Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85B9FAF0E46E11EEABCEC154775412E6.roa
File: 85B9FAF0E46E11EEABCEC154775412E6.roa (raw, json)
Hash identifier: ldd8MF5DcsB8wTlBm1cdO+YIcnssrOcOLLM1A8LWf/4=
Subject key identifier: C2:D3:CC:8A:0C:62:82:3C:29:90:56:B0:82:21:98:12:46:F0:30:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A207
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85B9FAF0E46E11EEABCEC154775412E6.roa
Signing time: Sun 17 Mar 2024 14:56:24 +0000
ROA not before: Sun 17 Mar 2024 14:56:20 +0000
ROA not after: Tue 30 Apr 2024 14:56:20 +0000
asID: 63139
IP address blocks: 154.94.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41479 (0xa207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 14:56:20 2024 GMT
Not After : Apr 30 14:56:20 2024 GMT
Subject: CN=65f70498-d9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:86:6c:41:e4:91:e5:1f:d9:fb:5c:47:5c:97:
4d:93:31:96:e5:46:ec:11:40:fe:a3:b7:ad:0d:54:
95:e3:5f:25:ec:3f:39:2d:2f:ea:5c:8b:ba:ba:a1:
93:e8:d4:86:fa:48:8d:b2:c4:3e:4a:fd:95:a8:58:
58:57:1d:eb:82:fe:7a:e2:83:eb:2a:b6:1a:c5:4f:
9d:6d:11:f9:17:4c:a0:2f:bb:22:29:8c:3d:b3:5a:
f1:c7:46:a5:8f:1e:16:2f:f1:b3:18:40:fc:e7:49:
6c:75:cf:cc:b9:c7:c9:fe:73:74:22:72:59:d3:b7:
0e:17:e6:35:b1:61:82:c2:74:ba:d9:5e:e2:e2:4a:
bd:1e:4c:45:ee:9f:98:4f:71:98:45:1a:70:e9:8e:
1c:53:dc:c2:80:08:ed:f0:26:aa:a7:ae:5b:d6:7a:
23:15:53:e5:7c:d2:04:fc:40:70:fa:4c:f7:2a:27:
96:2e:af:93:b4:eb:81:f8:5c:6b:33:fd:65:50:a5:
b2:5b:24:8f:52:4b:72:c7:bf:8a:41:f0:1a:51:0b:
bf:ba:e2:8f:b3:9a:d5:94:9b:68:e5:e3:18:da:b5:
3a:9b:50:47:d5:93:98:5d:a0:17:cb:2c:88:6f:e8:
40:85:1e:4c:53:22:52:18:28:7a:1c:ec:e7:2f:b0:
56:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D3:CC:8A:0C:62:82:3C:29:90:56:B0:82:21:98:12:46:F0:30:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85B9FAF0E46E11EEABCEC154775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.115.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:2f:6c:d6:64:14:3e:28:30:ae:3d:9a:86:f7:cf:99:34:9d:
8b:c6:50:ed:6a:e0:c7:79:c0:76:20:0b:3a:18:cf:16:31:be:
f9:0c:e5:e6:df:35:3a:ff:0d:e6:64:c3:01:b5:15:a5:39:31:
56:31:70:1b:c6:05:18:5f:ac:49:45:29:60:d0:04:65:36:5a:
6d:a1:74:f2:b6:a8:58:02:54:6b:c5:bf:4e:58:c8:8a:95:4e:
a9:a3:09:01:b6:36:3f:45:f3:bd:ba:ae:b3:e1:d8:e4:7b:40:
e0:17:b9:05:66:f8:81:d0:1a:3a:f2:77:26:06:b0:36:79:78:
91:42:00:a7:83:76:45:49:e6:20:83:37:3d:bd:f0:7a:1d:57:
fe:f9:ca:95:73:a0:0b:2c:c3:ce:e2:17:08:7e:79:7e:8a:ad:
d7:bd:50:da:1a:6b:62:3f:5c:f9:6b:cd:0c:49:75:4b:92:60:
de:23:14:ea:ae:22:83:2f:09:b0:a7:19:87:a1:5e:b0:75:a1:
e5:58:91:15:20:66:db:a3:ce:b4:e0:18:07:51:41:36:28:a3:
d6:56:f1:de:2e:59:11:89:90:15:70:88:5c:43:20:88:ba:62:
c2:65:27:46:06:4e:14:39:16:92:4a:52:27:46:85:73:85:51:
e6:ce:a8:3c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKIHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzE3MTQ1NjIwWhcNMjQwNDMwMTQ1NjIwWjAYMRYw
FAYDVQQDEw02NWY3MDQ5OC1kOWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmIZsQeSR5R/Z+1xHXJdNkzGW5UbsEUD+o7etDVSV418l7D85LS/qXIu6
uqGT6NSG+kiNssQ+Sv2VqFhYVx3rgv564oPrKrYaxU+dbRH5F0ygL7siKYw9s1rx
x0aljx4WL/GzGED850lsdc/MucfJ/nN0InJZ07cOF+Y1sWGCwnS62V7i4kq9HkxF
7p+YT3GYRRpw6Y4cU9zCgAjt8Caqp65b1nojFVPlfNIE/EBw+kz3KieWLq+TtOuB
+FxrM/1lUKWyWySPUktyx7+KQfAaUQu/uuKPs5rVlJto5eMY2rU6m1BH1ZOYXaAX
yyyIb+hAhR5MUyJSGCh6HOznL7BWWwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMLT
zIoMYoI8KZBWsIIhmBJG8DBUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NUI5RkFGMEU0NkUxMUVFQUJDRUMxNTQ3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5zMA0GCSqGSIb3DQEB
CwUAA4IBAQDSL2zWZBQ+KDCuPZqG98+ZNJ2LxlDtauDHecB2IAs6GM8WMb75DOXm
3zU6/w3mZMMBtRWlOTFWMXAbxgUYX6xJRSlg0ARlNlptoXTytqhYAlRrxb9OWMiK
lU6powkBtjY/RfO9uq6z4djke0DgF7kFZviB0Bo68ncmBrA2eXiRQgCng3ZFSeYg
gzc9vfB6HVf++cqVc6ALLMPO4hcIfnl+iq3XvVDaGmtiP1z5a80MSXVLkmDeIxTq
riKDLwmwpxmHoV6wdaHlWJEVIGbbo8604BgHUUE2KKPWVvHeLlkRiZAVcIhcQyCI
umLCZSdGBk4UORaSSlInRoVzhVHmzqg8
-----END CERTIFICATE-----
Generated at Wed May 1 02:03:19 2024 by rpki-client on console-ams.rpki-client.org