Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12BA1A7EFBA911EEB8D61E0B017001B1.roa
File: 12BA1A7EFBA911EEB8D61E0B017001B1.roa (raw, json)
Hash identifier: Z8yyIEyYhpy0Ex2MFpoEh+y8zFbTtDZtSeMi/41bSsw=
Subject key identifier: CD:7D:2E:67:C9:DC:20:64:6A:C7:DB:05:C1:4F:37:AB:7C:11:1D:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD99
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12BA1A7EFBA911EEB8D61E0B017001B1.roa
Signing time: Tue 16 Apr 2024 04:23:28 +0000
ROA not before: Tue 16 Apr 2024 04:23:24 +0000
ROA not after: Thu 25 Apr 2024 04:23:24 +0000
asID: 151800
IP address blocks: 154.197.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44441 (0xad99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 04:23:24 2024 GMT
Not After : Apr 25 04:23:24 2024 GMT
Subject: CN=661dfd40-253d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:a6:44:5c:45:70:0a:76:8b:3e:0e:1b:71:
87:71:30:44:9a:bb:2e:8c:e3:5b:4f:12:96:48:da:
dc:f1:2f:a4:b4:15:a1:de:a3:4b:88:bf:d2:2f:ab:
fe:2a:09:45:db:e0:a2:57:0e:09:73:2e:97:03:01:
0d:4a:94:86:cc:a6:e2:f9:43:52:14:34:56:f2:66:
78:ac:e1:f1:ec:1d:ed:3e:3d:e7:7c:c8:d5:ba:5f:
eb:1a:5d:9d:dd:22:23:88:c4:57:d7:2a:69:3a:47:
4a:cb:a1:3b:c1:f1:86:29:e9:a9:71:88:e3:18:f7:
b9:07:c9:b8:29:e5:23:9d:1d:9d:a5:fc:71:7e:94:
e5:b9:3d:62:ef:00:d3:a9:0a:be:5e:1e:92:0f:22:
f2:49:c8:3a:5e:36:7b:ad:7a:94:0e:2c:d1:47:2b:
ca:e7:de:af:cd:ee:d4:d3:b9:70:24:18:86:2f:26:
cf:eb:70:7b:6b:e7:08:15:bf:0c:f5:c7:dd:1d:3c:
de:ce:0d:e9:b0:f6:bc:c1:f0:b0:ec:db:42:dc:eb:
09:c4:81:cc:89:d8:80:a9:1a:69:fc:86:8e:e1:f6:
b0:21:7b:6b:19:5e:50:77:93:68:55:6c:90:74:d6:
f4:a4:b9:90:e6:7d:f4:6d:ce:7d:f1:ce:d6:bc:a9:
be:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7D:2E:67:C9:DC:20:64:6A:C7:DB:05:C1:4F:37:AB:7C:11:1D:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12BA1A7EFBA911EEB8D61E0B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.94.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:97:c7:d6:8f:0b:31:78:ad:f6:77:5b:94:66:eb:2a:a7:89:
e1:92:6d:70:2a:12:dc:79:b8:79:dd:43:60:0e:91:46:aa:35:
f6:30:93:61:5d:37:11:9d:76:6d:7e:9d:2a:e2:99:d1:52:d7:
5f:9f:87:7b:cc:30:20:3a:17:ce:59:87:74:3d:d2:1e:58:06:
ab:6a:77:fa:f5:76:1d:c5:f8:60:35:e8:06:bd:87:f2:6a:ac:
8c:8f:57:03:18:6b:77:ac:90:34:49:7e:4e:ed:64:f5:67:39:
86:45:a6:a9:7d:f2:80:5b:68:80:4f:a2:ef:8a:66:82:9c:12:
7b:bc:15:9f:d2:e4:41:5e:ba:6d:ff:45:35:98:ea:10:9f:19:
e8:dd:12:01:20:c5:35:f9:63:82:00:e0:03:3e:2a:24:47:4e:
df:91:52:00:78:e8:56:da:61:44:95:15:64:ce:cd:b9:34:b7:
85:e6:1b:3b:04:3a:c6:c3:19:65:dd:8d:62:28:a0:30:f8:60:
07:5d:a1:a4:a5:8f:0b:72:bc:b0:93:63:fd:17:fb:e9:7c:57:
b9:3a:6f:5e:d4:e0:46:0c:94:fa:7e:59:d8:03:33:65:a3:c9:
a8:51:6e:6c:06:5d:3a:a0:59:a6:29:94:6d:c7:14:1b:24:92:
11:2e:fe:75
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK2ZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE2MDQyMzI0WhcNMjQwNDI1MDQyMzI0WjAYMRYw
FAYDVQQDEw02NjFkZmQ0MC0yNTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwzumRFxFcAp2iz4OG3GHcTBEmrsujONbTxKWSNrc8S+ktBWh3qNLiL/S
L6v+KglF2+CiVw4Jcy6XAwENSpSGzKbi+UNSFDRW8mZ4rOHx7B3tPj3nfMjVul/r
Gl2d3SIjiMRX1yppOkdKy6E7wfGGKempcYjjGPe5B8m4KeUjnR2dpfxxfpTluT1i
7wDTqQq+Xh6SDyLyScg6XjZ7rXqUDizRRyvK596vze7U07lwJBiGLybP63B7a+cI
Fb8M9cfdHTzezg3psPa8wfCw7NtC3OsJxIHMidiAqRpp/IaO4fawIXtrGV5Qd5No
VWyQdNb0pLmQ5n30bc598c7WvKm+wQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM19
LmfJ3CBkasfbBcFPN6t8ER2FMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMkJBMUE3RUZCQTkxMUVFQjhENjFFMEIwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVeMA0GCSqGSIb3DQEB
CwUAA4IBAQBPl8fWjwsxeK32d1uUZusqp4nhkm1wKhLcebh53UNgDpFGqjX2MJNh
XTcRnXZtfp0q4pnRUtdfn4d7zDAgOhfOWYd0PdIeWAaranf69XYdxfhgNegGvYfy
aqyMj1cDGGt3rJA0SX5O7WT1ZzmGRaapffKAW2iAT6LvimaCnBJ7vBWf0uRBXrpt
/0U1mOoQnxno3RIBIMU1+WOCAOADPiokR07fkVIAeOhW2mFElRVkzs25NLeF5hs7
BDrGwxll3Y1iKKAw+GAHXaGkpY8Lcrywk2P9F/vpfFe5Om9e1OBGDJT6flnYAzNl
o8moUW5sBl06oFmmKZRtxxQbJJIRLv51
-----END CERTIFICATE-----
Generated at Thu Apr 25 10:41:10 2024 by rpki-client on console-ams.rpki-client.org