Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CC7F3B2B85711EFB2D10A6E762E951A.roa
File: 7CC7F3B2B85711EFB2D10A6E762E951A.roa (raw, json)
Hash identifier: h5hfH0TTrgpNoqSgsH9J2I5tDMqtL3NBUBfAX+Lwm2s=
Subject key identifier: 60:44:D9:50:5D:CC:20:2A:A6:6B:93:5C:B0:26:72:3D:1F:34:4B:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011AA2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CC7F3B2B85711EFB2D10A6E762E951A.roa
Signing time: Thu 12 Dec 2024 07:05:37 +0000
ROA not before: Thu 12 Dec 2024 07:05:33 +0000
ROA not after: Tue 24 Dec 2024 07:05:33 +0000
asID: 51396
IP address blocks: 154.213.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72354 (0x11aa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 12 07:05:33 2024 GMT
Not After : Dec 24 07:05:33 2024 GMT
Subject: CN=675a8b41-ca42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:e3:eb:f1:03:74:0b:10:96:e7:5b:19:cf:
c4:66:00:6c:6b:41:bc:b5:fe:d4:73:d3:12:fd:ad:
cc:a8:0e:e4:34:5e:20:f5:02:cf:a2:33:06:b7:dc:
bf:a7:5d:fc:53:b9:42:82:dc:85:97:33:f9:d6:a4:
49:df:d6:ee:b1:3f:5a:b8:df:e8:91:28:4e:3e:45:
a5:a7:6c:4f:b9:d7:ac:53:61:0c:b5:05:8a:0b:d4:
ff:59:a5:91:dc:41:a9:09:b4:dc:28:84:ed:12:6e:
4f:43:d1:b3:f5:75:ad:12:ab:f1:5d:e6:9b:e6:a7:
8c:22:77:7f:28:c3:6c:d5:e5:0d:f7:9c:e0:e9:e8:
37:d2:4c:c9:89:00:be:b4:d9:87:09:ae:9f:af:21:
a4:56:ac:0e:59:1d:93:45:9d:bd:71:94:28:fd:89:
4a:54:43:18:99:a5:f8:b4:b2:f0:cc:29:ea:5f:f9:
8f:1d:03:9a:a1:a1:e1:de:bc:96:96:91:77:8b:0e:
b5:eb:5e:34:ef:3b:ae:14:61:25:ef:76:96:4c:ab:
90:21:dd:74:24:c0:ed:e6:a8:a4:cb:30:30:8d:3d:
03:54:64:85:80:ca:e2:50:2f:44:40:43:1f:fb:de:
77:21:8f:9a:da:4b:a6:ad:0c:e4:af:2e:a4:ce:5c:
61:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:44:D9:50:5D:CC:20:2A:A6:6B:93:5C:B0:26:72:3D:1F:34:4B:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CC7F3B2B85711EFB2D10A6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.192.0/24
Signature Algorithm: sha256WithRSAEncryption
65:36:3b:2e:02:c0:8a:e5:9a:75:18:43:bb:94:71:78:ab:a3:
fd:28:f5:cd:ab:c1:32:ef:8a:e7:a7:dd:25:e5:6d:d4:f2:0b:
53:61:9c:66:61:46:38:92:0d:69:50:3d:bb:3d:b2:62:6b:ae:
fb:d5:84:a2:da:4e:58:a9:f4:7f:3c:ac:be:50:ae:b5:9a:b0:
fe:fc:75:f9:56:c7:26:fe:25:25:68:45:3b:ab:45:a9:3b:8c:
84:57:80:87:6c:f2:f0:63:6f:6f:fe:c6:c0:6f:a9:87:ef:cf:
1d:0b:91:a6:59:c0:f5:d4:22:7c:2f:f5:30:d0:37:3c:94:0f:
ef:d5:e2:7e:75:33:08:89:1f:71:a7:e7:f3:4d:af:4b:69:27:
67:eb:96:c1:9a:c5:7a:a9:88:93:e6:e0:a7:3a:56:38:7c:cb:
49:73:4b:4a:c3:79:09:2c:6f:6e:9b:2f:65:48:a4:a0:9b:81:
8e:55:1d:1d:d7:bb:61:c9:d5:aa:29:60:7f:f2:82:d4:6d:11:
91:ee:4a:96:79:1b:5e:7e:d5:75:6f:f5:ea:fc:fc:d0:57:d7:
2f:c3:8f:e6:94:9f:c0:3b:ba:0c:a7:a3:99:31:1b:e9:f1:b5:
e3:ab:b2:aa:30:56:57:79:a4:ba:8c:c1:c5:12:97:3f:6d:1e:
15:d6:ae:ab
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARqiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjEyMDcwNTMzWhcNMjQxMjI0MDcwNTMzWjAYMRYw
FAYDVQQDEw02NzVhOGI0MS1jYTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzN/j6/EDdAsQludbGc/EZgBsa0G8tf7Uc9MS/a3MqA7kNF4g9QLPojMG
t9y/p138U7lCgtyFlzP51qRJ39busT9auN/okShOPkWlp2xPudesU2EMtQWKC9T/
WaWR3EGpCbTcKITtEm5PQ9Gz9XWtEqvxXeab5qeMInd/KMNs1eUN95zg6eg30kzJ
iQC+tNmHCa6fryGkVqwOWR2TRZ29cZQo/YlKVEMYmaX4tLLwzCnqX/mPHQOaoaHh
3ryWlpF3iw6161407zuuFGEl73aWTKuQId10JMDt5qikyzAwjT0DVGSFgMriUC9E
QEMf+953IY+a2kumrQzkry6kzlxhmwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGBE
2VBdzCAqpmuTXLAmcj0fNEsXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83Q0M3RjNCMkI4NTcxMUVGQjJEMTBBNkU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtXAMA0GCSqGSIb3DQEB
CwUAA4IBAQBlNjsuAsCK5Zp1GEO7lHF4q6P9KPXNq8Ey74rnp90l5W3U8gtTYZxm
YUY4kg1pUD27PbJia6771YSi2k5YqfR/PKy+UK61mrD+/HX5Vscm/iUlaEU7q0Wp
O4yEV4CHbPLwY29v/sbAb6mH788dC5GmWcD11CJ8L/Uw0Dc8lA/v1eJ+dTMIiR9x
p+fzTa9LaSdn65bBmsV6qYiT5uCnOlY4fMtJc0tKw3kJLG9umy9lSKSgm4GOVR0d
17thydWqKWB/8oLUbRGR7kqWeRteftV1b/Xq/PzQV9cvw4/mlJ/AO7oMp6OZMRvp
8bXjq7KqMFZXeaS6jMHFEpc/bR4V1q6r
-----END CERTIFICATE-----
Generated at Tue Dec 24 08:50:37 2024 by rpki-client on console-fra.rpki-client.org