Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B44F1C0EDB211EEA2C7B187775412E6.roa
File: 9B44F1C0EDB211EEA2C7B187775412E6.roa (raw, json)
Hash identifier: Jv5PIB22dV649SplIu/DGXhilDbqfup9L4zNUmC+GNI=
Subject key identifier: BC:BA:50:11:35:BF:16:9A:F5:52:D4:4B:4B:CA:A7:4B:4E:37:34:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A705
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B44F1C0EDB211EEA2C7B187775412E6.roa
Signing time: Fri 29 Mar 2024 09:56:26 +0000
ROA not before: Fri 29 Mar 2024 09:56:23 +0000
ROA not after: Fri 26 Apr 2024 09:56:23 +0000
asID: 62240
IP address blocks: 154.196.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42757 (0xa705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 09:56:23 2024 GMT
Not After : Apr 26 09:56:23 2024 GMT
Subject: CN=6606904a-eb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:b5:4d:7f:c4:f8:05:b8:10:6e:9f:b2:72:
8e:ff:0b:da:9f:77:e5:e3:fa:de:d7:32:a0:0c:a7:
d6:76:94:5d:d3:16:01:32:99:c2:34:08:c7:be:d7:
74:0b:19:1b:7f:b4:80:d0:40:d8:ed:d7:07:05:00:
d7:d2:67:20:70:ce:1b:ea:a7:2d:f9:2c:f7:ec:2d:
53:5a:ef:08:03:e7:b1:7e:24:54:20:00:25:60:f0:
3d:e2:fe:34:45:a7:bc:cb:5f:90:34:c1:13:8b:2f:
3d:c6:bb:5f:07:4b:65:19:81:95:6b:e3:da:4f:4d:
7f:67:8e:84:b8:d3:c9:c8:2d:80:27:49:b1:d0:79:
35:69:ef:b9:a0:c8:b5:16:13:d8:ac:aa:0c:90:e2:
44:40:15:f3:f9:d4:22:6d:81:b7:d8:ad:64:96:0d:
ad:10:5c:a6:68:b5:77:5c:06:4a:dd:30:96:f8:31:
86:74:09:17:27:de:38:a4:84:a5:b2:4f:55:d3:1b:
38:38:6d:0c:92:fd:3f:ba:d8:f8:b7:1e:f3:60:b4:
a1:39:7b:a0:44:fe:02:db:bb:be:99:ad:19:43:24:
b2:5e:c5:48:d4:b2:c9:1c:09:1f:a9:fa:63:3e:92:
62:2b:66:2d:4e:aa:ed:cf:f1:7e:3b:28:b7:0f:6a:
ae:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BA:50:11:35:BF:16:9A:F5:52:D4:4B:4B:CA:A7:4B:4E:37:34:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B44F1C0EDB211EEA2C7B187775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.32.0/19
Signature Algorithm: sha256WithRSAEncryption
aa:f2:73:50:39:a2:c5:6b:84:01:80:23:d8:b8:67:72:cd:38:
4c:e1:c8:e2:53:ea:de:54:66:c6:93:da:cf:81:e5:28:04:af:
32:87:d7:8c:00:9b:ac:16:d0:3d:48:08:01:ca:2c:08:b9:78:
96:a2:a7:f3:9f:62:8f:e2:7f:47:81:fe:16:ff:85:de:9d:75:
3b:ae:dc:6e:6b:4f:57:fa:ba:b4:62:53:43:58:0b:e8:18:7a:
38:a0:de:5d:7d:a8:0f:14:b6:d5:67:0e:23:5c:47:1e:19:94:
d3:10:de:10:1f:3a:48:72:81:26:5a:94:df:54:f5:bf:e0:ec:
8c:58:dc:7c:4b:f8:40:ae:f2:d3:61:44:8e:6a:a7:c0:a5:f6:
9f:75:93:7e:96:53:07:c0:99:92:d1:0b:6e:68:e0:9b:cb:fd:
13:74:80:b6:07:1d:05:48:48:4d:90:e6:bb:c5:90:ed:d8:70:
8c:3a:c8:98:d2:22:b5:f2:65:b9:56:91:02:3b:14:21:b3:93:
c8:34:a5:46:5c:4d:ef:b7:c1:a2:0f:8d:dd:72:bd:8c:12:29:
48:a1:4a:61:1b:33:70:f2:05:e2:ac:36:5c:cf:3a:e5:92:58:
13:80:ab:a8:6b:d7:b1:5b:1d:50:0a:a0:9e:48:e9:18:a7:24:
c3:3c:8d:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKcFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzI5MDk1NjIzWhcNMjQwNDI2MDk1NjIzWjAYMRYw
FAYDVQQDEw02NjA2OTA0YS1lYjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAszi1TX/E+AW4EG6fsnKO/wvan3fl4/re1zKgDKfWdpRd0xYBMpnCNAjH
vtd0Cxkbf7SA0EDY7dcHBQDX0mcgcM4b6qct+Sz37C1TWu8IA+exfiRUIAAlYPA9
4v40Rae8y1+QNMETiy89xrtfB0tlGYGVa+PaT01/Z46EuNPJyC2AJ0mx0Hk1ae+5
oMi1FhPYrKoMkOJEQBXz+dQibYG32K1klg2tEFymaLV3XAZK3TCW+DGGdAkXJ944
pISlsk9V0xs4OG0Mkv0/utj4tx7zYLShOXugRP4C27u+ma0ZQySyXsVI1LLJHAkf
qfpjPpJiK2YtTqrtz/F+Oyi3D2quDwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLy6
UBE1vxaa9VLUS0vKp0tONzQsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QjQ0RjFDMEVEQjIxMUVFQTJDN0IxODc3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmsQgMA0GCSqGSIb3DQEB
CwUAA4IBAQCq8nNQOaLFa4QBgCPYuGdyzThM4cjiU+reVGbGk9rPgeUoBK8yh9eM
AJusFtA9SAgByiwIuXiWoqfzn2KP4n9Hgf4W/4XenXU7rtxua09X+rq0YlNDWAvo
GHo4oN5dfagPFLbVZw4jXEceGZTTEN4QHzpIcoEmWpTfVPW/4OyMWNx8S/hArvLT
YUSOaqfApfafdZN+llMHwJmS0QtuaOCby/0TdIC2Bx0FSEhNkOa7xZDt2HCMOsiY
0iK18mW5VpECOxQhs5PINKVGXE3vt8GiD43dcr2MEilIoUphGzNw8gXirDZczzrl
klgTgKuoa9exWx1QCqCeSOkYpyTDPI2V
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:45 2024 by rpki-client on console-ams.rpki-client.org