Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A266380FAC611EE9F03853D017001B1.roa
File: 3A266380FAC611EE9F03853D017001B1.roa (raw, json)
Hash identifier: 2DswBUzyOA/+VvuIJ0RgGjYuBUy5yLYw1pQJkoaakCg=
Subject key identifier: CF:A3:78:17:2C:14:7D:F8:F3:EB:4C:22:98:AB:4D:63:F9:4A:ED:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ABCF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A266380FAC611EE9F03853D017001B1.roa
Signing time: Mon 15 Apr 2024 01:19:38 +0000
ROA not before: Mon 15 Apr 2024 01:19:34 +0000
ROA not after: Wed 24 Apr 2024 01:19:34 +0000
asID: 139471
IP address blocks: 154.213.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43983 (0xabcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 01:19:34 2024 GMT
Not After : Apr 24 01:19:34 2024 GMT
Subject: CN=661c80aa-e07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b8:39:f8:c8:57:7c:eb:fd:42:60:28:be:79:
ff:dc:1c:0f:ba:f8:82:e8:27:41:e0:04:55:54:24:
ab:b9:73:9b:82:bd:f8:f7:dc:bb:ba:94:5e:4d:4d:
10:4a:40:16:2d:ef:71:42:b7:3d:55:00:2d:64:47:
85:95:af:83:af:c1:d9:7f:d2:91:e1:ba:ae:9c:92:
ae:20:fd:03:72:5f:14:81:ae:3e:0d:ca:be:93:aa:
59:82:84:b8:a6:85:e4:0f:5c:7d:d5:e1:b8:cd:df:
8a:3d:2c:7d:86:ce:c0:ef:a5:91:aa:52:7d:fa:c0:
7c:57:48:b7:07:cf:f2:f7:13:e7:a5:97:49:75:51:
0f:3d:7a:8d:10:57:e3:cc:d6:95:0b:a8:b0:32:cd:
71:17:dd:22:c8:3d:26:40:23:a8:fb:d6:1d:d1:91:
2c:85:82:5a:86:b2:01:c2:79:33:b4:5c:9e:f7:25:
0a:c8:26:0c:7a:f5:43:35:e0:90:f8:4e:bb:cb:b3:
b7:ca:32:bf:97:4a:18:c1:9b:18:4b:14:85:5b:26:
ae:6e:2e:6f:f6:ca:13:2a:3a:5b:6c:c6:98:f6:30:
91:f0:b4:d3:ef:fe:94:92:91:e2:20:31:61:40:30:
44:95:4b:43:db:00:01:31:e7:62:d9:d4:1f:2e:a9:
0c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A3:78:17:2C:14:7D:F8:F3:EB:4C:22:98:AB:4D:63:F9:4A:ED:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A266380FAC611EE9F03853D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.23.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:98:ec:ce:9a:be:01:37:8c:28:32:4f:bc:d3:54:35:25:4f:
f8:1c:6f:a7:ad:9b:83:b8:da:1d:f0:2b:3f:dd:a5:af:f9:87:
f0:5b:67:5a:a9:86:5a:1a:e6:86:f6:d4:c9:7f:05:6e:51:e0:
d3:6b:94:e7:97:dd:34:a3:6f:66:fa:39:94:c1:f1:11:b0:74:
80:44:84:1f:48:9a:22:6a:a7:e6:9d:96:6f:01:00:bc:dc:b6:
fd:f9:25:cb:ff:96:89:15:c6:4b:89:44:21:eb:f4:c6:cd:ae:
66:d2:c3:4d:9d:45:ad:73:60:1f:6c:07:2d:ab:19:4b:e1:4e:
17:3a:08:7d:86:b9:ba:47:93:98:fb:d0:07:4d:ba:43:1f:58:
23:76:f0:12:58:0c:e0:a4:af:e2:c8:fb:6d:5d:b2:71:d9:69:
7a:5d:79:57:b5:02:64:a6:54:9c:a7:74:fa:87:00:7f:1d:af:
6a:9e:b7:cd:b1:40:13:34:9c:36:ff:81:c1:ed:f6:80:d5:df:
5a:ed:28:b9:30:03:a5:30:96:99:d3:76:9b:fd:df:fb:a3:78:
52:1c:de:96:10:ac:83:57:fc:95:eb:09:fc:66:83:c0:8e:75:
51:e0:21:60:d4:05:cb:8d:7f:8a:b4:3c:d0:ad:50:fd:ee:05:
45:0f:2d:21
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKvPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE1MDExOTM0WhcNMjQwNDI0MDExOTM0WjAYMRYw
FAYDVQQDEw02NjFjODBhYS1lMDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmLg5+MhXfOv9QmAovnn/3BwPuviC6CdB4ARVVCSruXObgr3499y7upRe
TU0QSkAWLe9xQrc9VQAtZEeFla+Dr8HZf9KR4bqunJKuIP0Dcl8Uga4+Dcq+k6pZ
goS4poXkD1x91eG4zd+KPSx9hs7A76WRqlJ9+sB8V0i3B8/y9xPnpZdJdVEPPXqN
EFfjzNaVC6iwMs1xF90iyD0mQCOo+9Yd0ZEshYJahrIBwnkztFye9yUKyCYMevVD
NeCQ+E67y7O3yjK/l0oYwZsYSxSFWyaubi5v9soTKjpbbMaY9jCR8LTT7/6UkpHi
IDFhQDBElUtD2wABMedi2dQfLqkMvQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM+j
eBcsFH348+tMIpirTWP5Su3qMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQTI2NjM4MEZBQzYxMUVFOUYwMzg1M0QwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtUXMA0GCSqGSIb3DQEB
CwUAA4IBAQALmOzOmr4BN4woMk+801Q1JU/4HG+nrZuDuNod8Cs/3aWv+YfwW2da
qYZaGuaG9tTJfwVuUeDTa5Tnl900o29m+jmUwfERsHSARIQfSJoiaqfmnZZvAQC8
3Lb9+SXL/5aJFcZLiUQh6/TGza5m0sNNnUWtc2AfbActqxlL4U4XOgh9hrm6R5OY
+9AHTbpDH1gjdvASWAzgpK/iyPttXbJx2Wl6XXlXtQJkplScp3T6hwB/Ha9qnrfN
sUATNJw2/4HB7faA1d9a7Si5MAOlMJaZ03ab/d/7o3hSHN6WEKyDV/yV6wn8ZoPA
jnVR4CFg1AXLjX+KtDzQrVD97gVFDy0h
-----END CERTIFICATE-----
Generated at Wed Apr 24 04:43:07 2024 by rpki-client on console-ams.rpki-client.org