Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1178E9AA911E11EF8E39D3AC762E951A.roa
File: 1178E9AA911E11EF8E39D3AC762E951A.roa (raw, json)
Hash identifier: i5O19b1ItZxkVA+x7ylo8MthbKqMgC9YHcegSwAHEH4=
Subject key identifier: E5:19:60:D0:F8:8C:8F:F0:06:67:D9:C4:D0:87:F3:C2:A3:07:6F:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0100E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1178E9AA911E11EF8E39D3AC762E951A.roa
Signing time: Wed 23 Oct 2024 09:06:20 +0000
ROA not before: Wed 23 Oct 2024 09:06:15 +0000
ROA not after: Tue 26 Nov 2024 09:06:15 +0000
asID: 197547
IP address blocks: 154.201.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65764 (0x100e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Oct 23 09:06:15 2024 GMT
Not After : Nov 26 09:06:15 2024 GMT
Subject: CN=6718bc8c-a70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:93:76:4a:27:35:8c:88:5f:d0:08:8e:4d:94:
36:a4:2c:db:07:a4:f4:29:8f:2b:ce:10:19:e2:6b:
d8:90:83:ec:a7:f2:cf:ea:c2:08:c6:5b:2e:38:64:
1b:6d:91:b3:41:a9:9e:80:12:87:c3:d7:3d:af:ef:
e6:ae:ec:8d:ef:27:a4:f7:f4:d8:de:f2:0c:7d:67:
7d:c5:ac:ab:27:b1:10:9a:81:a1:52:6c:60:4d:5a:
cf:78:68:68:1a:34:7a:23:53:d9:23:36:6c:6c:41:
58:0a:5f:60:bb:ad:52:34:7e:ab:04:2a:6d:85:a0:
7f:f0:ee:73:33:24:17:96:0d:fc:08:23:d2:0e:d8:
bb:54:ed:bf:30:e7:18:08:e7:eb:d9:d1:5a:da:25:
25:1e:ff:35:8b:d8:56:04:30:80:84:de:75:5e:a9:
14:fb:76:1f:3b:8d:98:2f:17:a2:13:0c:f0:8f:de:
99:2c:94:65:8e:93:d7:10:e4:f2:58:28:7d:8b:65:
04:59:ca:ef:09:a2:80:f1:81:73:68:5b:bf:ca:b5:
d0:50:5a:44:00:ee:72:46:11:38:fd:cc:0d:80:49:
81:f0:ac:94:0c:ab:92:8e:2e:63:19:83:fb:24:a3:
23:fb:fc:e4:85:fb:0f:c0:1e:b2:14:7e:54:d5:ef:
80:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:19:60:D0:F8:8C:8F:F0:06:67:D9:C4:D0:87:F3:C2:A3:07:6F:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1178E9AA911E11EF8E39D3AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.93.0/24
Signature Algorithm: sha256WithRSAEncryption
26:63:02:4d:df:e1:72:c4:94:36:a7:7e:1b:28:dc:d3:a1:41:
cc:fc:1f:8b:e7:5f:df:01:75:b7:a5:cd:b8:9e:fb:8f:02:e2:
be:d1:a9:e3:ba:0e:76:04:c1:80:22:aa:a3:92:39:11:6d:1a:
37:30:85:ec:0b:99:19:cb:07:82:e5:25:19:d0:4d:21:d5:3e:
0b:f3:b2:fe:00:33:b7:d6:2e:eb:81:01:af:e1:dc:14:a9:68:
f4:a8:5b:cd:2a:2a:8f:82:9e:ba:fc:fc:cc:16:9c:ee:36:97:
d0:5f:24:c5:df:a3:0a:44:1c:d9:b0:c0:c2:35:4e:39:1c:47:
84:3c:0a:9b:5f:df:db:4f:3b:d6:d4:4d:0a:a3:1b:41:7a:67:
90:44:d6:a5:a6:32:fc:70:bc:90:6c:62:5a:77:0d:e7:6c:47:
27:45:e5:41:cd:16:e8:21:44:fc:4e:1e:ef:6f:c4:7e:98:65:
fa:d6:c6:f7:49:0e:36:27:bc:43:1c:18:2f:0c:4e:6d:6d:4c:
7d:69:81:14:73:5d:25:fd:6e:cc:37:2d:c5:fb:12:73:1d:62:
c4:46:10:92:cf:6e:a8:f1:68:9c:37:92:60:0e:24:86:72:cd:
4d:a7:65:4b:77:84:73:96:32:73:4e:a4:fe:cf:3c:80:93:64:
6c:d7:6b:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQDkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDIzMDkwNjE1WhcNMjQxMTI2MDkwNjE1WjAYMRYw
FAYDVQQDEw02NzE4YmM4Yy1hNzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4ZN2Sic1jIhf0AiOTZQ2pCzbB6T0KY8rzhAZ4mvYkIPsp/LP6sIIxlsu
OGQbbZGzQamegBKHw9c9r+/mruyN7yek9/TY3vIMfWd9xayrJ7EQmoGhUmxgTVrP
eGhoGjR6I1PZIzZsbEFYCl9gu61SNH6rBCpthaB/8O5zMyQXlg38CCPSDti7VO2/
MOcYCOfr2dFa2iUlHv81i9hWBDCAhN51XqkU+3YfO42YLxeiEwzwj96ZLJRljpPX
EOTyWCh9i2UEWcrvCaKA8YFzaFu/yrXQUFpEAO5yRhE4/cwNgEmB8KyUDKuSji5j
GYP7JKMj+/zkhfsPwB6yFH5U1e+AVQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOUZ
YND4jI/wBmfZxNCH88KjB2/dMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMTc4RTlBQTkxMUUxMUVGOEUzOUQzQUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsldMA0GCSqGSIb3DQEB
CwUAA4IBAQAmYwJN3+FyxJQ2p34bKNzToUHM/B+L51/fAXW3pc24nvuPAuK+0anj
ug52BMGAIqqjkjkRbRo3MIXsC5kZyweC5SUZ0E0h1T4L87L+ADO31i7rgQGv4dwU
qWj0qFvNKiqPgp66/PzMFpzuNpfQXyTF36MKRBzZsMDCNU45HEeEPAqbX9/bTzvW
1E0KoxtBemeQRNalpjL8cLyQbGJadw3nbEcnReVBzRboIUT8Th7vb8R+mGX61sb3
SQ42J7xDHBgvDE5tbUx9aYEUc10l/W7MNy3F+xJzHWLERhCSz26o8WicN5JgDiSG
cs1Np2VLd4RzljJzTqT+zzyAk2Rs12uM
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:41:41 2025 by rpki-client