Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/300D89DC0F3411EFA99C7846017001B1.roa
File: 300D89DC0F3411EFA99C7846017001B1.roa (raw, json)
Hash identifier: iTk/qfED7zn1piDiQY5r/XpBR7z+kOq22JmHq+eO02g=
Subject key identifier: A0:F2:5A:9C:F3:B4:47:6C:3F:4C:26:15:8E:18:FB:8E:80:9B:1E:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B6F5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/300D89DC0F3411EFA99C7846017001B1.roa
Signing time: Sat 11 May 2024 01:17:09 +0000
ROA not before: Sat 11 May 2024 01:17:06 +0000
ROA not after: Thu 23 May 2024 01:17:06 +0000
asID: 133180
IP address blocks: 154.82.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46837 (0xb6f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 01:17:06 2024 GMT
Not After : May 23 01:17:06 2024 GMT
Subject: CN=663ec715-ea13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ed:e2:78:1e:3d:66:71:51:ef:2b:dc:4f:63:
e1:da:67:33:04:90:e0:fc:d9:8b:a9:03:f1:fd:28:
cd:a3:7d:52:8c:84:22:e7:71:bb:78:e2:bb:5d:16:
24:b9:42:fd:bc:a8:f6:bc:c3:e7:9b:7f:8f:57:97:
16:49:36:70:8b:c1:b2:f4:22:46:5c:f0:e2:8d:42:
54:2a:68:55:9f:18:d5:4e:81:af:bc:71:11:f2:8d:
f4:1b:8d:d2:04:f7:aa:4c:fc:9a:f8:d6:75:f8:cc:
f2:86:2e:d0:89:03:6e:c8:9b:b5:a3:c3:16:e9:a4:
68:7d:cb:9a:ce:48:9b:0e:33:3a:ac:52:d8:6b:b6:
d5:f8:40:b9:2e:a9:52:42:fe:f3:49:38:b9:58:f9:
8a:4b:50:3f:d3:1a:4d:e4:8b:c3:f4:a6:2a:1c:10:
3f:8f:f4:77:88:31:80:63:de:36:4c:69:fe:15:53:
bf:db:5a:ac:69:21:8c:70:5a:21:3d:8a:5e:e4:56:
85:e2:08:da:e8:bd:3a:6e:2f:86:28:53:d7:26:b8:
70:a7:2e:73:04:09:4b:67:42:12:2c:26:a1:b6:df:
12:74:53:65:76:da:c9:69:42:91:47:37:72:94:70:
d3:39:27:cf:03:3d:b6:29:fa:d0:2a:e6:f2:57:31:
dd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F2:5A:9C:F3:B4:47:6C:3F:4C:26:15:8E:18:FB:8E:80:9B:1E:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/300D89DC0F3411EFA99C7846017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.32.0/19
Signature Algorithm: sha256WithRSAEncryption
01:86:70:30:cb:fe:64:c6:f0:96:80:c6:f0:8a:63:f8:c3:28:
c7:2e:0a:b4:2b:0f:53:35:dd:95:b9:ff:13:86:a9:29:cd:1d:
ca:67:a2:42:ff:b6:50:16:47:19:6f:80:ba:4e:cf:6d:94:54:
4d:21:60:8b:ab:ec:ee:ed:4e:e9:3e:cc:51:ec:ed:ec:5d:63:
54:96:a8:a0:6c:96:71:1b:79:cd:f8:8a:e2:de:36:25:a9:09:
91:97:7c:19:f1:aa:57:0c:73:c2:61:e6:a0:e2:7d:a0:36:ba:
fe:ac:32:18:b8:9d:aa:64:fb:15:17:ac:0e:c1:75:c0:cc:68:
3f:46:fd:2c:26:79:f1:fc:2d:56:a3:b5:df:23:8b:6e:48:9b:
de:bd:5c:70:0b:b5:00:c6:70:26:a0:26:c0:a0:82:42:e9:91:
2f:d5:e5:81:21:e7:85:75:ac:08:71:77:c2:9a:47:8d:55:f5:
dd:07:1c:d7:70:d8:a3:60:6b:18:f2:6a:bf:bc:7e:b9:02:f4:
25:e2:00:b0:03:6e:89:e4:de:97:b3:f6:ad:21:1e:46:d8:70:
c8:f2:e2:dc:82:6d:95:d0:b1:d1:0b:e4:65:59:e8:90:f2:d3:
8f:3e:b4:ad:5c:8e:03:8d:1e:af:f1:12:95:74:17:3d:bb:f7:
2c:a9:5d:09
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALb1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTExMDExNzA2WhcNMjQwNTIzMDExNzA2WjAYMRYw
FAYDVQQDEw02NjNlYzcxNS1lYTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwO3ieB49ZnFR7yvcT2Ph2mczBJDg/NmLqQPx/SjNo31SjIQi53G7eOK7
XRYkuUL9vKj2vMPnm3+PV5cWSTZwi8Gy9CJGXPDijUJUKmhVnxjVToGvvHER8o30
G43SBPeqTPya+NZ1+Mzyhi7QiQNuyJu1o8MW6aRofcuazkibDjM6rFLYa7bV+EC5
LqlSQv7zSTi5WPmKS1A/0xpN5IvD9KYqHBA/j/R3iDGAY942TGn+FVO/21qsaSGM
cFohPYpe5FaF4gja6L06bi+GKFPXJrhwpy5zBAlLZ0ISLCahtt8SdFNldtrJaUKR
RzdylHDTOSfPAz22KfrQKubyVzHd+wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKDy
WpzztEdsP0wmFY4Y+46Amx7BMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zMDBEODlEQzBGMzQxMUVGQTk5Qzc4NDYwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlIgMA0GCSqGSIb3DQEB
CwUAA4IBAQABhnAwy/5kxvCWgMbwimP4wyjHLgq0Kw9TNd2Vuf8ThqkpzR3KZ6JC
/7ZQFkcZb4C6Ts9tlFRNIWCLq+zu7U7pPsxR7O3sXWNUlqigbJZxG3nN+Iri3jYl
qQmRl3wZ8apXDHPCYeag4n2gNrr+rDIYuJ2qZPsVF6wOwXXAzGg/Rv0sJnnx/C1W
o7XfI4tuSJvevVxwC7UAxnAmoCbAoIJC6ZEv1eWBIeeFdawIcXfCmkeNVfXdBxzX
cNijYGsY8mq/vH65AvQl4gCwA26J5N6Xs/atIR5G2HDI8uLcgm2V0LHRC+RlWeiQ
8tOPPrStXI4DjR6v8RKVdBc9u/csqV0J
-----END CERTIFICATE-----
Generated at Thu May 23 06:18:24 2024 by rpki-client on console-fra.rpki-client.org