Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46CDA668FB9B11EEA7AEFB16017001B1.roa
File: 46CDA668FB9B11EEA7AEFB16017001B1.roa (raw, json)
Hash identifier: rPMkEadxA54/PeZVPYG0Tm/kM4xOsZffJOdhCwSIM/s=
Subject key identifier: F1:06:17:C1:AC:FF:D6:03:D4:55:62:AB:B1:F3:6C:B1:79:5D:B3:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD1B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46CDA668FB9B11EEA7AEFB16017001B1.roa
Signing time: Tue 16 Apr 2024 02:44:42 +0000
ROA not before: Tue 16 Apr 2024 02:44:39 +0000
ROA not after: Thu 25 Apr 2024 02:44:39 +0000
asID: 136778
IP address blocks: 154.212.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44315 (0xad1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 02:44:39 2024 GMT
Not After : Apr 25 02:44:39 2024 GMT
Subject: CN=661de61a-11bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:b7:b8:7a:3a:36:bf:ac:1e:cb:2d:bf:b2:
38:3b:ab:06:04:ff:0d:1d:0b:77:52:3f:7c:2b:b2:
5a:50:a7:67:19:d2:9b:5d:03:32:63:10:9b:84:8c:
77:1b:74:a1:ce:bd:73:75:07:ef:61:41:c6:77:b2:
24:00:c7:88:d8:2c:e0:77:54:4d:38:74:a6:b2:dc:
98:20:f7:ea:bd:ed:bf:4d:7f:2b:f4:be:20:9f:2f:
f3:e0:de:a4:b0:2d:a2:ae:83:bf:d6:14:9c:5c:0c:
70:50:cf:e5:80:3b:fb:41:2c:7f:ba:38:2e:e7:ee:
d8:ab:f3:a9:72:5d:43:de:a5:12:2f:57:3a:5d:03:
4c:d0:a4:a3:d9:8b:4c:cb:c3:56:b7:ab:bc:16:2c:
11:7c:8c:22:af:85:2c:3c:9a:4d:11:5a:b4:b4:c0:
a5:0d:08:b7:f9:09:c9:9d:88:14:53:1b:14:dd:18:
bd:d7:29:75:26:8c:8f:c6:11:05:63:18:d1:ef:79:
a2:6c:fd:2c:f5:29:c1:4a:e6:da:29:82:b2:4a:91:
ef:32:4a:89:ca:7d:f7:fb:5b:c6:9b:7b:c4:ed:ae:
23:58:8c:42:2f:4c:e1:29:7b:7b:10:09:e6:bb:83:
17:00:d0:ff:9a:32:c9:82:e9:54:50:69:5f:41:f0:
12:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:06:17:C1:AC:FF:D6:03:D4:55:62:AB:B1:F3:6C:B1:79:5D:B3:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46CDA668FB9B11EEA7AEFB16017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.144.0/24
Signature Algorithm: sha256WithRSAEncryption
32:17:53:8a:f9:45:41:da:ae:92:ed:59:ab:9f:8e:be:5f:79:
a8:1f:86:d7:0d:6d:37:2a:42:dc:9c:f9:dd:a0:13:99:8c:b1:
36:5f:6b:7d:54:e0:d4:2e:1f:8e:78:64:df:2a:bb:59:84:a6:
3e:f0:e5:c1:5f:9e:dd:c0:2b:e4:b6:04:bb:fa:09:7b:55:5a:
3c:17:62:f3:01:96:37:42:e0:5f:83:e7:e5:56:52:87:b7:da:
24:54:5f:6a:29:ab:b2:65:f6:f8:fd:78:ec:90:cd:37:d5:ea:
82:cf:60:22:9d:6c:ed:5e:20:ea:40:64:61:f0:54:7a:38:ac:
dc:8a:c6:85:d5:d2:3b:b8:85:4e:df:8f:3b:df:59:4b:19:c5:
cf:e4:2f:5c:3c:a6:3d:57:e9:83:01:6d:0c:32:32:c7:ea:f5:
02:33:1d:11:2d:03:34:92:c5:9e:7e:46:81:f5:09:ba:82:8c:
65:42:20:eb:9d:58:40:f4:78:8e:be:ff:58:cf:a6:90:ad:9f:
14:7c:80:71:ab:f1:bf:9a:46:87:61:74:41:1a:21:5d:a3:1f:
66:95:34:e3:ce:4e:33:a8:76:1f:61:5d:d6:54:cb:b0:c7:8f:
24:06:a9:58:00:09:df:15:8f:f1:bb:c8:6a:f2:9c:a8:f5:94:
b7:f2:4e:56
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK0bMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE2MDI0NDM5WhcNMjQwNDI1MDI0NDM5WjAYMRYw
FAYDVQQDEw02NjFkZTYxYS0xMWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwE+3uHo6Nr+sHsstv7I4O6sGBP8NHQt3Uj98K7JaUKdnGdKbXQMyYxCb
hIx3G3Shzr1zdQfvYUHGd7IkAMeI2Czgd1RNOHSmstyYIPfqve2/TX8r9L4gny/z
4N6ksC2iroO/1hScXAxwUM/lgDv7QSx/ujgu5+7Yq/Opcl1D3qUSL1c6XQNM0KSj
2YtMy8NWt6u8FiwRfIwir4UsPJpNEVq0tMClDQi3+QnJnYgUUxsU3Ri91yl1JoyP
xhEFYxjR73mibP0s9SnBSubaKYKySpHvMkqJyn33+1vGm3vE7a4jWIxCL0zhKXt7
EAnmu4MXAND/mjLJgulUUGlfQfAS+wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPEG
F8Gs/9YD1FViq7HzbLF5XbOQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NkNEQTY2OEZCOUIxMUVFQTdBRUZCMTYwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtSQMA0GCSqGSIb3DQEB
CwUAA4IBAQAyF1OK+UVB2q6S7Vmrn46+X3moH4bXDW03KkLcnPndoBOZjLE2X2t9
VODULh+OeGTfKrtZhKY+8OXBX57dwCvktgS7+gl7VVo8F2LzAZY3QuBfg+flVlKH
t9okVF9qKauyZfb4/XjskM031eqCz2AinWztXiDqQGRh8FR6OKzcisaF1dI7uIVO
348731lLGcXP5C9cPKY9V+mDAW0MMjLH6vUCMx0RLQM0ksWefkaB9Qm6goxlQiDr
nVhA9HiOvv9Yz6aQrZ8UfIBxq/G/mkaHYXRBGiFdox9mlTTjzk4zqHYfYV3WVMuw
x48kBqlYAAnfFY/xu8hq8pyo9ZS38k5W
-----END CERTIFICATE-----
Generated at Thu Apr 25 09:50:18 2024 by rpki-client on console-fra.rpki-client.org