0/24
Signature Algorithm: sha256WithRSAEncryption
be:75:93:39:9d:5e:4d:55:d9:fc:30:6c:e7:2b:64:7e:37:58:
44:f3:95:45:cf:62:a1:e7:f7:65:39:12:53:73:84:46:c5:59:
d8:42:b8:0d:87:bb:cc:8c:07:27:0d:91:76:da:be:4d:f6:18:
ad:fb:36:50:05:b9:8e:e8:50:b3:e0:b2:7b:cf:54:6a:56:a8:
a7:d7:16:c3:94:68:4c:2b:6c:11:69:07:a3:b1:16:66:36:51:
0b:55:fd:1c:da:81:cf:59:d3:81:3e:c9:15:95:65:dd:e7:da:
5d:88:98:0c:30:18:38:b3:e8:5b:e2:aa:b3:c1:26:10:32:03:
f4:48:9f:8a:af:3f:c0:82:84:b4:5a:11:d7:23:73:9e:f3:7f:
9d:51:95:fa:b0:d7:d2:de:17:29:66:b5:5c:04:a7:02:ef:d8:
e5:10:c1:fa:6e:c5:7a:bc:f8:2b:f3:28:d0:96:6c:d5:9e:80:
00:b6:d2:53:95:9c:a4:d2:4a:81:38:3b:9a:6c:e8:c8:5a:c1:
b3:4c:c7:80:b2:0c:5e:4d:a0:40:a6:ce:31:6a:6c:7c:db:0e:
bb:be:be:9e:43:18:d0:29:4c:36:1e:33:59:29:cc:08:87:dd:
5f:9c:59:3d:66:0e:cd:b5:0c:0c:f4:91:8c:33:05:25:55:9f:
ba:37:58:6e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICLiUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA2MjgwMTU2MzZaFw0yNDA0MjQwMTU2MzZaMBgxFjAU
BgNVBAMTDTY0OWI5MzU3LWQ1NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqkUk/yV0dMcRy4/n0hQJW2une8pJKINx3A4+N/8L5Lh5NRMzh85pIt/E5
rFFdqXNYK9upjYr4V10pzfsOS95fDDV88ijKsqcQ2+Cepg5NSf3X7UqmHb9gSTw8
s56aWB2BR+XorBRHhTam80AWaY6u9rvbBWGLOy0A1pHOBC06uNvKrz+/uQXDVDzf
/E6LXW0iIdFLhBEw6rNpujxpb2t+w/Jk968gxuYrqeakTiDOSNqC+w9rSrL49ibm
Pzq+EMJOark/z3h4D3gjV/UQ7YHuiA83otjd1fCauZFI6dqR06EU5+lXei4Q1q2M
m0Ax/2rqdlm8lu9zbdMtJuw58c5jAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU3vDG
7m7mtdQSVwpujpfxKvoZLGkwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzA1OEY0OUNBMTU1NzExRUVCODk1Q0YzNTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazSYwDQYJKoZIhvcNAQEL
BQADggEBAL51kzmdXk1V2fwwbOcrZH43WETzlUXPYqHn92U5ElNzhEbFWdhCuA2H
u8yMBycNkXbavk32GK37NlAFuY7oULPgsnvPVGpWqKfXFsOUaEwrbBFpB6OxFmY2
UQtV/Rzagc9Z04E+yRWVZd3n2l2ImAwwGDiz6FviqrPBJhAyA/RIn4qvP8CChLRa
Edcjc57zf51Rlfqw19LeFylmtVwEpwLv2OUQwfpuxXq8+CvzKNCWbNWegAC20lOV
nKTSSoE4O5ps6MhawbNMx4CyDF5NoECmzjFqbHzbDru+vp5DGNApTDYeM1kpzAiH
3V+cWT1mDs21DAz0kYwzBSVVn7o3WG4=
-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:43 2024 by rpki-client on console-ams.rpki-client.org