Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76BF497EFAE411EE82ECBA40017001B1.roa
File: 76BF497EFAE411EE82ECBA40017001B1.roa (raw, json)
Hash identifier: buRb9wnp96fNIcLaUzJMMkuBziqKx1i0xODqQlNRJxo=
Subject key identifier: D7:5A:04:7C:A0:63:A0:4A:18:68:C0:EC:A5:AC:CA:B5:A5:E3:DD:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC62
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76BF497EFAE411EE82ECBA40017001B1.roa
Signing time: Mon 15 Apr 2024 04:56:05 +0000
ROA not before: Mon 15 Apr 2024 04:56:01 +0000
ROA not after: Thu 25 Apr 2024 04:56:01 +0000
asID: 5065
IP address blocks: 154.94.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44130 (0xac62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 04:56:01 2024 GMT
Not After : Apr 25 04:56:01 2024 GMT
Subject: CN=661cb365-215a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:01:10:cc:d1:73:0d:b4:82:60:31:78:da:c8:
a2:9c:10:19:cc:26:a6:d6:1a:4c:ec:61:dd:25:a9:
37:6a:12:6b:d2:c7:89:d7:e5:2e:3d:9b:36:62:6b:
c6:4a:13:a2:e2:8e:34:69:bf:01:53:88:f3:2f:bb:
77:13:51:d7:c1:c3:ef:79:c6:f2:e1:33:7a:6d:11:
86:10:67:a6:83:4a:b3:97:a9:5f:d5:87:81:e6:a1:
5d:03:dc:37:59:3b:fa:da:77:1d:11:d0:b6:82:9f:
a5:01:83:08:00:cf:ac:13:3b:81:f0:33:a6:43:88:
af:3f:b9:29:6a:6c:28:7c:f3:03:30:78:39:82:2c:
b2:9b:6e:6e:a0:be:8b:c0:5f:0e:a8:71:4d:6f:2b:
7c:ce:03:bb:6d:8e:10:5b:c9:71:e7:7d:28:37:de:
fd:ef:29:a2:96:cf:68:9f:0a:8f:f2:c2:e8:7f:25:
91:5f:0b:08:56:83:cd:80:b9:fe:8a:9e:ca:d6:4a:
3c:b7:74:cd:25:47:aa:5c:a3:8d:60:74:7c:1e:03:
dc:31:67:c6:f3:64:51:5d:14:3b:d2:0b:71:7e:0e:
82:43:5c:3f:7d:a0:d6:cf:e9:85:a2:7d:ea:f9:66:
a4:34:43:06:13:96:4b:f5:d6:53:f2:45:e7:12:b7:
6d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5A:04:7C:A0:63:A0:4A:18:68:C0:EC:A5:AC:CA:B5:A5:E3:DD:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76BF497EFAE411EE82ECBA40017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.41.0/24
Signature Algorithm: sha256WithRSAEncryption
64:8e:d4:7b:9c:5c:50:ae:5a:46:b0:95:f9:93:01:9d:fa:ee:
8d:5b:ed:d9:e2:2e:92:f6:a2:b2:b7:57:34:37:3f:4b:51:c0:
9b:54:c9:d1:23:02:af:ef:e3:14:cd:5b:6e:f5:6c:ea:02:74:
09:04:25:87:17:e1:9a:84:ce:4e:51:63:6c:79:f4:35:c4:f7:
f9:09:5d:36:d8:f4:01:71:9a:8f:24:25:37:7c:03:08:87:2a:
42:ed:ff:7e:14:0b:f8:2a:df:0e:37:18:3f:19:09:8e:1d:2a:
66:e6:6a:cd:48:6a:7e:b1:f0:59:be:99:5f:54:85:bd:50:8f:
27:af:0d:22:74:c4:b0:b5:18:dd:29:d4:5d:37:4b:33:1f:7f:
93:b1:a3:00:e5:85:e8:21:21:f7:9c:d6:9f:1d:bb:1b:21:bf:
28:7c:2f:50:7e:75:1b:f1:fb:9a:ec:52:d9:11:45:fd:45:73:
85:4c:c6:f6:66:b6:85:0e:80:b2:9d:9f:f7:87:ff:86:06:e1:
7f:77:0a:90:a5:bb:ca:b7:7e:75:19:fa:f6:6b:94:74:65:86:
6f:05:31:0e:13:51:35:52:42:68:a7:a4:99:45:41:36:24:0c:
14:e4:ce:d9:a5:e6:c9:e1:78:9d:77:ed:05:78:12:c7:22:13:
70:e7:25:bd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKxiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE1MDQ1NjAxWhcNMjQwNDI1MDQ1NjAxWjAYMRYw
FAYDVQQDEw02NjFjYjM2NS0yMTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAngEQzNFzDbSCYDF42siinBAZzCam1hpM7GHdJak3ahJr0seJ1+UuPZs2
YmvGShOi4o40ab8BU4jzL7t3E1HXwcPvecby4TN6bRGGEGemg0qzl6lf1YeB5qFd
A9w3WTv62ncdEdC2gp+lAYMIAM+sEzuB8DOmQ4ivP7kpamwofPMDMHg5giyym25u
oL6LwF8OqHFNbyt8zgO7bY4QW8lx530oN9797ymils9onwqP8sLofyWRXwsIVoPN
gLn+ip7K1ko8t3TNJUeqXKONYHR8HgPcMWfG82RRXRQ70gtxfg6CQ1w/faDWz+mF
on3q+WakNEMGE5ZL9dZT8kXnErdtjQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNda
BHygY6BKGGjA7KWsyrWl491VMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NkJGNDk3RUZBRTQxMUVFODJFQ0JBNDAwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml4pMA0GCSqGSIb3DQEB
CwUAA4IBAQBkjtR7nFxQrlpGsJX5kwGd+u6NW+3Z4i6S9qKyt1c0Nz9LUcCbVMnR
IwKv7+MUzVtu9WzqAnQJBCWHF+GahM5OUWNsefQ1xPf5CV022PQBcZqPJCU3fAMI
hypC7f9+FAv4Kt8ONxg/GQmOHSpm5mrNSGp+sfBZvplfVIW9UI8nrw0idMSwtRjd
KdRdN0szH3+TsaMA5YXoISH3nNafHbsbIb8ofC9QfnUb8fua7FLZEUX9RXOFTMb2
ZraFDoCynZ/3h/+GBuF/dwqQpbvKt351Gfr2a5R0ZYZvBTEOE1E1UkJop6SZRUE2
JAwU5M7ZpebJ4Xidd+0FeBLHIhNw5yW9
-----END CERTIFICATE-----
Generated at Thu Apr 25 10:41:10 2024 by rpki-client on console-ams.rpki-client.org