Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48B7347EE78E11EEB8A53B73775412E6.roa
File: 48B7347EE78E11EEB8A53B73775412E6.roa (raw, json)
Hash identifier: kcYcyA/FFY9t8+Qcafa7krXdKMHzwcaTLZugRi+jEvc=
Subject key identifier: 42:CE:FD:21:AA:4B:8B:A2:25:7D:14:67:82:68:9F:A3:98:CB:E1:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A5D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48B7347EE78E11EEB8A53B73775412E6.roa
Signing time: Thu 21 Mar 2024 14:21:19 +0000
ROA not before: Thu 21 Mar 2024 14:21:15 +0000
ROA not after: Thu 25 Apr 2024 14:21:15 +0000
asID: 7018
IP address blocks: 154.206.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42455 (0xa5d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 14:21:15 2024 GMT
Not After : Apr 25 14:21:15 2024 GMT
Subject: CN=65fc425f-c7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:01:cb:34:e5:a5:34:a9:88:ed:80:c9:8d:
0a:18:5b:2e:8c:c0:8b:d0:00:31:68:36:66:f5:1b:
1e:2f:6c:b4:5b:3d:32:95:1a:37:1d:02:8d:f2:ea:
a2:ed:ce:fa:e3:85:6c:92:73:42:71:3c:be:f7:e6:
a1:57:96:23:c5:42:e2:7d:26:a5:d5:78:21:20:c6:
15:c2:87:58:f7:6f:d0:dd:6e:5e:ce:a4:73:f6:2d:
9c:69:ef:22:55:70:d1:b1:43:79:c5:93:91:74:3a:
8e:43:ec:62:f9:f1:22:2c:b1:38:ad:60:73:b0:c0:
be:b1:bd:39:85:01:d2:f8:71:9c:65:4c:20:ce:14:
ad:41:0d:08:8b:fc:30:6f:03:27:10:fd:ce:58:c0:
a8:42:87:38:69:20:58:eb:c4:55:f2:1d:89:9f:b4:
dc:37:05:40:1a:ad:96:83:5c:44:16:f0:c8:6c:69:
6e:88:1b:6e:96:8e:fb:53:4f:86:7b:e5:8a:28:9c:
22:e9:8d:4b:c5:45:14:9a:9b:9d:44:c9:fc:21:50:
66:51:8a:a3:74:68:dd:2a:50:ad:df:47:6c:97:24:
a0:5d:f3:22:de:07:57:ef:1b:30:34:18:d2:ff:c9:
67:f3:9c:04:d1:50:db:b2:4d:41:7d:bb:21:e9:ef:
f0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CE:FD:21:AA:4B:8B:A2:25:7D:14:67:82:68:9F:A3:98:CB:E1:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48B7347EE78E11EEB8A53B73775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.48.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:91:9c:a9:c9:c8:0d:7e:11:b1:15:3c:ff:d0:e0:11:db:5e:
23:3a:5e:f4:cb:5a:8a:4d:52:b0:cd:ea:1f:0e:65:0f:3c:88:
03:cc:70:9d:ce:2e:8e:6f:0b:8b:46:17:da:2e:40:0e:22:3b:
fe:55:a5:79:d8:e2:33:33:cd:65:8f:8c:3f:d0:e7:08:5f:29:
68:7f:26:a2:b7:42:91:ab:3e:ca:a0:4e:6c:03:41:8f:23:99:
e2:a3:f1:64:02:95:81:2e:4e:e0:6c:4b:53:9b:0d:2d:e2:84:
82:32:eb:78:63:e5:fd:6f:ad:8b:bb:3f:57:b2:6b:11:66:4d:
a1:ac:82:e1:d5:9a:f5:eb:94:18:8f:ba:0c:8a:dd:4b:a6:e7:
3f:01:28:79:e6:18:30:e0:2a:3c:35:db:50:e5:33:74:52:20:
a6:84:9d:f7:bf:8a:d5:c4:b0:4a:66:6a:34:5c:3d:9e:a5:1a:
8f:b6:7e:20:21:4a:82:63:fb:e9:a5:45:41:55:fb:3a:d6:03:
06:bf:2e:70:7f:9d:a3:2b:2b:c0:56:a6:4a:06:89:63:e6:42:
ed:9c:ad:b7:6e:c8:cf:da:04:45:97:61:27:c7:68:f1:c1:3a:
cb:28:08:4f:ea:4a:92:e2:1a:6b:19:c4:52:0b:dc:07:f3:3b:
33:53:0d:82
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKXXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMTQyMTE1WhcNMjQwNDI1MTQyMTE1WjAYMRYw
FAYDVQQDEw02NWZjNDI1Zi1jN2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwicByzTlpTSpiO2AyY0KGFsujMCL0AAxaDZm9RseL2y0Wz0ylRo3HQKN
8uqi7c7644VsknNCcTy+9+ahV5YjxULifSal1XghIMYVwodY92/Q3W5ezqRz9i2c
ae8iVXDRsUN5xZORdDqOQ+xi+fEiLLE4rWBzsMC+sb05hQHS+HGcZUwgzhStQQ0I
i/wwbwMnEP3OWMCoQoc4aSBY68RV8h2Jn7TcNwVAGq2Wg1xEFvDIbGluiBtulo77
U0+Ge+WKKJwi6Y1LxUUUmpudRMn8IVBmUYqjdGjdKlCt30dslySgXfMi3gdX7xsw
NBjS/8ln85wE0VDbsk1Bfbsh6e/w2QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFELO
/SGqS4uiJX0UZ4Jon6OYy+G3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80OEI3MzQ3RUU3OEUxMUVFQjhBNTNCNzM3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCms4wMA0GCSqGSIb3DQEB
CwUAA4IBAQBbkZypycgNfhGxFTz/0OAR214jOl70y1qKTVKwzeofDmUPPIgDzHCd
zi6ObwuLRhfaLkAOIjv+VaV52OIzM81lj4w/0OcIXylofyait0KRqz7KoE5sA0GP
I5nio/FkApWBLk7gbEtTmw0t4oSCMut4Y+X9b62Luz9XsmsRZk2hrILh1Zr165QY
j7oMit1Lpuc/ASh55hgw4Co8NdtQ5TN0UiCmhJ33v4rVxLBKZmo0XD2epRqPtn4g
IUqCY/vppUVBVfs61gMGvy5wf52jKyvAVqZKBolj5kLtnK23bsjP2gRFl2Enx2jx
wTrLKAhP6kqS4hprGcRSC9wH8zszUw2C
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:30 2024 by rpki-client on console-fra.rpki-client.org