Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4740C9D0BECA11EE8870DB76775412E6.roa
File: 4740C9D0BECA11EE8870DB76775412E6.roa (raw, json)
Hash identifier: pMJkDpMnXFwTyNjKWkAyAKL6dYgwJj2lVo2JgL+AcHw=
Subject key identifier: C4:74:CC:62:ED:8C:EB:CA:CB:74:29:F7:84:36:B6:2F:1F:9B:CE:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7FDB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4740C9D0BECA11EE8870DB76775412E6.roa
Signing time: Mon 29 Jan 2024 17:17:28 +0000
ROA not before: Tue 30 Jan 2024 17:17:25 +0000
ROA not after: Wed 01 May 2024 17:17:25 +0000
asID: 216038
IP address blocks: 154.86.26.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32731 (0x7fdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 30 17:17:25 2024 GMT
Not After : May 1 17:17:25 2024 GMT
Subject: CN=65b7dda8-1b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a6:f5:5c:2c:06:91:41:66:13:93:1e:8a:2d:
32:c8:24:b9:0e:c4:23:65:ef:d0:46:25:2e:d5:e4:
88:2e:31:97:a7:17:eb:b1:12:e4:9b:ca:bb:6f:2f:
ce:e5:f1:42:6c:64:eb:69:0d:06:c5:18:87:8f:13:
a1:62:ff:0a:2f:cb:2e:53:97:43:2a:d3:49:47:53:
82:fa:29:d5:c9:2a:72:91:be:97:d3:cf:3f:59:7d:
87:96:34:f5:ac:23:84:c3:70:3c:9e:14:4d:6a:69:
ca:06:e0:6d:6f:ec:19:6a:de:cb:c5:b4:63:80:3c:
81:ef:86:4a:8b:9a:3a:2e:1e:22:56:97:03:95:a7:
41:79:68:57:a1:cd:c9:e8:7d:b9:de:8e:84:d6:49:
62:38:b3:c9:70:8c:2a:22:43:34:4d:02:56:ca:85:
72:a0:c3:01:8f:eb:96:91:10:f8:3f:33:07:9c:31:
a9:89:db:ea:0c:12:a8:87:5d:89:d9:70:a9:a1:8e:
fd:d5:f2:d1:2d:d6:09:8d:ec:53:24:06:f6:a5:a5:
87:98:a0:cb:32:9a:d8:86:35:93:50:bd:40:b6:47:
dc:4b:67:10:52:7d:80:50:41:a0:50:2c:13:2b:36:
24:d9:52:37:84:99:74:6c:b7:41:42:43:08:a9:49:
30:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:74:CC:62:ED:8C:EB:CA:CB:74:29:F7:84:36:B6:2F:1F:9B:CE:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4740C9D0BECA11EE8870DB76775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.26.0/23
Signature Algorithm: sha256WithRSAEncryption
93:2b:13:88:a6:51:8c:2f:02:9d:e3:f8:1f:57:40:a6:62:c6:
86:4d:5f:d2:d9:a7:9b:25:67:2b:4a:8e:95:aa:52:f1:5d:a1:
25:ca:38:a1:f5:60:1d:05:82:a8:5b:f7:85:a4:da:4b:0e:8d:
4a:4a:b2:9b:f5:c2:db:c1:f1:9f:71:da:9d:cb:54:bc:e5:f5:
11:9c:82:61:59:d7:d1:e7:3e:ad:86:04:bb:14:34:40:fa:87:
77:7d:fb:74:f0:39:bf:04:54:71:f0:ff:ee:6b:0e:7f:09:dc:
74:27:9b:0a:c4:32:82:59:10:6b:23:c9:67:4f:85:8f:8d:97:
ed:06:31:b0:0c:43:ca:80:c6:bc:32:f2:48:99:63:f3:dc:1a:
ee:36:26:37:35:77:62:8f:95:8e:65:4c:d4:a7:c1:b4:e3:b9:
a9:f2:7d:b4:9e:a2:a4:a6:1b:7a:32:63:bc:01:6d:cd:6b:11:
2e:54:62:ee:2d:ce:7f:0c:41:3b:6f:f9:f3:bb:22:2f:d6:a0:
49:18:7b:0c:f0:1d:06:e8:f5:4f:21:9c:c0:a2:39:36:56:36:
2f:96:89:73:57:8a:ba:cc:d7:74:51:c3:32:44:39:dc:77:82:
90:14:f4:b8:34:e8:cf:98:39:2e:5a:08:b0:cb:32:2e:2d:cd:
44:d4:c8:9c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICf9swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yNDAxMzAxNzE3MjVaFw0yNDA1MDExNzE3MjVaMBgxFjAU
BgNVBAMTDTY1YjdkZGE4LTFiMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDqpvVcLAaRQWYTkx6KLTLIJLkOxCNl79BGJS7V5IguMZenF+uxEuSbyrtv
L87l8UJsZOtpDQbFGIePE6Fi/wovyy5Tl0Mq00lHU4L6KdXJKnKRvpfTzz9ZfYeW
NPWsI4TDcDyeFE1qacoG4G1v7Blq3svFtGOAPIHvhkqLmjouHiJWlwOVp0F5aFeh
zcnofbnejoTWSWI4s8lwjCoiQzRNAlbKhXKgwwGP65aREPg/MwecMamJ2+oMEqiH
XYnZcKmhjv3V8tEt1gmN7FMkBvalpYeYoMsymtiGNZNQvUC2R9xLZxBSfYBQQaBQ
LBMrNiTZUjeEmXRst0FCQwipSTAPAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUxHTM
Yu2M68rLdCn3hDa2Lx+bzlAwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzQ3NDBDOUQwQkVDQTExRUU4ODcwREI3Njc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGaVhowDQYJKoZIhvcNAQEL
BQADggEBAJMrE4imUYwvAp3j+B9XQKZixoZNX9LZp5slZytKjpWqUvFdoSXKOKH1
YB0Fgqhb94Wk2ksOjUpKspv1wtvB8Z9x2p3LVLzl9RGcgmFZ19HnPq2GBLsUNED6
h3d9+3TwOb8EVHHw/+5rDn8J3HQnmwrEMoJZEGsjyWdPhY+Nl+0GMbAMQ8qAxrwy
8kiZY/PcGu42Jjc1d2KPlY5lTNSnwbTjuanyfbSeoqSmG3oyY7wBbc1rES5UYu4t
zn8MQTtv+fO7Ii/WoEkYewzwHQbo9U8hnMCiOTZWNi+WiXNXirrM13RRwzJEOdx3
gpAU9Lg06M+YOS5aCLDLMi4tzUTUyJw=
-----END CERTIFICATE-----
Generated at Thu May 2 03:38:48 2024 by rpki-client on console-ams.rpki-client.org