Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33ED5FB2E5C411EE94A55B79775412E6.roa
File: 33ED5FB2E5C411EE94A55B79775412E6.roa (raw, json)
Hash identifier: dL+JFSoOeZVBdAhcOucygxBwAMI5wkXpqwzERr64nm4=
Subject key identifier: D8:A6:B0:ED:0D:C0:F0:C3:96:B6:94:D5:71:A3:8E:BD:4D:97:F4:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A304
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33ED5FB2E5C411EE94A55B79775412E6.roa
Signing time: Tue 19 Mar 2024 07:42:14 +0000
ROA not before: Tue 19 Mar 2024 07:42:11 +0000
ROA not after: Tue 30 Apr 2024 07:42:11 +0000
asID: 63139
IP address blocks: 154.94.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41732 (0xa304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 19 07:42:11 2024 GMT
Not After : Apr 30 07:42:11 2024 GMT
Subject: CN=65f941d6-6cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:45:65:32:39:8f:e5:12:5a:4d:73:0d:d4:64:
0f:cc:f6:14:cd:ae:48:47:fc:93:61:29:be:47:42:
c7:92:1d:ba:ab:e1:78:22:5a:8c:ee:c6:18:cb:9b:
15:32:7e:36:a0:d8:0a:37:40:87:c7:f5:ba:25:3a:
a1:2e:b5:b7:eb:63:e3:ce:51:c0:a0:b2:b4:13:da:
af:e4:87:bc:90:ea:76:fb:bf:cf:74:e6:17:d3:1f:
da:1c:0b:aa:b7:31:cc:a2:94:d0:44:dc:b5:59:c4:
c5:49:4a:f7:b8:60:3f:0e:cd:12:dd:39:c8:80:82:
6e:e8:41:0a:89:21:05:7d:fa:d8:3a:67:38:34:6b:
2a:35:c7:3e:38:72:8f:8d:79:00:dc:29:4a:b5:f0:
a6:a6:da:a0:54:7a:66:83:6e:54:62:ec:b5:f5:35:
be:f9:d9:ae:07:2e:e2:37:43:5b:25:7d:92:6f:9a:
c7:84:93:2c:1b:de:bd:4c:ab:f9:d9:b7:f0:f9:73:
57:aa:eb:23:cd:99:7e:6c:e4:15:98:78:ee:47:78:
02:97:8f:40:ec:5d:fd:6b:82:18:02:11:ad:d4:40:
fd:f1:e1:f9:b2:4b:4d:89:c4:27:2f:76:07:91:cc:
54:65:6c:0d:e8:42:ca:a9:f6:9d:a4:69:d4:02:43:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A6:B0:ED:0D:C0:F0:C3:96:B6:94:D5:71:A3:8E:BD:4D:97:F4:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33ED5FB2E5C411EE94A55B79775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:84:0a:6a:61:ce:8e:5d:a8:b2:f9:97:38:35:d9:c7:bf:41:
9d:3b:3c:38:9e:c7:33:1e:75:8d:2c:0c:e0:6e:d0:12:b2:f6:
d8:d0:39:6e:07:7f:81:cb:7f:5e:30:8c:5c:bf:57:0f:c7:96:
e2:e6:5d:f3:cf:f5:f2:52:47:18:f9:23:ad:e2:5e:db:15:98:
1a:a1:e6:e5:d0:42:ee:18:c8:5f:0d:77:b2:ce:45:d7:15:9c:
dc:53:c1:aa:84:b0:d2:15:56:84:3b:ec:c9:dd:63:2c:3f:e4:
0d:12:86:8f:3c:c0:f8:62:30:16:82:cf:9d:a9:38:68:3a:cd:
7a:e4:7f:8d:9e:87:68:b0:57:b5:eb:97:4b:ac:1c:3c:25:60:
4b:3f:8a:6f:47:73:2f:14:fe:63:85:26:77:5a:a0:d2:e5:52:
3a:9b:66:6a:a7:df:3f:57:d0:8c:21:78:c1:c5:77:c2:e6:47:
0e:ce:84:f5:27:c3:ab:be:f5:15:6e:6b:49:c6:c0:1a:8b:10:
12:e9:4e:1d:c5:6b:7e:48:3b:89:4d:74:45:78:03:69:3e:9e:
f5:00:fe:da:76:e4:0f:4c:9d:cd:77:14:8f:78:70:5e:01:78:
3d:3e:57:b9:bc:6b:e5:31:58:c0:d8:af:3a:80:44:9d:5b:cc:
e7:37:d2:37
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKMEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzE5MDc0MjExWhcNMjQwNDMwMDc0MjExWjAYMRYw
FAYDVQQDEw02NWY5NDFkNi02Y2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4EVlMjmP5RJaTXMN1GQPzPYUza5IR/yTYSm+R0LHkh26q+F4IlqM7sYY
y5sVMn42oNgKN0CHx/W6JTqhLrW362PjzlHAoLK0E9qv5Ie8kOp2+7/PdOYX0x/a
HAuqtzHMopTQRNy1WcTFSUr3uGA/Ds0S3TnIgIJu6EEKiSEFffrYOmc4NGsqNcc+
OHKPjXkA3ClKtfCmptqgVHpmg25UYuy19TW++dmuBy7iN0NbJX2Sb5rHhJMsG969
TKv52bfw+XNXqusjzZl+bOQVmHjuR3gCl49A7F39a4IYAhGt1ED98eH5sktNicQn
L3YHkcxUZWwN6ELKqfadpGnUAkM8aQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNim
sO0NwPDDlraU1XGjjr1Nl/QlMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zM0VENUZCMkU1QzQxMUVFOTRBNTVCNzk3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml54MA0GCSqGSIb3DQEB
CwUAA4IBAQBPhApqYc6OXaiy+Zc4NdnHv0GdOzw4nsczHnWNLAzgbtASsvbY0Dlu
B3+By39eMIxcv1cPx5bi5l3zz/XyUkcY+SOt4l7bFZgaoebl0ELuGMhfDXeyzkXX
FZzcU8GqhLDSFVaEO+zJ3WMsP+QNEoaPPMD4YjAWgs+dqThoOs165H+NnodosFe1
65dLrBw8JWBLP4pvR3MvFP5jhSZ3WqDS5VI6m2Zqp98/V9CMIXjBxXfC5kcOzoT1
J8OrvvUVbmtJxsAaixAS6U4dxWt+SDuJTXRFeANpPp71AP7aduQPTJ3NdxSPeHBe
AXg9Ple5vGvlMVjA2K86gESdW8znN9I3
-----END CERTIFICATE-----
Generated at Tue Apr 30 12:15:42 2024 by rpki-client on console-fra.rpki-client.org