Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6550B124038011EF9AD2DB6D017001B1.roa
File: 6550B124038011EF9AD2DB6D017001B1.roa (raw, json)
Hash identifier: 9G0IdsBy34SjZKJfh80CqMvH5jY0jGcIxmndd2GKf/g=
Subject key identifier: BD:83:2B:E1:2A:74:18:2C:43:01:EA:21:42:F0:F3:CD:35:48:AC:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B144
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6550B124038011EF9AD2DB6D017001B1.roa
Signing time: Fri 26 Apr 2024 03:52:26 +0000
ROA not before: Fri 26 Apr 2024 03:52:23 +0000
ROA not after: Tue 03 Sep 2024 03:52:23 +0000
asID: 131685
IP address blocks: 154.210.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45380 (0xb144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 03:52:23 2024 GMT
Not After : Sep 3 03:52:23 2024 GMT
Subject: CN=662b24fa-777f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:39:7a:d8:8f:e6:90:7c:d8:e9:2d:ca:87:bd:
c2:c1:7a:88:11:8b:6d:60:86:fe:40:06:85:c1:f4:
3e:ae:cd:12:10:d7:48:91:04:5f:29:b8:f2:21:8a:
92:bc:64:ef:54:e5:fd:2f:dc:18:29:7b:30:26:25:
6e:cd:33:7f:18:76:51:43:b5:e7:fb:27:86:cd:4d:
d3:f4:02:8e:98:a1:b7:44:0d:c4:32:3c:fa:43:51:
fa:c5:b1:db:23:e1:0a:2f:7f:cb:42:9a:07:f6:3e:
d0:83:b2:69:a9:b3:53:33:f5:dd:57:1f:4b:46:c9:
7e:6f:c7:c1:fe:4f:ed:fb:12:c7:54:dd:e0:73:a4:
5b:65:e1:be:55:bf:70:a0:3e:a8:03:a4:d5:34:36:
94:36:b6:41:b2:c6:27:07:e8:5c:ab:c6:f6:56:d4:
2c:e0:97:8e:81:47:8a:54:4d:a3:5c:20:99:8f:35:
ad:b6:16:63:58:39:f0:dc:31:0a:79:7e:a7:71:e8:
52:24:64:e1:52:38:1a:05:95:76:bb:eb:36:e1:0b:
7e:1f:3e:28:ee:14:4a:53:e5:19:65:81:ab:a9:d8:
ff:c5:f0:c2:f5:6a:b4:46:1c:12:8d:55:bc:5b:30:
10:ad:4a:b2:40:db:28:fe:ab:32:71:4e:85:f8:2a:
78:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:83:2B:E1:2A:74:18:2C:43:01:EA:21:42:F0:F3:CD:35:48:AC:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6550B124038011EF9AD2DB6D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.195.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:65:28:87:45:76:c3:b0:7b:60:5d:33:f4:cc:9c:31:82:87:
97:36:46:c8:f1:2c:fc:70:09:b1:c8:d3:bc:cd:e9:07:12:bb:
90:7c:f1:6e:d9:7e:1f:94:ae:c9:9f:37:81:16:08:e9:03:69:
57:13:48:1a:ee:fc:75:02:3a:05:dc:51:ad:b3:e7:1f:15:74:
05:20:7a:ae:70:f6:ab:76:13:e8:1e:da:fb:24:e1:a0:fb:8c:
c6:76:d9:30:64:f6:54:5c:0d:14:cb:30:b3:d8:95:0b:1a:41:
26:d8:65:5f:38:70:e3:c5:29:c8:62:3a:fd:d3:8c:ce:fb:b6:
f1:4f:a1:58:a5:2e:fa:52:59:9e:4e:e5:b5:c3:92:9a:c2:06:
bf:e9:75:46:7b:a6:8a:79:87:1f:2a:34:b1:e1:0f:8f:86:8a:
26:fe:fc:de:68:9a:3d:8a:25:0f:56:a1:5b:d0:c7:cf:80:ec:
9e:86:7b:89:c6:e6:1c:bf:18:61:e5:57:a5:c5:57:39:0f:d7:
fd:ac:ca:04:b3:a0:a1:f3:3c:8c:47:87:06:3b:e1:5c:d0:30:
11:eb:2b:ca:d5:ba:4a:2c:f4:a8:0b:3b:0c:53:d3:89:5b:32:
45:6c:a9:e8:b8:c7:a9:4e:f0:8a:35:d9:00:88:84:ad:d0:bf:
ae:af:63:46
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALFEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDI2MDM1MjIzWhcNMjQwOTAzMDM1MjIzWjAYMRYw
FAYDVQQDEw02NjJiMjRmYS03NzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5zl62I/mkHzY6S3Kh73CwXqIEYttYIb+QAaFwfQ+rs0SENdIkQRfKbjy
IYqSvGTvVOX9L9wYKXswJiVuzTN/GHZRQ7Xn+yeGzU3T9AKOmKG3RA3EMjz6Q1H6
xbHbI+EKL3/LQpoH9j7Qg7JpqbNTM/XdVx9LRsl+b8fB/k/t+xLHVN3gc6RbZeG+
Vb9woD6oA6TVNDaUNrZBssYnB+hcq8b2VtQs4JeOgUeKVE2jXCCZjzWtthZjWDnw
3DEKeX6ncehSJGThUjgaBZV2u+s24Qt+Hz4o7hRKU+UZZYGrqdj/xfDC9Wq0RhwS
jVW8WzAQrUqyQNso/qsycU6F+Cp4rQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL2D
K+EqdBgsQwHqIULw8801SKz0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NTUwQjEyNDAzODAxMUVGOUFEMkRCNkQwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtLDMA0GCSqGSIb3DQEB
CwUAA4IBAQChZSiHRXbDsHtgXTP0zJwxgoeXNkbI8Sz8cAmxyNO8zekHEruQfPFu
2X4flK7JnzeBFgjpA2lXE0ga7vx1AjoF3FGts+cfFXQFIHqucPardhPoHtr7JOGg
+4zGdtkwZPZUXA0UyzCz2JULGkEm2GVfOHDjxSnIYjr904zO+7bxT6FYpS76Ulme
TuW1w5Kawga/6XVGe6aKeYcfKjSx4Q+Phoom/vzeaJo9iiUPVqFb0MfPgOyehnuJ
xuYcvxhh5VelxVc5D9f9rMoEs6Ch8zyMR4cGO+Fc0DAR6yvK1bpKLPSoCzsMU9OJ
WzJFbKnouMepTvCKNdkAiISt0L+ur2NG
-----END CERTIFICATE-----
Generated at Tue Sep 3 11:37:22 2024 by rpki-client on console-fra.rpki-client.org