Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16F2DDA8E78E11EE9E32A872775412E6.roa
File: 16F2DDA8E78E11EE9E32A872775412E6.roa (raw, json)
Hash identifier: uSk5TiCUjb+oyxEDDJCfKB+m8Skl47HykVmTbgXsEBI=
Subject key identifier: 82:59:49:F3:AB:D4:FD:6F:BA:CD:25:83:3D:B7:AC:74:A6:0A:F1:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A5D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16F2DDA8E78E11EE9E32A872775412E6.roa
Signing time: Thu 21 Mar 2024 14:19:55 +0000
ROA not before: Thu 21 Mar 2024 14:19:52 +0000
ROA not after: Thu 25 Apr 2024 14:19:52 +0000
asID: 5065
IP address blocks: 154.206.52.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42453 (0xa5d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 14:19:52 2024 GMT
Not After : Apr 25 14:19:52 2024 GMT
Subject: CN=65fc420b-a97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:15:20:28:d0:26:84:b3:45:b8:9d:33:12:bd:
c1:ab:aa:95:d6:ba:4c:b3:fd:e1:21:a4:e0:ad:e3:
fa:68:35:a2:20:96:97:12:c0:94:da:cd:98:24:76:
87:c7:b2:80:83:aa:d5:5b:32:28:67:47:4b:f2:46:
f2:95:8c:dd:7a:0d:21:3a:66:6b:9d:fe:69:dd:31:
ef:61:fc:1f:29:e6:14:f8:f5:91:fc:02:1f:aa:a3:
15:f6:0f:8a:86:bc:c3:90:17:3c:51:8f:45:b1:7c:
8f:5b:b7:e1:dd:84:ce:37:99:a4:fe:37:9f:14:07:
78:fd:c2:94:6e:5c:2e:fa:18:8d:8b:f9:6d:06:50:
6d:10:6c:cd:52:42:6c:3e:9e:4f:cc:ab:48:02:92:
dc:c5:bf:ea:61:eb:a0:65:ad:1e:da:5a:bf:35:60:
42:f3:09:13:c0:53:cf:7f:69:a3:64:f3:c0:bf:8a:
77:71:3a:2c:74:a5:36:b9:8a:bc:e7:a1:2f:ce:eb:
60:b8:7f:e5:94:f0:6c:4a:ed:37:cd:2e:e0:14:b9:
7b:2d:0f:c1:9b:ce:b0:d0:da:dd:49:b0:a9:bf:62:
84:c5:d1:54:a5:78:a9:17:bb:50:d1:48:bc:95:cc:
a8:1a:aa:58:f7:eb:d1:c2:41:79:13:fa:dc:20:cf:
6e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:59:49:F3:AB:D4:FD:6F:BA:CD:25:83:3D:B7:AC:74:A6:0A:F1:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16F2DDA8E78E11EE9E32A872775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.52.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:82:bd:cd:c7:96:ac:93:c4:fb:9d:b2:be:f3:39:a9:0f:f7:
3a:c4:77:50:2a:f7:ed:a5:f3:8f:6c:18:29:95:08:5a:c5:27:
80:a6:38:36:c3:75:e7:d8:93:57:dd:ca:3f:69:04:bb:1e:92:
f1:dc:0a:53:c5:be:e2:94:81:97:3c:91:30:96:d1:c1:e8:c2:
a9:d6:75:62:18:62:dd:c5:f2:4d:f4:b5:8e:0e:ce:5d:3e:6f:
c8:25:95:6e:c9:a2:5e:fa:20:54:80:2b:76:5e:da:e2:82:c3:
ef:64:f2:9c:21:dc:c0:98:29:22:22:38:2f:92:79:60:97:cf:
4b:14:49:0e:a2:9c:6f:84:b3:b6:f5:a2:7c:f1:95:4d:81:cb:
a5:e5:8b:6f:69:c9:15:0f:21:d3:01:fe:70:40:23:0d:66:66:
cf:cb:ec:d7:ea:b8:ea:b4:e8:f2:f7:46:43:56:88:4e:58:5e:
2d:ea:85:dc:06:ae:e5:84:78:a5:94:f2:78:03:12:34:df:26:
fe:59:c5:02:00:fc:9f:3b:6b:f4:f9:83:9a:be:b9:3c:57:66:
fe:e8:fd:33:62:82:bd:5b:fb:10:75:a5:eb:88:d0:7a:df:15:
ca:7c:8e:21:5d:12:74:d7:cc:10:a6:d1:a7:16:3d:8e:16:b2:
b8:71:8a:54
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKXVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMTQxOTUyWhcNMjQwNDI1MTQxOTUyWjAYMRYw
FAYDVQQDEw02NWZjNDIwYi1hOTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9RUgKNAmhLNFuJ0zEr3Bq6qV1rpMs/3hIaTgreP6aDWiIJaXEsCU2s2Y
JHaHx7KAg6rVWzIoZ0dL8kbylYzdeg0hOmZrnf5p3THvYfwfKeYU+PWR/AIfqqMV
9g+KhrzDkBc8UY9FsXyPW7fh3YTON5mk/jefFAd4/cKUblwu+hiNi/ltBlBtEGzN
UkJsPp5PzKtIApLcxb/qYeugZa0e2lq/NWBC8wkTwFPPf2mjZPPAv4p3cTosdKU2
uYq856EvzutguH/llPBsSu03zS7gFLl7LQ/Bm86w0NrdSbCpv2KExdFUpXipF7tQ
0Ui8lcyoGqpY9+vRwkF5E/rcIM9uqwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIJZ
SfOr1P1vus0lgz23rHSmCvEOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xNkYyRERBOEU3OEUxMUVFOUUzMkE4NzI3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCms40MA0GCSqGSIb3DQEB
CwUAA4IBAQAtgr3Nx5ask8T7nbK+8zmpD/c6xHdQKvftpfOPbBgplQhaxSeApjg2
w3Xn2JNX3co/aQS7HpLx3ApTxb7ilIGXPJEwltHB6MKp1nViGGLdxfJN9LWODs5d
Pm/IJZVuyaJe+iBUgCt2XtrigsPvZPKcIdzAmCkiIjgvknlgl89LFEkOopxvhLO2
9aJ88ZVNgcul5YtvackVDyHTAf5wQCMNZmbPy+zX6rjqtOjy90ZDVohOWF4t6oXc
Bq7lhHillPJ4AxI03yb+WcUCAPyfO2v0+YOavrk8V2b+6P0zYoK9W/sQdaXriNB6
3xXKfI4hXRJ018wQptGnFj2OFrK4cYpU
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:26 2024 by rpki-client on console-fra.rpki-client.org