Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A040594FBA811EE95708305017001B1.roa
File: 5A040594FBA811EE95708305017001B1.roa (raw, json)
Hash identifier: pmgD9pUa5Q1LbPGcb+GlUQefMNLPdiW7KwWFJD5l9Zk=
Subject key identifier: 43:6D:08:64:05:5B:38:53:1C:88:09:E2:6D:3B:9F:8E:07:C1:6C:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD91
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A040594FBA811EE95708305017001B1.roa
Signing time: Tue 16 Apr 2024 04:18:18 +0000
ROA not before: Tue 16 Apr 2024 04:18:14 +0000
ROA not after: Wed 24 Apr 2024 04:18:14 +0000
asID: 142062
IP address blocks: 154.206.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44433 (0xad91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 04:18:14 2024 GMT
Not After : Apr 24 04:18:14 2024 GMT
Subject: CN=661dfc0a-a132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:5d:2a:24:a0:a0:e0:17:8f:6a:00:0d:e4:
4d:c7:0a:82:b8:47:49:d3:5e:33:24:85:ba:d0:d1:
a7:6a:e2:d2:2a:bd:b2:4a:0b:7c:80:c1:72:cd:99:
96:33:29:6b:65:9c:d0:0d:c0:b5:2b:49:73:f3:c9:
c1:20:ad:a2:2d:3a:28:e8:ff:3a:7a:f9:cb:ca:64:
27:11:c7:64:cf:ca:f8:9e:13:ca:0c:1a:4d:be:e2:
e4:f1:82:34:dc:78:7c:00:20:80:ea:15:c8:e4:44:
0e:74:b2:34:8b:b8:4e:86:5d:40:d4:54:d8:c7:3f:
3d:41:3c:ee:92:f4:cc:10:5b:e7:27:36:18:69:80:
e4:01:3a:d4:e2:41:87:f4:09:bb:be:72:e5:63:50:
c1:56:70:66:b7:42:b9:1e:f2:71:3f:de:b4:d0:0c:
22:c0:06:02:22:81:32:88:d7:50:16:93:ef:31:4e:
be:00:b2:f6:9a:36:13:d1:06:f4:3d:45:03:ac:24:
6c:b9:79:46:48:91:7e:6d:1b:57:fd:df:21:f5:b9:
2f:ba:0a:c6:4e:e3:9b:36:e9:b6:ec:bb:a4:26:20:
6b:2e:3c:d1:bc:ee:7f:0a:7e:37:2d:9b:da:8b:12:
2e:f2:e3:e4:42:0a:ed:84:d8:d6:97:19:27:b8:2b:
df:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6D:08:64:05:5B:38:53:1C:88:09:E2:6D:3B:9F:8E:07:C1:6C:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A040594FBA811EE95708305017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.229.0/24
Signature Algorithm: sha256WithRSAEncryption
32:10:c3:3f:75:56:90:fc:c6:ec:72:cd:1f:ba:aa:46:96:0b:
20:00:c9:e2:87:65:55:2a:bc:fc:95:d6:3c:af:ae:29:8c:a9:
d3:21:0e:0d:77:aa:76:5e:af:a2:af:7c:d5:55:50:ec:c5:0a:
26:c0:78:57:79:26:d5:71:b0:32:0b:7a:ec:36:43:0a:43:43:
cd:10:10:75:3a:c2:a9:7b:a1:7d:0f:55:4b:90:9a:94:96:1f:
69:8b:0b:83:8f:11:8e:ab:16:96:b4:a8:a5:5a:f8:b4:88:86:
75:d7:49:27:35:ae:c1:81:d3:1b:13:f2:dc:f1:cd:87:ef:75:
a0:59:ca:e9:11:b7:73:b2:43:db:d4:e0:a3:43:1c:04:df:42:
2b:ce:95:f5:74:15:c6:b7:63:1b:70:c7:17:97:e4:22:f5:27:
90:24:6b:05:a1:e5:de:26:0e:45:21:e0:92:e5:86:fd:c1:10:
17:11:18:10:be:6c:84:8f:56:6f:03:cb:3b:75:d3:94:55:c3:
c6:17:15:52:7d:c5:2c:b7:14:d1:ce:83:08:11:02:30:1b:45:
88:d4:c2:e1:58:56:95:60:4b:d9:7e:84:55:3d:2f:c1:eb:3d:
fe:e8:3b:f1:3f:a5:bd:49:09:db:21:f1:59:74:e3:05:37:5b:
f5:c8:56:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK2RMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE2MDQxODE0WhcNMjQwNDI0MDQxODE0WjAYMRYw
FAYDVQQDEw02NjFkZmMwYS1hMTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArPpdKiSgoOAXj2oADeRNxwqCuEdJ014zJIW60NGnauLSKr2ySgt8gMFy
zZmWMylrZZzQDcC1K0lz88nBIK2iLToo6P86evnLymQnEcdkz8r4nhPKDBpNvuLk
8YI03Hh8ACCA6hXI5EQOdLI0i7hOhl1A1FTYxz89QTzukvTMEFvnJzYYaYDkATrU
4kGH9Am7vnLlY1DBVnBmt0K5HvJxP9600AwiwAYCIoEyiNdQFpPvMU6+ALL2mjYT
0Qb0PUUDrCRsuXlGSJF+bRtX/d8h9bkvugrGTuObNum27LukJiBrLjzRvO5/Cn43
LZvaixIu8uPkQgrthNjWlxknuCvf2QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFENt
CGQFWzhTHIgJ4m07n44HwWz+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81QTA0MDU5NEZCQTgxMUVFOTU3MDgzMDUwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms7lMA0GCSqGSIb3DQEB
CwUAA4IBAQAyEMM/dVaQ/Mbscs0fuqpGlgsgAMnih2VVKrz8ldY8r64pjKnTIQ4N
d6p2Xq+ir3zVVVDsxQomwHhXeSbVcbAyC3rsNkMKQ0PNEBB1OsKpe6F9D1VLkJqU
lh9piwuDjxGOqxaWtKilWvi0iIZ110knNa7BgdMbE/Lc8c2H73WgWcrpEbdzskPb
1OCjQxwE30IrzpX1dBXGt2MbcMcXl+Qi9SeQJGsFoeXeJg5FIeCS5Yb9wRAXERgQ
vmyEj1ZvA8s7ddOUVcPGFxVSfcUstxTRzoMIEQIwG0WI1MLhWFaVYEvZfoRVPS/B
6z3+6DvxP6W9SQnbIfFZdOMFN1v1yFbK
-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:38 2024 by rpki-client on console-fra.rpki-client.org