Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B9075AEFB9D11EE88733928017001B1.roa
File: 7B9075AEFB9D11EE88733928017001B1.roa (raw, json)
Hash identifier: To+Td6fdohkEJEg+xND6KoLjOmRL+YiZyjVRXrwcLUk=
Subject key identifier: 05:AA:F4:B6:79:27:78:D1:90:08:5C:AF:CF:64:0E:8D:74:06:C5:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD27
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B9075AEFB9D11EE88733928017001B1.roa
Signing time: Tue 16 Apr 2024 03:00:30 +0000
ROA not before: Tue 16 Apr 2024 03:00:26 +0000
ROA not after: Wed 24 Apr 2024 03:00:26 +0000
asID: 136950
IP address blocks: 154.206.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44327 (0xad27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 03:00:26 2024 GMT
Not After : Apr 24 03:00:26 2024 GMT
Subject: CN=661de9ce-94fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:27:cd:14:ac:d6:d1:75:45:1d:95:40:75:
41:37:61:3e:bd:c5:b5:64:f9:d1:0a:99:86:8c:ef:
fb:09:2a:49:30:93:20:6e:87:8f:d0:da:50:30:1c:
99:1a:ca:5c:7d:eb:4e:1b:de:08:51:41:42:05:55:
1e:f4:60:80:62:50:ee:6b:c7:d2:7c:10:5b:10:5d:
b3:80:29:06:37:9e:1c:82:b2:24:9d:87:99:75:c0:
36:6a:76:46:b2:db:1f:10:de:0e:52:bb:fd:1b:58:
64:b5:02:7e:17:8c:f9:de:47:61:19:fc:76:c2:3f:
af:f1:11:ef:63:2c:20:1c:24:6f:dd:97:ae:ff:8b:
ab:69:e4:86:80:71:83:e5:d5:73:ce:f4:3e:af:e2:
d0:7f:cb:fd:38:ac:27:3c:90:4c:65:04:92:53:b9:
94:6b:1d:a1:14:a5:29:40:cc:4c:82:27:6b:5a:c5:
10:34:f6:15:b2:44:12:fc:20:06:3a:77:c8:bc:f8:
50:80:e6:6d:5d:72:90:5a:24:1b:c7:03:1a:4e:69:
f7:dc:23:e9:92:58:65:75:dd:67:3a:77:39:19:dc:
1c:31:6a:17:9d:c9:c2:cb:c8:de:5e:58:e3:7d:ef:
1d:87:b8:21:20:24:16:65:04:56:9b:79:f5:00:1d:
8e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AA:F4:B6:79:27:78:D1:90:08:5C:AF:CF:64:0E:8D:74:06:C5:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B9075AEFB9D11EE88733928017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.192.0/18
Signature Algorithm: sha256WithRSAEncryption
55:8c:9a:9b:3f:7d:6d:f4:cf:a3:eb:f9:ae:65:e1:6b:83:86:
e0:01:50:14:d7:a7:6e:cc:97:72:60:c2:85:4a:9a:29:f8:fc:
a9:84:34:b6:fe:8e:0d:fc:2a:0a:ea:bb:9d:16:b2:48:c1:37:
b2:85:5a:5c:f7:2d:76:b9:ac:7a:34:c1:1e:f5:1c:91:7d:36:
e0:ff:4c:cb:ed:14:fb:29:b4:97:3c:ec:a7:db:b9:b9:37:bc:
a2:df:ab:4a:60:f8:d1:78:6a:6c:d3:d0:0c:bf:42:c2:ed:d1:
41:77:ad:1a:e1:26:84:8f:de:ac:a6:b7:7b:c5:01:be:21:19:
f5:f7:51:6a:3a:42:1d:1f:46:17:e4:80:ef:ef:09:72:b6:d8:
ff:d2:1f:b0:ee:bf:7f:72:4f:42:e7:87:1c:93:9c:65:e1:83:
5a:5f:5f:f4:f8:52:f8:94:31:58:8e:ba:67:b0:3a:ea:a2:60:
57:b2:2a:fa:28:dd:42:49:58:9c:0e:34:b7:45:e8:81:73:49:
5b:2d:4c:40:a6:3c:07:78:7c:8c:a5:fc:e3:fc:0a:eb:04:0f:
44:87:3c:d0:c1:ae:6f:ea:f7:0e:cd:a1:06:60:d3:6a:74:d3:
c0:b0:75:2d:b8:53:c2:fd:4c:c7:75:f9:49:db:92:8c:31:01:
04:8f:04:86
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK0nMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE2MDMwMDI2WhcNMjQwNDI0MDMwMDI2WjAYMRYw
FAYDVQQDEw02NjFkZTljZS05NGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAte4nzRSs1tF1RR2VQHVBN2E+vcW1ZPnRCpmGjO/7CSpJMJMgboeP0NpQ
MByZGspcfetOG94IUUFCBVUe9GCAYlDua8fSfBBbEF2zgCkGN54cgrIknYeZdcA2
anZGstsfEN4OUrv9G1hktQJ+F4z53kdhGfx2wj+v8RHvYywgHCRv3Zeu/4uraeSG
gHGD5dVzzvQ+r+LQf8v9OKwnPJBMZQSSU7mUax2hFKUpQMxMgidrWsUQNPYVskQS
/CAGOnfIvPhQgOZtXXKQWiQbxwMaTmn33CPpklhldd1nOnc5GdwcMWoXncnCy8je
Xljjfe8dh7ghICQWZQRWm3n1AB2OVQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAWq
9LZ5J3jRkAhcr89kDo10BsV1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83QjkwNzVBRUZCOUQxMUVFODg3MzM5MjgwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGms7AMA0GCSqGSIb3DQEB
CwUAA4IBAQBVjJqbP31t9M+j6/muZeFrg4bgAVAU16duzJdyYMKFSpop+PyphDS2
/o4N/CoK6rudFrJIwTeyhVpc9y12uax6NMEe9RyRfTbg/0zL7RT7KbSXPOyn27m5
N7yi36tKYPjReGps09AMv0LC7dFBd60a4SaEj96sprd7xQG+IRn191FqOkIdH0YX
5IDv7wlyttj/0h+w7r9/ck9C54cck5xl4YNaX1/0+FL4lDFYjrpnsDrqomBXsir6
KN1CSVicDjS3ReiBc0lbLUxApjwHeHyMpfzj/ArrBA9EhzzQwa5v6vcOzaEGYNNq
dNPAsHUtuFPC/UzHdflJ25KMMQEEjwSG
-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:38 2024 by rpki-client on console-fra.rpki-client.org