Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/891FE49AE7EB11EEBFC049C8775412E6.roa
File: 891FE49AE7EB11EEBFC049C8775412E6.roa (raw, json)
Hash identifier: fZ1FvVw55viYq8syU8IonMHL06SjA+6O67thSjc80Jc=
Subject key identifier: 5B:DC:6A:42:6B:EF:3B:42:01:C5:55:9C:31:E0:29:4A:04:4B:A6:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A5F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/891FE49AE7EB11EEBFC049C8775412E6.roa
Signing time: Fri 22 Mar 2024 01:28:50 +0000
ROA not before: Fri 22 Mar 2024 01:28:46 +0000
ROA not after: Wed 24 Apr 2024 01:28:46 +0000
asID: 18779
IP address blocks: 154.203.48.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42484 (0xa5f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 22 01:28:46 2024 GMT
Not After : Apr 24 01:28:46 2024 GMT
Subject: CN=65fcded2-118c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:80:11:c3:c1:81:5e:1b:75:8e:86:13:6e:
f0:be:4b:ee:85:c0:f0:46:81:3f:b9:a8:31:29:91:
29:3e:48:e3:7d:e9:36:12:a0:81:12:7f:30:7c:5d:
0e:40:6c:c6:b4:ff:3d:a1:f9:84:b7:7e:9c:e9:8f:
6c:55:88:14:a0:67:17:b5:e4:9a:26:8a:23:86:ec:
de:16:26:19:3e:28:90:f4:29:ef:91:7f:3b:9d:1b:
85:77:08:9c:d0:7e:6e:9d:d8:df:5c:8a:bb:67:52:
55:33:8c:10:5b:ec:69:7e:54:ec:67:be:51:69:3d:
10:97:01:65:58:2c:b6:22:2c:de:b2:aa:0a:7a:ee:
8a:e0:7d:24:63:ed:54:15:23:df:47:37:56:6a:ec:
50:3a:57:2f:00:f6:50:6d:13:61:fa:1f:1b:29:d2:
d9:3e:0f:da:cf:03:38:18:76:e4:ff:1d:0d:3c:1f:
2a:04:32:ca:e8:31:f6:21:06:eb:93:eb:d3:d7:58:
07:33:55:4f:01:6f:98:29:86:8c:05:f0:f5:c9:90:
ab:53:47:95:37:23:95:49:fd:73:20:1a:d9:02:a9:
1e:db:c7:5a:cf:76:26:cc:f6:d0:5d:b1:2a:8e:78:
52:e9:16:b2:03:48:45:ba:63:52:dd:b4:55:6e:9c:
64:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DC:6A:42:6B:EF:3B:42:01:C5:55:9C:31:E0:29:4A:04:4B:A6:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/891FE49AE7EB11EEBFC049C8775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.48.0/21
Signature Algorithm: sha256WithRSAEncryption
63:61:da:40:3f:78:97:59:6b:55:2a:fd:3b:8f:6e:82:fa:ac:
55:8e:12:bd:ba:c3:74:e0:8d:e4:ed:30:22:1f:e3:af:a5:83:
1d:94:06:79:b1:57:47:9c:fb:5d:43:e2:33:08:8b:5a:41:c8:
f4:28:11:bd:96:ee:8e:6f:05:be:5d:99:fb:95:0e:f1:83:97:
74:92:ab:33:de:ef:e2:59:ec:8e:83:07:e2:41:6e:56:75:1c:
6f:71:85:11:1c:ea:46:d0:3a:e5:aa:45:7b:23:fd:9a:bb:3d:
f0:e3:cc:9f:b9:d7:eb:a5:2c:bc:9b:0a:45:3d:b2:54:35:c2:
8f:c0:0d:6a:44:21:73:c1:3f:d6:6b:60:b0:e6:37:2e:01:10:
9a:79:1d:07:30:0c:cc:0c:50:39:0b:b8:f8:14:b1:2e:c3:de:
16:2e:dc:50:09:ce:86:a8:35:73:69:f2:47:95:98:ee:da:3a:
ee:35:62:a1:66:18:25:a1:65:e7:15:54:f4:26:04:5e:31:df:
7c:ba:24:a5:f3:48:56:7d:49:d0:df:2d:d6:26:85:6a:0b:90:
c5:37:da:0e:28:22:3f:ac:ca:f5:81:69:7d:77:ac:72:e9:e3:
60:bd:dd:03:85:19:06:0f:2a:c4:a2:a3:bc:42:92:72:87:61:
b1:f7:9e:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKX0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIyMDEyODQ2WhcNMjQwNDI0MDEyODQ2WjAYMRYw
FAYDVQQDEw02NWZjZGVkMi0xMThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyMmAEcPBgV4bdY6GE27wvkvuhcDwRoE/uagxKZEpPkjjfek2EqCBEn8w
fF0OQGzGtP89ofmEt36c6Y9sVYgUoGcXteSaJoojhuzeFiYZPiiQ9CnvkX87nRuF
dwic0H5undjfXIq7Z1JVM4wQW+xpflTsZ75RaT0QlwFlWCy2IizesqoKeu6K4H0k
Y+1UFSPfRzdWauxQOlcvAPZQbRNh+h8bKdLZPg/azwM4GHbk/x0NPB8qBDLK6DH2
IQbrk+vT11gHM1VPAW+YKYaMBfD1yZCrU0eVNyOVSf1zIBrZAqke28daz3YmzPbQ
XbEqjnhS6RayA0hFumNS3bRVbpxk7QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFvc
akJr7ztCAcVVnDHgKUoES6ZCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84OTFGRTQ5QUU3RUIxMUVFQkZDMDQ5Qzg3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmsswMA0GCSqGSIb3DQEB
CwUAA4IBAQBjYdpAP3iXWWtVKv07j26C+qxVjhK9usN04I3k7TAiH+OvpYMdlAZ5
sVdHnPtdQ+IzCItaQcj0KBG9lu6ObwW+XZn7lQ7xg5d0kqsz3u/iWeyOgwfiQW5W
dRxvcYURHOpG0DrlqkV7I/2auz3w48yfudfrpSy8mwpFPbJUNcKPwA1qRCFzwT/W
a2Cw5jcuARCaeR0HMAzMDFA5C7j4FLEuw94WLtxQCc6GqDVzafJHlZju2jruNWKh
ZhgloWXnFVT0JgReMd98uiSl80hWfUnQ3y3WJoVqC5DFN9oOKCI/rMr1gWl9d6xy
6eNgvd0DhRkGDyrEoqO8QpJyh2Gx9577
-----END CERTIFICATE-----
Generated at Wed Apr 24 04:12:03 2024 by rpki-client on console-fra.rpki-client.org