Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11AF8546E47111EE92541666775412E6.roa
File: 11AF8546E47111EE92541666775412E6.roa (raw, json)
Hash identifier: 7nI5LNyZL5q7bsZvcgSMcXJkk03a5CPOlyrmIK0/tb4=
Subject key identifier: 44:68:3D:8E:DB:21:30:7B:F6:BB:11:F2:4C:D7:FD:04:A2:8F:8A:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A221
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11AF8546E47111EE92541666775412E6.roa
Signing time: Sun 17 Mar 2024 15:14:37 +0000
ROA not before: Sun 17 Mar 2024 15:14:31 +0000
ROA not after: Tue 30 Apr 2024 15:14:31 +0000
asID: 63139
IP address blocks: 154.94.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41505 (0xa221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 15:14:31 2024 GMT
Not After : Apr 30 15:14:31 2024 GMT
Subject: CN=65f708dd-5430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:77:b0:f0:26:f5:96:e6:10:82:e3:8c:34:
6c:c4:f8:16:33:3a:08:e4:b8:22:b2:09:ca:00:46:
81:51:a1:3a:4d:b6:b4:6e:ab:2e:21:3a:20:ff:29:
29:b1:ca:90:a1:3a:60:3a:e8:42:20:9e:73:ca:7f:
84:11:67:ae:86:ff:72:a1:ce:0c:b1:ff:cf:d0:fc:
3a:94:03:9b:5d:92:e2:e8:2c:18:1c:0d:23:b3:49:
44:9f:33:60:58:b5:2b:89:8d:02:22:18:e3:05:f2:
6c:0e:78:f0:99:57:95:fa:ab:2e:00:d5:c1:3a:55:
8a:69:2e:89:32:74:64:3e:e8:c5:a8:33:58:dc:91:
43:12:00:8e:a6:0d:da:21:e6:d4:2e:08:a5:24:10:
6d:39:be:d0:bd:0f:99:88:e0:52:ec:77:0f:e1:2a:
c0:5f:8a:c7:c1:19:19:40:48:26:30:4c:38:dc:ae:
08:d0:7c:db:1c:c8:05:bf:06:3b:c6:65:be:7c:65:
d1:d1:da:c9:c9:73:70:b9:0d:08:13:3e:6e:35:64:
08:da:5b:a2:ce:7d:0f:0b:0d:6f:ff:44:68:a4:6d:
02:14:5e:51:e7:03:87:95:c7:5d:fa:ef:c6:69:b3:
92:4e:46:38:a8:1e:58:93:51:2a:fd:44:97:d8:14:
62:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:68:3D:8E:DB:21:30:7B:F6:BB:11:F2:4C:D7:FD:04:A2:8F:8A:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11AF8546E47111EE92541666775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.83.0/24
Signature Algorithm: sha256WithRSAEncryption
14:9e:fe:93:11:5a:33:b8:05:5b:b4:dc:51:c7:6d:6d:cd:21:
3d:54:9f:3b:70:25:59:7c:19:c3:46:cd:cc:4b:d5:ef:8e:d6:
20:bf:b8:54:84:bc:9d:a9:e7:e8:f6:6c:56:cd:37:b7:f2:e6:
a8:cf:da:4b:1a:9d:d7:bf:f5:be:a3:e8:23:17:0e:1b:c6:d6:
21:63:8e:eb:75:f4:99:6a:58:81:76:de:ad:8d:32:28:2b:20:
4e:99:f1:0a:99:20:e4:78:db:67:43:f0:13:39:bb:39:cc:fb:
aa:78:5d:59:18:5b:7c:b0:d1:c9:3c:68:3b:85:d7:0f:fe:0d:
71:42:cd:27:86:04:e3:3f:fd:52:81:ea:77:a4:94:c7:fe:75:
16:47:0f:74:93:15:29:3a:ca:b7:05:c9:0d:2f:67:b2:77:96:
07:e1:6b:00:f3:f5:9d:75:c2:db:f7:d2:af:2a:69:6d:f8:70:
f8:11:a1:9e:b1:b3:51:e3:4e:24:6d:c6:0a:66:31:2d:63:f1:
cf:18:8f:d0:c0:a8:4d:af:aa:35:f3:a2:9d:b5:48:f8:92:4f:
cc:fe:53:30:bb:55:57:88:e9:5d:57:63:51:f8:ab:75:22:37:
72:73:d4:25:7d:10:7e:ec:9f:fb:14:9b:ae:4b:99:2c:e0:6f:
cb:5e:e2:ab
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKIhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzE3MTUxNDMxWhcNMjQwNDMwMTUxNDMxWjAYMRYw
FAYDVQQDEw02NWY3MDhkZC01NDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoZt3sPAm9ZbmEILjjDRsxPgWMzoI5LgisgnKAEaBUaE6Tba0bqsuITog
/ykpscqQoTpgOuhCIJ5zyn+EEWeuhv9yoc4Msf/P0Pw6lAObXZLi6CwYHA0js0lE
nzNgWLUriY0CIhjjBfJsDnjwmVeV+qsuANXBOlWKaS6JMnRkPujFqDNY3JFDEgCO
pg3aIebULgilJBBtOb7QvQ+ZiOBS7HcP4SrAX4rHwRkZQEgmMEw43K4I0HzbHMgF
vwY7xmW+fGXR0drJyXNwuQ0IEz5uNWQI2luizn0PCw1v/0RopG0CFF5R5wOHlcdd
+u/GabOSTkY4qB5Yk1Eq/USX2BRi2QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFERo
PY7bITB79rsR8kzX/QSij4ooMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMUFGODU0NkU0NzExMUVFOTI1NDE2NjY3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5TMA0GCSqGSIb3DQEB
CwUAA4IBAQAUnv6TEVozuAVbtNxRx21tzSE9VJ87cCVZfBnDRs3MS9XvjtYgv7hU
hLydqefo9mxWzTe38uaoz9pLGp3Xv/W+o+gjFw4bxtYhY47rdfSZaliBdt6tjTIo
KyBOmfEKmSDkeNtnQ/ATObs5zPuqeF1ZGFt8sNHJPGg7hdcP/g1xQs0nhgTjP/1S
gep3pJTH/nUWRw90kxUpOsq3BckNL2eyd5YH4WsA8/WddcLb99KvKmlt+HD4EaGe
sbNR404kbcYKZjEtY/HPGI/QwKhNr6o186KdtUj4kk/M/lMwu1VXiOldV2NR+Kt1
Ijdyc9QlfRB+7J/7FJuuS5ks4G/LXuKr
-----END CERTIFICATE-----
Generated at Wed May 1 02:40:36 2024 by rpki-client on console-fra.rpki-client.org