Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/103504C6E47011EEBC72905F775412E6.roa
File: 103504C6E47011EEBC72905F775412E6.roa (raw, json)
Hash identifier: z8ZxmMTx+GOYa7OwtHIiaTwXq2xyJAsfEvcGZG1IWdY=
Subject key identifier: 1F:FE:34:1F:98:BE:2B:8A:50:CB:17:7A:49:18:14:A0:0E:B0:39:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A217
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/103504C6E47011EEBC72905F775412E6.roa
Signing time: Sun 17 Mar 2024 15:07:25 +0000
ROA not before: Sun 17 Mar 2024 15:07:22 +0000
ROA not after: Tue 30 Apr 2024 15:07:22 +0000
asID: 63139
IP address blocks: 154.94.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41495 (0xa217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 15:07:22 2024 GMT
Not After : Apr 30 15:07:22 2024 GMT
Subject: CN=65f7072d-be3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:91:d7:cd:9c:83:a7:49:71:25:31:84:42:
73:a8:46:dc:4e:63:79:40:f8:17:92:a8:2f:b2:f3:
1e:36:8f:0c:ec:e4:16:a5:2f:02:ae:17:66:31:af:
af:aa:4a:99:0c:d3:e1:55:94:82:e3:65:5c:04:1c:
3b:c7:98:ae:bb:28:35:d2:d6:4c:8c:5b:9a:e4:1b:
b7:0a:09:14:c1:23:de:26:ec:1e:4d:7d:b6:b0:0e:
57:db:e7:01:fb:8d:8f:43:df:60:58:ba:66:a0:49:
b4:16:b6:2f:e2:b9:9d:ab:90:16:6a:13:fa:02:a4:
f2:bc:7a:68:27:0a:84:5b:d9:31:f9:8e:7c:aa:3e:
71:82:ee:23:e3:b4:67:f4:6c:f2:2e:9e:a4:4a:1c:
47:d5:4f:df:ba:71:3e:dc:66:8c:ae:bd:91:8f:1e:
87:6b:4e:9f:4d:7b:f7:c0:72:6f:36:58:fe:88:dc:
19:a3:db:37:72:40:b0:b3:23:1e:e7:ae:3a:6e:ea:
2b:8a:52:bb:47:45:cf:9d:47:0e:08:01:88:d9:ec:
7e:76:0e:05:5f:ba:85:ed:6b:67:58:40:34:39:24:
ea:6a:5a:b9:58:66:4f:f7:44:5f:77:c6:30:bd:88:
4f:99:5d:e3:a7:78:02:b4:39:60:d2:76:01:28:fd:
3f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FE:34:1F:98:BE:2B:8A:50:CB:17:7A:49:18:14:A0:0E:B0:39:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/103504C6E47011EEBC72905F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.88.0/24
Signature Algorithm: sha256WithRSAEncryption
28:5b:8d:5f:bf:4d:76:b8:04:66:6a:3c:6e:54:2c:45:10:77:
fc:85:91:97:ce:5a:dd:c8:fa:ac:4e:20:e4:a7:cc:ca:f4:d4:
a2:81:e4:3e:ee:cc:2e:bb:34:df:0a:ef:37:e5:60:e0:b0:2c:
3d:02:76:53:1e:27:84:2b:d3:fd:8b:b8:da:77:3a:20:c3:5d:
5a:8e:e3:61:a5:09:8b:86:b8:1f:17:96:dc:fa:26:57:9d:f8:
ab:e7:cc:00:d1:0d:f9:bf:40:4f:87:1b:77:2a:f0:b1:07:ff:
16:18:3a:ac:77:77:1e:17:ff:6d:55:7d:c3:d9:ca:07:64:42:
4e:3c:ea:c1:55:3b:f5:12:58:59:24:4e:26:7d:29:fb:91:49:
aa:cf:ef:85:59:f2:55:05:32:3d:7c:e3:1f:8c:15:5d:94:2c:
a1:ba:39:9b:1d:f0:8f:3f:54:85:dd:87:15:9e:d0:b7:60:e1:
55:80:d3:ef:27:d8:f4:60:75:4c:42:f6:7b:fc:38:34:aa:00:
55:71:39:0e:97:1c:7c:d7:38:de:10:92:97:b0:66:d5:73:e3:
2a:49:c1:d7:1e:6c:b5:fd:a6:34:41:d3:5e:b4:43:ba:9a:10:
09:ca:d8:ee:36:76:b7:eb:75:b4:3f:80:70:fb:5c:3b:ae:38:
d4:5c:1c:d3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKIXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzE3MTUwNzIyWhcNMjQwNDMwMTUwNzIyWjAYMRYw
FAYDVQQDEw02NWY3MDcyZC1iZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxb+R182cg6dJcSUxhEJzqEbcTmN5QPgXkqgvsvMeNo8M7OQWpS8Crhdm
Ma+vqkqZDNPhVZSC42VcBBw7x5iuuyg10tZMjFua5Bu3CgkUwSPeJuweTX22sA5X
2+cB+42PQ99gWLpmoEm0FrYv4rmdq5AWahP6AqTyvHpoJwqEW9kx+Y58qj5xgu4j
47Rn9GzyLp6kShxH1U/funE+3GaMrr2Rjx6Ha06fTXv3wHJvNlj+iNwZo9s3ckCw
syMe5646buorilK7R0XPnUcOCAGI2ex+dg4FX7qF7WtnWEA0OSTqalq5WGZP90Rf
d8YwvYhPmV3jp3gCtDlg0nYBKP0/GwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB/+
NB+YviuKUMsXekkYFKAOsDl/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMDM1MDRDNkU0NzAxMUVFQkM3MjkwNUY3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5YMA0GCSqGSIb3DQEB
CwUAA4IBAQAoW41fv012uARmajxuVCxFEHf8hZGXzlrdyPqsTiDkp8zK9NSigeQ+
7swuuzTfCu835WDgsCw9AnZTHieEK9P9i7jadzogw11ajuNhpQmLhrgfF5bc+iZX
nfir58wA0Q35v0BPhxt3KvCxB/8WGDqsd3ceF/9tVX3D2coHZEJOPOrBVTv1ElhZ
JE4mfSn7kUmqz++FWfJVBTI9fOMfjBVdlCyhujmbHfCPP1SF3YcVntC3YOFVgNPv
J9j0YHVMQvZ7/Dg0qgBVcTkOlxx81zjeEJKXsGbVc+MqScHXHmy1/aY0QdNetEO6
mhAJytjuNna363W0P4Bw+1w7rjjUXBzT
-----END CERTIFICATE-----
Generated at Wed May 1 02:40:36 2024 by rpki-client on console-fra.rpki-client.org