Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0F826C80EAA11EFA182AD69017001B1.roa
File: A0F826C80EAA11EFA182AD69017001B1.roa (raw, json)
Hash identifier: U6xAOVpsUEpJG/b6SiZXerJj8E0fg3eCIL/9BrZh+p8=
Subject key identifier: 25:D5:3F:FC:90:BA:26:3D:7E:D0:85:04:2E:FE:37:17:49:DA:C4:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B672
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0F826C80EAA11EFA182AD69017001B1.roa
Signing time: Fri 10 May 2024 08:52:28 +0000
ROA not before: Fri 10 May 2024 08:52:25 +0000
ROA not after: Mon 20 May 2024 08:52:25 +0000
asID: 142062
IP address blocks: 154.206.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46706 (0xb672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 08:52:25 2024 GMT
Not After : May 20 08:52:25 2024 GMT
Subject: CN=663de04c-7f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:51:17:8a:38:8c:d9:7e:84:cb:5c:9b:de:
86:24:82:8b:e3:ad:d8:81:69:51:df:fd:2f:cf:d0:
e7:0a:8f:55:a5:b9:71:b5:97:c7:d3:e9:44:e1:ae:
f6:40:46:90:da:1e:0a:88:23:90:74:de:6b:a3:b6:
63:7b:ee:3a:c0:d5:48:ff:d1:59:80:8e:b1:04:23:
5d:3d:06:b5:a7:c3:69:75:29:90:80:06:d4:28:b3:
8a:d4:1a:17:2b:3f:55:86:2d:9d:9b:f9:f2:bf:75:
a5:52:c7:90:23:4c:24:32:49:49:53:a3:7f:bc:b2:
37:30:7a:a3:3a:d3:de:ed:d6:85:98:a6:58:1f:be:
6a:7f:a6:fc:f1:75:a3:74:e3:f1:e7:41:49:80:0d:
57:68:bc:31:1a:47:e2:ee:02:b7:d2:4d:55:d2:75:
0b:39:44:a7:a1:92:26:fb:ba:30:ba:fd:96:63:ef:
dc:46:70:3e:e8:29:6f:cc:26:a3:2e:74:2e:8d:9d:
3c:bc:67:39:90:10:87:8f:73:67:b1:9d:61:fe:37:
c1:aa:7d:8f:02:df:84:45:81:61:27:19:cd:0a:8b:
40:d4:69:58:4e:cf:03:a3:79:23:0f:a8:ec:68:72:
7a:a2:55:d5:48:67:15:12:19:a0:7c:c2:0d:3e:a0:
4f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D5:3F:FC:90:BA:26:3D:7E:D0:85:04:2E:FE:37:17:49:DA:C4:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0F826C80EAA11EFA182AD69017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.209.0/24
Signature Algorithm: sha256WithRSAEncryption
28:25:b5:35:5b:02:7f:8a:8f:24:34:e7:00:7e:b6:6c:7c:dc:
03:f3:94:97:49:99:a1:42:0f:c0:c2:31:f8:c5:9f:3a:7e:64:
d2:9f:ed:43:95:29:dc:00:42:59:b6:82:79:97:2c:f8:0a:6b:
2a:e4:f5:19:a5:50:3e:df:1b:66:82:b9:37:17:5a:95:02:8c:
37:b0:f9:cd:04:5e:b9:e0:8a:84:67:aa:a6:04:6b:1c:7a:57:
72:9d:a9:64:57:e2:a3:f6:a5:bb:46:0b:0d:7e:4d:91:cd:3d:
a4:2c:2b:33:61:ad:fd:a2:9e:79:65:62:19:b8:34:70:fc:87:
50:0b:50:34:6f:a1:87:1c:a6:60:62:29:41:3e:54:f1:ae:0a:
e3:1e:55:e9:47:ba:14:c9:c9:b5:34:46:76:16:f9:de:a9:bf:
2c:52:85:4f:7e:d3:f1:37:e7:8e:b0:d5:9e:50:98:90:3d:ea:
ca:b1:eb:3b:31:50:45:0c:ce:d6:7f:6e:4d:0d:fb:53:0c:ac:
40:43:c0:b4:fa:9c:0b:60:83:11:1f:c4:a8:15:a9:7b:ef:02:
cf:c1:24:3b:8e:0b:50:75:4c:f6:4b:ab:94:8e:98:21:a0:01:
3e:92:10:58:cc:2b:71:3c:58:90:75:2a:74:5d:b7:5d:96:5b:
6a:d1:4b:45
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALZyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTEwMDg1MjI1WhcNMjQwNTIwMDg1MjI1WjAYMRYw
FAYDVQQDEw02NjNkZTA0Yy03Zjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuohRF4o4jNl+hMtcm96GJIKL463YgWlR3/0vz9DnCo9VpblxtZfH0+lE
4a72QEaQ2h4KiCOQdN5ro7Zje+46wNVI/9FZgI6xBCNdPQa1p8NpdSmQgAbUKLOK
1BoXKz9Vhi2dm/nyv3WlUseQI0wkMklJU6N/vLI3MHqjOtPe7daFmKZYH75qf6b8
8XWjdOPx50FJgA1XaLwxGkfi7gK30k1V0nULOUSnoZIm+7owuv2WY+/cRnA+6Clv
zCajLnQujZ08vGc5kBCHj3NnsZ1h/jfBqn2PAt+ERYFhJxnNCotA1GlYTs8Do3kj
D6jsaHJ6olXVSGcVEhmgfMINPqBP6wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCXV
P/yQuiY9ftCFBC7+NxdJ2sROMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMEY4MjZDODBFQUExMUVGQTE4MkFENjkwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms7RMA0GCSqGSIb3DQEB
CwUAA4IBAQAoJbU1WwJ/io8kNOcAfrZsfNwD85SXSZmhQg/AwjH4xZ86fmTSn+1D
lSncAEJZtoJ5lyz4Cmsq5PUZpVA+3xtmgrk3F1qVAow3sPnNBF654IqEZ6qmBGsc
eldynalkV+Kj9qW7RgsNfk2RzT2kLCszYa39op55ZWIZuDRw/IdQC1A0b6GHHKZg
YilBPlTxrgrjHlXpR7oUycm1NEZ2Fvneqb8sUoVPftPxN+eOsNWeUJiQPerKses7
MVBFDM7Wf25NDftTDKxAQ8C0+pwLYIMRH8SoFal77wLPwSQ7jgtQdUz2S6uUjpgh
oAE+khBYzCtxPFiQdSp0Xbddlltq0UtF
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:48:49 2024 by rpki-client on console-fra.rpki-client.org