Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07644F4AF0C411EEA178C18B775412E6.roa
File: 07644F4AF0C411EEA178C18B775412E6.roa (raw, json)
Hash identifier: naPQMK8j2q862yKg6TIlG7M00JY0cT6FoCfwKlLdjJg=
Subject key identifier: 4A:93:D3:DB:FD:01:B5:74:60:01:C3:95:8D:C8:46:99:32:80:1A:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A8C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07644F4AF0C411EEA178C18B775412E6.roa
Signing time: Tue 02 Apr 2024 07:38:42 +0000
ROA not before: Tue 02 Apr 2024 07:38:39 +0000
ROA not after: Mon 29 Apr 2024 07:38:39 +0000
asID: 139646
IP address blocks: 154.208.14.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43207 (0xa8c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 07:38:39 2024 GMT
Not After : Apr 29 07:38:39 2024 GMT
Subject: CN=660bb602-c95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:91:5b:3c:00:71:81:05:d2:08:d6:92:d8:
57:5f:3f:e7:ce:2e:2c:7f:b9:f1:53:a8:59:79:96:
3a:b3:5e:d5:b8:60:ea:1a:01:bf:d3:63:4a:a4:84:
85:ba:2c:47:de:4e:5f:f7:bd:18:be:77:8b:6d:1d:
f5:39:a4:7c:a0:5d:2b:70:11:fe:fe:91:9c:c1:ed:
de:a0:f5:88:9c:3c:68:6e:07:89:7c:ba:ce:03:56:
3c:fa:82:ec:27:9a:c3:85:26:a7:65:80:3a:f1:b3:
9e:ff:7a:41:e3:5b:d8:55:29:56:87:3f:44:f5:04:
fc:a3:15:3e:11:b2:97:3c:8b:e0:72:37:ae:23:24:
6f:7d:58:44:c1:f6:63:db:00:0a:6d:90:93:8e:2c:
06:88:c3:13:a2:2f:db:a3:8c:36:a0:01:58:8d:77:
60:b8:8e:e5:89:ec:d0:fd:7e:0e:e7:5f:64:f5:42:
0d:93:55:49:15:25:42:cf:16:61:10:fc:35:81:b3:
47:98:e8:cb:8f:a0:24:e7:ef:04:fa:50:5f:4f:66:
ba:54:56:03:21:30:9b:a9:c5:6d:d9:95:08:ae:03:
af:14:38:30:75:af:d4:46:a2:09:38:2e:62:09:46:
46:64:f8:ff:cb:85:21:76:8a:11:8e:fc:02:23:30:
4c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:93:D3:DB:FD:01:B5:74:60:01:C3:95:8D:C8:46:99:32:80:1A:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07644F4AF0C411EEA178C18B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.14.0/23
Signature Algorithm: sha256WithRSAEncryption
29:aa:eb:38:46:16:2b:d0:18:15:2f:e1:76:6a:c5:ac:97:05:
3e:5a:55:e4:e3:08:68:f9:7d:c1:54:90:b0:ad:cc:d4:ee:1a:
ac:4f:f6:30:4b:e9:2b:5f:6c:67:22:86:cf:c6:f5:7a:c5:9b:
d1:48:75:eb:b6:8b:6e:f0:a5:ca:54:ff:ae:11:a6:b6:d0:f1:
3b:06:67:4a:c9:0a:a9:f4:8b:1a:49:b8:f7:d8:94:a0:98:eb:
47:38:3b:42:54:d9:d9:81:62:71:41:c2:ab:f3:46:5d:3d:3c:
25:ab:8a:40:0a:9a:2b:0c:65:79:04:10:42:3b:f4:0b:40:09:
9c:0f:6b:43:75:04:2b:7e:db:ea:ce:fb:21:35:a5:67:0a:5f:
12:c9:3e:1e:0c:b7:17:1b:05:1c:64:39:70:34:2f:0e:fa:10:
0d:c4:03:6a:68:54:a1:18:54:ae:5f:58:de:80:9d:4d:66:05:
b9:90:97:11:c2:97:1a:53:6a:9a:96:f4:1e:c5:5a:2b:c6:fa:
87:a7:ac:59:7b:c9:3b:4a:00:a5:c0:1a:82:66:10:9d:fd:c7:
ba:58:22:a9:1a:ec:81:2d:42:2b:53:5f:89:9c:98:c8:90:33:
28:24:35:71:ea:f6:ad:a1:dd:b9:17:bb:53:29:a7:d9:5b:0a:
c6:d2:04:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKjHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDAyMDczODM5WhcNMjQwNDI5MDczODM5WjAYMRYw
FAYDVQQDEw02NjBiYjYwMi1jOTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAskiRWzwAcYEF0gjWkthXXz/nzi4sf7nxU6hZeZY6s17VuGDqGgG/02NK
pISFuixH3k5f970YvneLbR31OaR8oF0rcBH+/pGcwe3eoPWInDxobgeJfLrOA1Y8
+oLsJ5rDhSanZYA68bOe/3pB41vYVSlWhz9E9QT8oxU+EbKXPIvgcjeuIyRvfVhE
wfZj2wAKbZCTjiwGiMMToi/bo4w2oAFYjXdguI7liezQ/X4O519k9UINk1VJFSVC
zxZhEPw1gbNHmOjLj6Ak5+8E+lBfT2a6VFYDITCbqcVt2ZUIrgOvFDgwda/URqIJ
OC5iCUZGZPj/y4UhdooRjvwCIzBMXQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEqT
09v9AbV0YAHDlY3IRpkygBr8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNzY0NEY0QUYwQzQxMUVFQTE3OEMxOEI3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmtAOMA0GCSqGSIb3DQEB
CwUAA4IBAQApqus4RhYr0BgVL+F2asWslwU+WlXk4who+X3BVJCwrczU7hqsT/Yw
S+krX2xnIobPxvV6xZvRSHXrtotu8KXKVP+uEaa20PE7BmdKyQqp9IsaSbj32JSg
mOtHODtCVNnZgWJxQcKr80ZdPTwlq4pACporDGV5BBBCO/QLQAmcD2tDdQQrftvq
zvshNaVnCl8SyT4eDLcXGwUcZDlwNC8O+hANxANqaFShGFSuX1jegJ1NZgW5kJcR
wpcaU2qalvQexVorxvqHp6xZe8k7SgClwBqCZhCd/ce6WCKpGuyBLUIrU1+JnJjI
kDMoJDVx6vatod25F7tTKafZWwrG0gSs
-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:24 2024 by rpki-client on console-fra.rpki-client.org