Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/427EDC12FBA511EE8BBE1B68017001B1.roa
File: 427EDC12FBA511EE8BBE1B68017001B1.roa (raw, json)
Hash identifier: dWCiOLagKQAYm+qn3+UPMHQK+9IgRoEdk+yG2SH/4ZE=
Subject key identifier: 34:AF:14:A1:28:B7:14:F5:9F:9E:14:E8:88:6C:A4:60:61:0F:10:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD6F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/427EDC12FBA511EE8BBE1B68017001B1.roa
Signing time: Tue 16 Apr 2024 03:56:10 +0000
ROA not before: Tue 16 Apr 2024 03:56:07 +0000
ROA not after: Wed 24 Apr 2024 03:56:07 +0000
asID: 142062
IP address blocks: 154.206.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44399 (0xad6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 03:56:07 2024 GMT
Not After : Apr 24 03:56:07 2024 GMT
Subject: CN=661df6da-587e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:7e:e8:1a:ff:eb:c5:bc:1c:c9:4c:d8:a2:
f6:50:ba:3f:34:72:1f:69:e2:a6:89:23:9e:a9:1c:
28:3a:38:98:d9:60:57:36:3a:6f:f7:f9:2c:e7:98:
b0:65:c9:20:32:6d:fc:46:2e:49:ad:dc:a9:13:15:
c7:ec:eb:2f:48:99:dc:2b:e7:e6:01:26:f6:d4:0f:
ad:8d:9b:68:b3:c5:f5:82:21:6d:a4:09:f1:97:3a:
27:70:3a:e8:27:a9:eb:71:f3:65:5a:44:b5:53:ae:
94:75:cb:50:13:e4:03:47:40:6d:e0:86:ff:d9:f5:
60:42:14:7c:d6:de:05:36:a7:70:a9:3a:20:66:68:
51:1b:85:95:5d:fb:c7:a3:be:19:5d:11:af:1d:fc:
05:5e:02:c2:77:21:d0:9c:8e:5b:8f:b4:9d:2a:3b:
09:d7:23:13:b4:df:24:ff:6e:cd:91:db:b2:7f:89:
0e:80:58:3b:57:3e:a4:4e:5d:db:10:7b:7c:76:17:
c5:cb:68:16:e0:d5:c1:a0:8b:cc:a6:15:33:1e:4c:
3f:4b:c1:44:78:65:4c:e1:b4:0e:3f:20:dc:49:a5:
49:42:c2:37:45:11:54:b5:46:1a:d8:81:6f:74:db:
f1:1f:a4:81:13:f4:54:31:1d:f1:6c:de:82:69:9e:
22:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AF:14:A1:28:B7:14:F5:9F:9E:14:E8:88:6C:A4:60:61:0F:10:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/427EDC12FBA511EE8BBE1B68017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.212.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:4c:82:bb:1d:7e:26:04:e1:09:52:5d:25:5e:1c:69:7e:f3:
61:76:cc:c1:81:d7:88:8f:d1:52:a9:86:29:c4:4a:86:36:3d:
c7:4a:77:d1:42:04:26:ba:7e:95:08:af:9c:6e:97:3f:22:25:
1b:74:1e:95:ec:19:27:ca:74:db:b8:ef:65:9d:eb:e1:5f:ce:
8c:b0:12:1b:96:1f:be:87:71:41:06:0c:4d:c3:56:1c:b0:b5:
78:1b:93:7e:77:37:a6:c3:9e:dd:90:d1:96:15:1e:48:b1:b7:
2a:c0:78:e2:c9:6d:77:46:0a:a3:cc:da:4f:70:40:72:60:47:
df:29:c4:fe:58:9d:4d:0c:80:b5:94:f2:fa:2b:a6:80:af:0e:
60:8c:bd:77:e1:19:b9:df:2d:5e:7b:73:64:33:5e:d9:04:a8:
8d:17:ca:61:3d:57:ad:36:c7:00:d8:8d:99:a4:23:5b:fa:3c:
58:58:eb:6f:9a:65:33:cb:db:54:26:0e:7c:50:96:18:56:b2:
1e:b3:ad:71:da:df:2b:f3:19:3e:37:6c:b3:12:ed:03:e9:85:
a8:34:c5:4b:72:ef:b8:2a:ef:f4:f0:24:b0:55:8f:c3:11:23:
54:e2:82:b3:39:96:d4:52:c6:40:c6:0d:dd:a8:8c:03:a4:1a:
c0:e4:9d:c4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK1vMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE2MDM1NjA3WhcNMjQwNDI0MDM1NjA3WjAYMRYw
FAYDVQQDEw02NjFkZjZkYS01ODdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx21+6Br/68W8HMlM2KL2ULo/NHIfaeKmiSOeqRwoOjiY2WBXNjpv9/ks
55iwZckgMm38Ri5JrdypExXH7OsvSJncK+fmASb21A+tjZtos8X1giFtpAnxlzon
cDroJ6nrcfNlWkS1U66UdctQE+QDR0Bt4Ib/2fVgQhR81t4FNqdwqTogZmhRG4WV
XfvHo74ZXRGvHfwFXgLCdyHQnI5bj7SdKjsJ1yMTtN8k/27Nkduyf4kOgFg7Vz6k
Tl3bEHt8dhfFy2gW4NXBoIvMphUzHkw/S8FEeGVM4bQOPyDcSaVJQsI3RRFUtUYa
2IFvdNvxH6SBE/RUMR3xbN6CaZ4ilwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDSv
FKEotxT1n54U6IhspGBhDxBAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MjdFREMxMkZCQTUxMUVFOEJCRTFCNjgwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms7UMA0GCSqGSIb3DQEB
CwUAA4IBAQAPTIK7HX4mBOEJUl0lXhxpfvNhdszBgdeIj9FSqYYpxEqGNj3HSnfR
QgQmun6VCK+cbpc/IiUbdB6V7BknynTbuO9lnevhX86MsBIblh++h3FBBgxNw1Yc
sLV4G5N+dzemw57dkNGWFR5IsbcqwHjiyW13RgqjzNpPcEByYEffKcT+WJ1NDIC1
lPL6K6aArw5gjL134Rm53y1ee3NkM17ZBKiNF8phPVetNscA2I2ZpCNb+jxYWOtv
mmUzy9tUJg58UJYYVrIes61x2t8r8xk+N2yzEu0D6YWoNMVLcu+4Ku/08CSwVY/D
ESNU4oKzOZbUUsZAxg3dqIwDpBrA5J3E
-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:38 2024 by rpki-client on console-fra.rpki-client.org