Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1405CFE2E47811EE94E62C93775412E6.roa
File: 1405CFE2E47811EE94E62C93775412E6.roa (raw, json)
Hash identifier: oRG5oNH5cvT5Kx2wCXzYhhlSyn3pbWgDctIdXm6SVx8=
Subject key identifier: 5E:70:06:3A:0A:78:F6:F7:32:D1:E2:CF:40:D8:D6:FF:BB:C0:30:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A26B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1405CFE2E47811EE94E62C93775412E6.roa
Signing time: Sun 17 Mar 2024 16:04:48 +0000
ROA not before: Sun 17 Mar 2024 16:04:44 +0000
ROA not after: Tue 30 Apr 2024 16:04:44 +0000
asID: 63139
IP address blocks: 154.94.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41579 (0xa26b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 16:04:44 2024 GMT
Not After : Apr 30 16:04:44 2024 GMT
Subject: CN=65f714a0-3e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:25:ca:33:ca:00:57:51:66:ca:4e:cd:88:
99:d0:b6:55:81:88:a7:43:e7:33:23:78:f6:e6:1c:
c0:99:40:e2:02:61:ba:25:d7:47:84:f0:77:39:06:
e1:5a:f5:ba:0e:38:c6:a8:53:81:27:92:6e:cc:87:
89:ab:dc:78:4a:93:12:16:6f:98:1c:96:cd:c9:f1:
8c:11:32:c0:5f:83:54:f0:3d:43:87:ca:8d:4f:35:
bc:29:63:13:62:c8:96:cd:39:66:38:25:a4:b4:25:
09:87:0e:fb:1d:97:ce:ed:c4:18:7d:8e:cb:19:5a:
14:17:dd:10:7e:b8:8a:13:c6:1f:4b:ea:50:ee:18:
4d:19:cf:59:71:de:94:4b:2f:9f:24:9d:5f:be:a3:
07:c0:91:fe:79:f5:e6:53:37:04:80:73:71:eb:7f:
0d:cd:80:3f:54:fd:c1:be:0c:c0:81:3a:7b:7e:90:
56:84:08:6c:14:3b:45:d1:ae:f0:2c:08:ce:2d:fd:
c0:09:47:fd:4e:79:8e:14:e2:c4:a5:c5:77:1c:73:
d5:8e:af:51:55:aa:27:4c:23:68:26:32:8f:2f:80:
9d:e3:04:17:16:ef:29:31:6d:49:de:e5:66:b5:4e:
88:3e:09:7c:a6:b6:5e:d7:bb:6d:89:af:b6:63:96:
12:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:70:06:3A:0A:78:F6:F7:32:D1:E2:CF:40:D8:D6:FF:BB:C0:30:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1405CFE2E47811EE94E62C93775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.64.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:16:f1:38:c1:22:38:ef:86:a8:26:be:bb:5a:2a:c7:5d:10:
f8:0f:d0:5f:32:cb:37:29:0e:bd:ae:86:8b:85:6b:7d:1d:21:
ec:52:5d:b0:87:b2:c4:5b:b4:fd:1d:07:59:d3:b2:57:de:99:
f3:6d:52:34:75:1a:89:3c:0a:d7:0b:36:a1:7f:c7:f0:53:d3:
bf:57:ed:95:60:f1:fe:14:af:0d:3c:da:29:52:58:71:6c:d9:
bf:d2:ce:bd:c6:87:b4:0c:20:38:10:19:90:77:f7:cc:2d:60:
2f:17:61:27:3c:72:10:86:8b:43:7d:9f:00:1b:37:1e:33:67:
ac:99:72:78:ab:1d:db:f4:a1:8e:00:95:c0:de:37:75:9d:22:
60:86:fb:bb:cc:2c:03:17:f4:ba:93:48:be:0e:7f:2b:3d:fa:
a2:ec:ee:cf:76:ae:91:05:9d:fd:f4:e0:55:7f:07:96:3d:6b:
84:c0:7b:3e:1b:e6:2b:53:bc:99:aa:98:c8:b9:ce:19:d3:3c:
fe:2d:be:21:29:8e:b0:d8:8e:9b:3d:58:8f:03:39:1e:ab:d4:
c2:34:7a:22:bb:43:1c:9d:67:90:9c:5c:26:3a:b6:b8:ba:da:
f9:aa:83:8d:9c:d0:bb:c2:62:78:78:6f:24:54:70:98:8e:48:
23:24:8b:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKJrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzE3MTYwNDQ0WhcNMjQwNDMwMTYwNDQ0WjAYMRYw
FAYDVQQDEw02NWY3MTRhMC0zZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAysIlyjPKAFdRZspOzYiZ0LZVgYinQ+czI3j25hzAmUDiAmG6JddHhPB3
OQbhWvW6DjjGqFOBJ5JuzIeJq9x4SpMSFm+YHJbNyfGMETLAX4NU8D1Dh8qNTzW8
KWMTYsiWzTlmOCWktCUJhw77HZfO7cQYfY7LGVoUF90QfriKE8YfS+pQ7hhNGc9Z
cd6USy+fJJ1fvqMHwJH+efXmUzcEgHNx638NzYA/VP3BvgzAgTp7fpBWhAhsFDtF
0a7wLAjOLf3ACUf9TnmOFOLEpcV3HHPVjq9RVaonTCNoJjKPL4Cd4wQXFu8pMW1J
3uVmtU6IPgl8prZe17ttia+2Y5YSSQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF5w
BjoKePb3MtHiz0DY1v+7wDBaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xNDA1Q0ZFMkU0NzgxMUVFOTRFNjJDOTM3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5AMA0GCSqGSIb3DQEB
CwUAA4IBAQDWFvE4wSI474aoJr67WirHXRD4D9BfMss3KQ69roaLhWt9HSHsUl2w
h7LEW7T9HQdZ07JX3pnzbVI0dRqJPArXCzahf8fwU9O/V+2VYPH+FK8NPNopUlhx
bNm/0s69xoe0DCA4EBmQd/fMLWAvF2EnPHIQhotDfZ8AGzceM2esmXJ4qx3b9KGO
AJXA3jd1nSJghvu7zCwDF/S6k0i+Dn8rPfqi7O7Pdq6RBZ399OBVfweWPWuEwHs+
G+YrU7yZqpjIuc4Z0zz+Lb4hKY6w2I6bPViPAzkeq9TCNHoiu0McnWeQnFwmOra4
utr5qoONnNC7wmJ4eG8kVHCYjkgjJIuY
-----END CERTIFICATE-----
Generated at Wed May 1 02:03:19 2024 by rpki-client on console-ams.rpki-client.org