Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C30635A018811EFA59E0D5E017001B1.roa
File: 9C30635A018811EFA59E0D5E017001B1.roa (raw, json)
Hash identifier: eBFHvcBhhdFuyoK89B0Gx1E0ghc3rXS0uQ4ex4dcOWY=
Subject key identifier: 81:D8:CB:71:25:33:D1:E2:96:DD:E3:51:B3:6A:69:79:CC:CF:CB:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AF88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C30635A018811EFA59E0D5E017001B1.roa
Signing time: Tue 23 Apr 2024 15:46:12 +0000
ROA not before: Tue 23 Apr 2024 15:46:08 +0000
ROA not after: Thu 02 May 2024 15:46:08 +0000
asID: 138630
IP address blocks: 154.212.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44936 (0xaf88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 15:46:08 2024 GMT
Not After : May 2 15:46:08 2024 GMT
Subject: CN=6627d7c4-4e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:80:6e:f1:dc:7f:75:69:89:e4:26:d1:a6:
0e:e6:68:6a:a3:da:8a:ae:80:96:09:2e:03:5d:0b:
20:00:70:8d:05:2c:26:1a:63:de:5e:5a:84:46:00:
03:71:08:33:c0:a9:c8:23:84:26:d3:6d:f7:f0:2f:
9c:42:a8:0e:d5:8c:73:bb:f5:02:8a:22:af:29:40:
cc:e8:eb:30:74:2d:76:99:4b:10:ad:39:5a:53:a4:
9b:2f:e2:cc:c2:25:f2:af:22:78:c5:32:48:cf:73:
7c:64:ce:3a:4e:c8:7e:06:83:b6:a1:20:85:62:c3:
b7:ef:dc:df:6a:36:c6:93:db:7a:a9:82:7f:ba:93:
6a:38:52:40:77:e1:4b:d3:b6:24:bf:59:be:46:d2:
ff:e1:06:40:77:eb:03:cb:4f:68:29:41:68:3e:37:
69:06:3d:2d:d1:82:e4:f5:75:14:bb:3d:49:f8:e6:
ad:36:d0:47:a1:32:82:00:2b:cb:0f:5d:12:65:4b:
1b:ee:a9:70:b7:21:a9:76:84:d0:b1:6a:3e:66:2f:
38:47:67:e0:79:34:ca:79:54:aa:22:bf:ef:c2:dd:
f7:0f:2e:d9:60:88:77:1d:56:4f:7f:7a:81:ce:85:
c1:22:b5:86:4f:ca:43:96:05:ba:2a:47:56:8f:af:
a5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D8:CB:71:25:33:D1:E2:96:DD:E3:51:B3:6A:69:79:CC:CF:CB:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C30635A018811EFA59E0D5E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.144.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:6b:fa:a2:44:ed:fd:8e:0d:71:81:f3:df:f9:ea:64:9b:83:
b7:f8:57:5f:4a:0b:3e:a6:d9:c1:98:da:19:7e:a7:19:1e:08:
70:87:4c:07:0e:34:df:fc:30:c1:6f:93:6f:00:98:7d:05:44:
60:02:b2:63:93:ea:fe:12:bf:7c:9c:9b:d0:42:72:df:23:46:
94:0a:00:c0:90:d8:35:89:f5:78:32:17:ca:6e:6f:50:6b:e4:
e0:c7:18:76:a3:19:4a:13:57:a4:42:a5:de:83:27:42:d8:62:
3d:7d:81:f2:ba:3e:47:62:0b:c2:98:76:6e:5c:4d:c5:50:b6:
a1:51:13:92:93:2e:83:2a:b2:07:31:2f:40:80:ec:eb:dd:4a:
72:5c:34:cf:a4:f7:2d:62:a4:18:fc:e4:3a:03:25:e6:39:73:
52:ac:82:2c:37:33:4b:b3:fe:0a:a9:88:5b:09:61:e8:e3:7d:
d6:bc:5a:6a:91:50:79:26:b7:b2:05:7d:d6:39:f3:f1:4c:c1:
8e:36:00:3e:a9:99:5a:26:b8:d8:dc:d6:3c:70:da:d5:4a:ab:
96:9f:c7:78:90:e4:cc:36:2b:24:52:2e:fa:a0:df:1e:c6:f5:
9e:fc:41:24:dd:42:c9:88:5c:c9:b1:f6:38:fe:1a:a5:d9:ca:
0a:b4:84:3c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK+IMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDIzMTU0NjA4WhcNMjQwNTAyMTU0NjA4WjAYMRYw
FAYDVQQDEw02NjI3ZDdjNC00ZTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsqCAbvHcf3VpieQm0aYO5mhqo9qKroCWCS4DXQsgAHCNBSwmGmPeXlqE
RgADcQgzwKnII4Qm02338C+cQqgO1Yxzu/UCiiKvKUDM6OswdC12mUsQrTlaU6Sb
L+LMwiXyryJ4xTJIz3N8ZM46Tsh+BoO2oSCFYsO379zfajbGk9t6qYJ/upNqOFJA
d+FL07Ykv1m+RtL/4QZAd+sDy09oKUFoPjdpBj0t0YLk9XUUuz1J+OatNtBHoTKC
ACvLD10SZUsb7qlwtyGpdoTQsWo+Zi84R2fgeTTKeVSqIr/vwt33Dy7ZYIh3HVZP
f3qBzoXBIrWGT8pDlgW6KkdWj6+lgwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIHY
y3ElM9Hilt3jUbNqaXnMz8srMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QzMwNjM1QTAxODgxMUVGQTU5RTBENUUwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmtSQMA0GCSqGSIb3DQEB
CwUAA4IBAQA/a/qiRO39jg1xgfPf+epkm4O3+FdfSgs+ptnBmNoZfqcZHghwh0wH
DjTf/DDBb5NvAJh9BURgArJjk+r+Er98nJvQQnLfI0aUCgDAkNg1ifV4MhfKbm9Q
a+Tgxxh2oxlKE1ekQqXegydC2GI9fYHyuj5HYgvCmHZuXE3FULahUROSky6DKrIH
MS9AgOzr3UpyXDTPpPctYqQY/OQ6AyXmOXNSrIIsNzNLs/4KqYhbCWHo433WvFpq
kVB5JreyBX3WOfPxTMGONgA+qZlaJrjY3NY8cNrVSquWn8d4kOTMNiskUi76oN8e
xvWe/EEk3ULJiFzJsfY4/hql2coKtIQ8
-----END CERTIFICATE-----
Generated at Fri May 3 03:52:32 2024 by rpki-client on console-fra.rpki-client.org