Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B4BA4D6E82111EEBB31F376775412E6.roa
File: 2B4BA4D6E82111EEBB31F376775412E6.roa (raw, json)
Hash identifier: zjkGoWE1zsZ9Knyjl/3Mg3XSXC9nYrazgLelkRqIXDU=
Subject key identifier: E4:65:7D:78:88:57:50:22:81:D4:7E:6E:D0:DF:4C:C1:33:55:E1:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A624
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B4BA4D6E82111EEBB31F376775412E6.roa
Signing time: Fri 22 Mar 2024 07:52:46 +0000
ROA not before: Fri 22 Mar 2024 07:52:42 +0000
ROA not after: Fri 26 Apr 2024 07:52:42 +0000
asID: 328608
IP address blocks: 154.83.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42532 (0xa624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 22 07:52:42 2024 GMT
Not After : Apr 26 07:52:42 2024 GMT
Subject: CN=65fd38cd-47e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:f3:31:98:64:b5:97:03:f5:bc:f3:3f:ea:
20:09:41:1f:b1:dd:76:00:94:66:7d:b4:e6:fe:d4:
a7:4a:cc:b5:91:c3:91:da:50:b7:cf:62:49:60:3d:
b8:93:de:c1:87:1f:53:8c:ad:03:a0:55:99:00:df:
b4:8c:76:37:cf:59:ca:65:8b:20:60:84:2f:79:a6:
a7:14:2b:10:1c:c2:d6:c8:39:45:48:ed:f3:f3:fb:
26:ac:9e:94:a2:3d:38:17:50:ca:f2:41:2d:ec:2f:
41:79:4f:84:93:c3:96:b9:3e:2b:07:fc:c6:7f:ff:
a8:47:d5:fa:8c:b2:ac:b0:d9:1c:49:30:bf:74:db:
d9:1b:a2:a6:8e:66:a5:ee:b4:cd:db:15:32:29:85:
e2:0d:e1:c1:07:d4:a4:22:78:31:d1:f5:03:dd:ec:
e7:af:52:d8:11:e2:8c:50:9a:e7:31:cb:28:f3:c5:
02:13:dd:b4:4b:24:a7:e1:cb:9c:f3:a6:06:8f:39:
9a:fb:67:98:8a:35:34:74:c4:1a:2e:00:b2:10:e6:
ed:29:07:df:7e:db:41:be:ff:3f:38:2c:5c:c3:bd:
56:0d:68:fd:a7:48:f9:1e:19:d5:9e:1b:47:fc:d4:
69:b6:fc:82:9a:45:4b:8e:fc:0a:44:4a:d6:52:ce:
42:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:65:7D:78:88:57:50:22:81:D4:7E:6E:D0:DF:4C:C1:33:55:E1:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B4BA4D6E82111EEBB31F376775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:e0:7b:02:50:66:61:0b:aa:3d:97:0b:09:cb:4a:6d:7a:ca:
20:7b:1f:60:d8:40:2e:9e:a8:05:f9:5e:37:ed:90:e2:44:d4:
10:67:44:79:e4:e7:1b:5c:43:c5:ef:1f:8f:f7:37:1b:90:3f:
b0:4d:7e:20:69:ab:f1:63:e6:93:1e:e9:cf:5d:98:e5:73:95:
83:88:c3:b4:69:0b:c4:95:b0:8a:99:ea:9b:17:df:bb:aa:59:
09:e9:65:d3:23:64:0e:9f:86:35:f6:d6:26:86:c8:0e:52:07:
b4:4b:46:b4:c7:a7:45:af:c1:cf:75:ce:2a:98:05:0e:bc:1f:
2b:32:89:a9:d3:55:68:81:2c:e1:86:6a:6a:32:95:fd:0a:31:
b6:8e:d9:ee:7b:42:09:97:54:25:de:3f:d0:86:fe:24:13:7b:
38:9c:6b:d3:4b:c8:4b:b7:f2:90:57:0a:a7:63:d9:a9:2c:28:
b0:9b:76:22:2a:d5:8a:b9:06:d6:6d:dc:bb:43:94:ac:4c:20:
ce:aa:88:e9:f1:0b:e5:ca:52:0a:1e:48:bb:a0:46:25:37:b7:
41:dd:eb:9a:92:e4:bf:c0:3b:77:fd:68:0b:e3:94:6b:2d:a1:
31:38:00:37:45:73:13:f5:24:35:c0:71:ae:d2:75:44:e7:c2:
37:42:64:56
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKYkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIyMDc1MjQyWhcNMjQwNDI2MDc1MjQyWjAYMRYw
FAYDVQQDEw02NWZkMzhjZC00N2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuMHzMZhktZcD9bzzP+ogCUEfsd12AJRmfbTm/tSnSsy1kcOR2lC3z2JJ
YD24k97Bhx9TjK0DoFWZAN+0jHY3z1nKZYsgYIQveaanFCsQHMLWyDlFSO3z8/sm
rJ6Uoj04F1DK8kEt7C9BeU+Ek8OWuT4rB/zGf/+oR9X6jLKssNkcSTC/dNvZG6Km
jmal7rTN2xUyKYXiDeHBB9SkIngx0fUD3eznr1LYEeKMUJrnMcso88UCE920SySn
4cuc86YGjzma+2eYijU0dMQaLgCyEObtKQfffttBvv8/OCxcw71WDWj9p0j5HhnV
nhtH/NRptvyCmkVLjvwKRErWUs5CwQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFORl
fXiIV1AigdR+btDfTMEzVeFXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yQjRCQTRENkU4MjExMUVFQkIzMUYzNzY3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlMYMA0GCSqGSIb3DQEB
CwUAA4IBAQCn4HsCUGZhC6o9lwsJy0ptesogex9g2EAunqgF+V437ZDiRNQQZ0R5
5OcbXEPF7x+P9zcbkD+wTX4gaavxY+aTHunPXZjlc5WDiMO0aQvElbCKmeqbF9+7
qlkJ6WXTI2QOn4Y19tYmhsgOUge0S0a0x6dFr8HPdc4qmAUOvB8rMomp01VogSzh
hmpqMpX9CjG2jtnue0IJl1Ql3j/Qhv4kE3s4nGvTS8hLt/KQVwqnY9mpLCiwm3Yi
KtWKuQbWbdy7Q5SsTCDOqojp8QvlylIKHki7oEYlN7dB3euakuS/wDt3/WgL45Rr
LaExOAA3RXMT9SQ1wHGu0nVE58I3QmRW
-----END CERTIFICATE-----
Generated at Fri Apr 26 08:27:00 2024 by rpki-client on console-ams.rpki-client.org