Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C7DB4C2FAE611EE9946A850017001B1.roa
File: 5C7DB4C2FAE611EE9946A850017001B1.roa (raw, json)
Hash identifier: zDncrJfrOx3qdsLAfWpUbkcC5OGF9Q94HfIWZGdYrNU=
Subject key identifier: 41:C9:CB:11:BE:99:CF:74:91:BA:B8:6F:5F:8F:47:79:00:11:84:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC78
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C7DB4C2FAE611EE9946A850017001B1.roa
Signing time: Mon 15 Apr 2024 05:09:40 +0000
ROA not before: Mon 15 Apr 2024 05:09:36 +0000
ROA not after: Thu 25 Apr 2024 05:09:36 +0000
asID: 39600
IP address blocks: 154.94.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44152 (0xac78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 05:09:36 2024 GMT
Not After : Apr 25 05:09:36 2024 GMT
Subject: CN=661cb694-f741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:ca:db:11:8b:68:6d:b7:d0:4e:d6:44:22:
31:2d:d0:d2:c6:21:a7:ed:94:e8:8d:62:ec:84:af:
c3:8d:00:5f:86:5a:d8:87:b1:a1:ff:22:5a:ba:83:
b3:f3:71:6e:7a:8e:17:59:e7:df:13:de:bf:90:c0:
4b:65:3e:d4:50:fd:64:b8:a4:8c:07:a3:76:ab:c3:
62:6d:bb:84:07:51:58:4f:b8:67:5e:93:af:20:a5:
9c:8d:5c:63:78:2f:07:00:6b:ec:27:64:d3:9b:25:
9c:a5:c9:22:55:b0:68:ec:f4:78:76:ee:fc:a8:c4:
2a:80:40:9d:04:12:5e:19:ae:c9:35:3e:5a:f0:75:
fd:f0:24:0b:f2:78:b7:90:5a:cc:dd:7b:a1:52:d1:
53:08:56:4e:1c:7a:1b:86:f9:62:67:ef:43:8a:58:
d2:dd:54:c1:28:3e:c4:38:10:e4:e0:21:a1:d6:71:
33:08:4f:12:8c:f8:bb:37:a5:99:e3:a3:f6:06:51:
79:03:d9:b9:74:1c:b0:08:39:a4:8f:b9:fd:db:38:
61:9a:45:a1:80:f8:cd:1e:ee:48:3c:18:84:00:7c:
3f:d8:0e:47:29:e5:06:b4:eb:ac:72:ac:d7:b9:41:
8c:b9:24:22:95:6d:bb:07:28:fb:63:9c:74:33:b9:
ef:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C9:CB:11:BE:99:CF:74:91:BA:B8:6F:5F:8F:47:79:00:11:84:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C7DB4C2FAE611EE9946A850017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.58.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:9b:83:8d:24:4f:f9:f0:3d:26:76:70:e6:c5:1a:15:f3:88:
35:95:bb:42:ed:67:a2:80:c9:05:b6:53:36:a9:01:75:c7:08:
54:e8:0e:00:b3:9c:9a:06:db:ba:2c:35:b7:0a:37:96:7a:3e:
a9:b3:c0:6a:70:09:36:13:80:95:35:08:df:4b:50:9a:d2:fa:
38:79:1f:28:7c:bd:f8:5b:2b:8f:fb:52:18:e8:2a:4b:c7:ee:
be:0e:3c:30:f3:e5:b9:73:51:44:ad:98:9c:79:a0:5e:6b:b2:
37:c6:2f:a0:b1:d2:d4:8b:e6:48:b6:c0:3d:dc:66:cc:42:54:
04:28:e2:28:29:7e:2e:3b:e2:5b:4e:45:fb:cd:f0:98:3b:9a:
00:b3:d0:48:65:08:e6:9f:4f:f4:ff:c5:81:4d:5a:2b:7f:81:
91:fd:62:49:dc:bb:d0:4d:a0:64:b9:25:01:7f:08:27:17:a4:
4e:f1:76:b7:1f:4a:9d:e1:38:08:ab:80:c4:9c:32:06:00:8b:
25:3c:51:f1:e0:47:8c:eb:06:af:fe:5f:d0:6c:57:19:cc:17:
4c:07:a0:65:f5:63:f6:3a:34:8a:1d:dd:d6:8b:07:f0:33:da:
44:fd:e3:84:1a:bf:fd:b9:d8:b4:15:b3:ff:16:4a:a9:21:3f:
e3:0a:ca:1e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKx4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE1MDUwOTM2WhcNMjQwNDI1MDUwOTM2WjAYMRYw
FAYDVQQDEw02NjFjYjY5NC1mNzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArFPK2xGLaG230E7WRCIxLdDSxiGn7ZTojWLshK/DjQBfhlrYh7Gh/yJa
uoOz83Fueo4XWeffE96/kMBLZT7UUP1kuKSMB6N2q8NibbuEB1FYT7hnXpOvIKWc
jVxjeC8HAGvsJ2TTmyWcpckiVbBo7PR4du78qMQqgECdBBJeGa7JNT5a8HX98CQL
8ni3kFrM3XuhUtFTCFZOHHobhvliZ+9DiljS3VTBKD7EOBDk4CGh1nEzCE8SjPi7
N6WZ46P2BlF5A9m5dBywCDmkj7n92zhhmkWhgPjNHu5IPBiEAHw/2A5HKeUGtOus
cqzXuUGMuSQilW27Byj7Y5x0M7nv1wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEHJ
yxG+mc90kbq4b1+PR3kAEYRJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81QzdEQjRDMkZBRTYxMUVFOTk0NkE4NTAwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml46MA0GCSqGSIb3DQEB
CwUAA4IBAQBOm4ONJE/58D0mdnDmxRoV84g1lbtC7WeigMkFtlM2qQF1xwhU6A4A
s5yaBtu6LDW3CjeWej6ps8BqcAk2E4CVNQjfS1Ca0vo4eR8ofL34WyuP+1IY6CpL
x+6+Djww8+W5c1FErZiceaBea7I3xi+gsdLUi+ZItsA93GbMQlQEKOIoKX4uO+Jb
TkX7zfCYO5oAs9BIZQjmn0/0/8WBTVorf4GR/WJJ3LvQTaBkuSUBfwgnF6RO8Xa3
H0qd4TgIq4DEnDIGAIslPFHx4EeM6wav/l/QbFcZzBdMB6Bl9WP2OjSKHd3Wiwfw
M9pE/eOEGr/9udi0FbP/FkqpIT/jCsoe
-----END CERTIFICATE-----
Generated at Thu Apr 25 10:41:10 2024 by rpki-client on console-ams.rpki-client.org