Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7743ED20FB9B11EEA360C617017001B1.roa
File: 7743ED20FB9B11EEA360C617017001B1.roa (raw, json)
Hash identifier: tyxVSzLprlsvwPg7zZdPy7MLvJdEmbLZ3lPn2PrjaI8=
Subject key identifier: 10:25:56:62:5D:3A:23:FB:91:6C:89:A5:4B:37:EE:8A:FB:1A:88:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD1D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7743ED20FB9B11EEA360C617017001B1.roa
Signing time: Tue 16 Apr 2024 02:46:03 +0000
ROA not before: Tue 16 Apr 2024 02:46:00 +0000
ROA not after: Thu 25 Apr 2024 02:46:00 +0000
asID: 142062
IP address blocks: 154.212.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44317 (0xad1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 02:46:00 2024 GMT
Not After : Apr 25 02:46:00 2024 GMT
Subject: CN=661de66b-3385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fb:b0:a4:48:66:e1:0c:72:76:69:15:ba:4d:
94:86:c4:19:fd:0c:d1:c1:f3:33:06:70:6c:51:b8:
21:99:c3:b2:b6:a1:e7:0a:42:37:5a:ac:d3:38:4b:
19:a1:f0:a0:e3:12:e0:f6:32:44:df:9b:fb:70:1a:
37:eb:1a:91:d4:bd:96:ab:0a:92:c2:8f:cf:44:16:
f0:58:ed:06:48:c8:e1:7e:67:2b:cf:b1:91:5c:65:
c8:18:6e:c3:a7:6a:6d:4e:9d:83:b2:a2:42:da:e5:
b2:52:c1:e0:69:a0:af:79:c2:62:c5:ee:f9:8d:7b:
f5:39:c2:6d:61:3e:d6:ab:b4:22:8d:b8:47:42:dd:
64:5a:11:69:bd:4f:f3:04:03:79:11:b4:4f:84:d4:
1c:01:7d:b4:96:56:fd:ab:41:06:06:20:9d:3e:5e:
96:65:58:6b:be:29:94:8e:22:62:fd:5a:24:d4:d9:
20:71:06:30:2d:19:4f:50:c1:c5:9a:bc:c9:19:03:
2f:1c:35:2c:e7:41:fd:d4:16:93:85:ac:d8:de:e9:
36:f3:f8:ac:e0:5d:b7:78:59:e5:4d:c7:19:14:d4:
38:6d:6d:5f:2b:0e:0b:db:df:87:9e:1d:0d:80:0e:
0f:2f:fc:84:d5:e5:cc:6a:16:56:8d:79:ef:b7:55:
a8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:25:56:62:5D:3A:23:FB:91:6C:89:A5:4B:37:EE:8A:FB:1A:88:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7743ED20FB9B11EEA360C617017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.155.0/24
Signature Algorithm: sha256WithRSAEncryption
51:b3:9c:17:ad:b1:b2:76:a0:54:15:93:43:b7:b6:11:a5:b5:
6f:f2:9f:d0:5f:70:a7:62:c3:e0:a8:9f:0c:ea:1b:70:69:28:
21:a2:05:c3:93:60:cb:10:5a:8d:19:8c:34:bc:08:08:79:c4:
8f:12:19:d9:da:a6:03:a9:11:c6:16:44:f0:7e:dd:21:95:1a:
15:77:aa:f1:10:b7:70:f6:f7:bf:27:ed:f7:b9:1e:5b:73:32:
cd:f5:a5:8b:84:b0:35:16:80:40:95:58:7e:7b:06:35:cf:07:
f4:bd:9c:92:9b:24:da:51:96:c9:ae:3f:f7:62:d0:73:52:05:
ee:59:e4:92:d7:9c:cd:4c:9e:d4:46:63:42:49:db:ef:4a:89:
7a:a2:00:cc:01:9c:55:0e:c0:08:12:95:41:31:51:5d:d4:0f:
9a:be:0e:0f:7d:fb:ec:3d:80:8b:85:57:40:b9:31:bd:9c:ae:
78:61:8d:5c:97:43:b0:77:a8:30:40:dd:01:c8:dd:62:a5:e8:
20:f9:5f:d8:d0:bc:6d:a8:0e:86:dd:19:08:2d:08:39:31:9a:
53:d9:eb:34:db:19:d9:79:a6:60:70:14:99:f8:2a:fa:ca:10:
40:73:9b:fc:bb:7b:0d:59:9e:16:2f:07:f4:ca:88:7d:2a:fd:
b2:1d:35:e3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK0dMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE2MDI0NjAwWhcNMjQwNDI1MDI0NjAwWjAYMRYw
FAYDVQQDEw02NjFkZTY2Yi0zMzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyPuwpEhm4QxydmkVuk2UhsQZ/QzRwfMzBnBsUbghmcOytqHnCkI3WqzT
OEsZofCg4xLg9jJE35v7cBo36xqR1L2WqwqSwo/PRBbwWO0GSMjhfmcrz7GRXGXI
GG7Dp2ptTp2DsqJC2uWyUsHgaaCvecJixe75jXv1OcJtYT7Wq7QijbhHQt1kWhFp
vU/zBAN5EbRPhNQcAX20llb9q0EGBiCdPl6WZVhrvimUjiJi/Vok1NkgcQYwLRlP
UMHFmrzJGQMvHDUs50H91BaThazY3uk28/is4F23eFnlTccZFNQ4bW1fKw4L29+H
nh0NgA4PL/yE1eXMahZWjXnvt1WoLwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBAl
VmJdOiP7kWyJpUs37or7GogwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NzQzRUQyMEZCOUIxMUVFQTM2MEM2MTcwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtSbMA0GCSqGSIb3DQEB
CwUAA4IBAQBRs5wXrbGydqBUFZNDt7YRpbVv8p/QX3CnYsPgqJ8M6htwaSghogXD
k2DLEFqNGYw0vAgIecSPEhnZ2qYDqRHGFkTwft0hlRoVd6rxELdw9ve/J+33uR5b
czLN9aWLhLA1FoBAlVh+ewY1zwf0vZySmyTaUZbJrj/3YtBzUgXuWeSS15zNTJ7U
RmNCSdvvSol6ogDMAZxVDsAIEpVBMVFd1A+avg4PffvsPYCLhVdAuTG9nK54YY1c
l0Owd6gwQN0ByN1ipegg+V/Y0LxtqA6G3RkILQg5MZpT2es02xnZeaZgcBSZ+Cr6
yhBAc5v8u3sNWZ4WLwf0yoh9Kv2yHTXj
-----END CERTIFICATE-----
Generated at Thu Apr 25 10:41:10 2024 by rpki-client on console-ams.rpki-client.org