Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A51D114CE33011ED971BE9C32F6D8C1D.roa
File: A51D114CE33011ED971BE9C32F6D8C1D.roa (raw, json)
Hash identifier: H33ooT4OzSixOY5AH81N0U/WjE2xixvTPEZSJTSLO7I=
Subject key identifier: 77:62:AA:EE:2F:A5:18:47:39:2F:13:45:3B:3C:A5:C1:57:51:BF:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1FC1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A51D114CE33011ED971BE9C32F6D8C1D.roa
Signing time: Tue 25 Apr 2023 06:15:59 +0000
ROA not before: Tue 25 Apr 2023 06:15:55 +0000
ROA not after: Thu 25 Apr 2024 06:15:55 +0000
asID: 28458
IP address blocks: 154.94.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8129 (0x1fc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 06:15:55 2023 GMT
Not After : Apr 25 06:15:55 2024 GMT
Subject: CN=6447701f-fd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:f3:1c:70:6d:de:03:5f:56:1d:a5:e8:90:
4c:45:b3:64:4e:78:3a:62:45:29:74:0f:68:c6:cc:
2b:11:c5:e8:41:5a:d9:8a:35:ee:d3:33:5a:0b:fc:
eb:7f:d5:19:5c:10:c1:0d:4c:90:1b:6c:20:20:8b:
63:f1:bf:61:06:c3:27:52:03:c8:d0:f9:00:80:76:
e1:da:35:56:82:65:3b:e7:2d:47:05:b8:e6:90:4d:
d5:14:06:3b:f0:8c:2e:47:02:9f:5f:25:b5:5a:17:
6e:b7:bf:a0:47:6e:f8:92:46:14:8c:26:06:55:1a:
4e:0d:91:53:30:fa:2a:60:ce:07:1d:04:56:b4:15:
ff:c2:22:7d:af:d8:43:36:72:5a:54:73:ff:ca:5e:
bd:c2:c4:5c:aa:da:82:7a:95:be:70:a4:05:d1:7b:
6a:15:d1:fb:82:1c:a0:de:6e:94:3e:2b:47:59:7f:
1b:86:17:d4:33:be:2a:f7:47:49:09:f9:b0:ca:ff:
0a:6a:9c:74:2e:1e:a1:c2:8d:7c:23:a0:38:3c:05:
19:f5:ea:33:4c:fc:27:2a:40:26:15:ef:35:d2:b6:
79:15:0a:78:a0:b9:9e:5c:73:96:9c:c7:b7:e9:4c:
16:55:94:21:f4:3f:fd:d8:bf:14:c3:99:28:1f:2d:
d1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:62:AA:EE:2F:A5:18:47:39:2F:13:45:3B:3C:A5:C1:57:51:BF:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A51D114CE33011ED971BE9C32F6D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.0.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:49:17:ea:2d:d0:ed:d4:ff:f6:cb:6d:f4:eb:7f:e5:ee:5f:
df:84:68:61:8e:26:db:6a:d3:8a:80:e2:62:b1:b6:ab:90:ea:
31:e0:9a:bb:e3:ca:df:bf:a6:53:19:21:d3:27:3b:df:34:59:
a6:98:fb:02:7d:31:45:70:90:99:59:a8:1e:24:6a:7c:9a:20:
ae:f8:f4:e6:4e:d6:1f:c0:73:1d:e0:dc:4b:66:59:ca:9a:89:
63:df:13:d0:1f:84:6d:dd:bd:e0:47:cd:12:f9:c2:45:13:38:
a8:3c:72:f5:5b:d1:a9:32:9c:36:cf:c7:0d:8b:c1:fa:27:d1:
59:e3:49:b6:74:c1:d3:ff:36:ea:e4:29:c9:35:3c:f6:15:f6:
e9:db:4b:08:83:d7:b5:a6:cd:a9:5c:63:28:d1:70:e5:b5:ee:
1e:62:59:b8:b4:ee:1f:c1:ba:f0:a8:26:d2:b7:da:3d:d3:64:
78:40:cf:68:ad:a5:03:e1:86:64:3e:5d:b0:c2:92:fc:85:43:
ed:b0:a9:ec:3c:95:5b:6d:80:f1:7b:52:bc:9b:da:bb:94:66:
eb:7c:d7:8c:f3:1b:21:77:aa:09:bb:b9:16:b3:f3:c5:4e:37:
70:9e:86:54:7b:da:5a:43:14:c1:f9:43:ee:58:53:ca:06:e3:
18:54:b6:9f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICH8EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA0MjUwNjE1NTVaFw0yNDA0MjUwNjE1NTVaMBgxFjAU
BgNVBAMMDTY0NDc3MDFmLWZkNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNPvMccG3eA19WHaXokExFs2ROeDpiRSl0D2jGzCsRxehBWtmKNe7TM1oL
/Ot/1RlcEMENTJAbbCAgi2Pxv2EGwydSA8jQ+QCAduHaNVaCZTvnLUcFuOaQTdUU
BjvwjC5HAp9fJbVaF263v6BHbviSRhSMJgZVGk4NkVMw+ipgzgcdBFa0Ff/CIn2v
2EM2clpUc//KXr3CxFyq2oJ6lb5wpAXRe2oV0fuCHKDebpQ+K0dZfxuGF9Qzvir3
R0kJ+bDK/wpqnHQuHqHCjXwjoDg8BRn16jNM/CcqQCYV7zXStnkVCniguZ5cc5ac
x7fpTBZVlCH0P/3YvxTDmSgfLdFhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUd2Kq
7i+lGEc5LxNFOzylwVdRv9UwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0E1MUQxMTRDRTMzMDExRUQ5NzFCRTlDMzJGNkQ4QzFELnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaXgAwDQYJKoZIhvcNAQEL
BQADggEBANNJF+ot0O3U//bLbfTrf+XuX9+EaGGOJttq04qA4mKxtquQ6jHgmrvj
yt+/plMZIdMnO980WaaY+wJ9MUVwkJlZqB4kanyaIK749OZO1h/Acx3g3EtmWcqa
iWPfE9AfhG3dveBHzRL5wkUTOKg8cvVb0akynDbPxw2Lwfon0VnjSbZ0wdP/Nurk
Kck1PPYV9unbSwiD17WmzalcYyjRcOW17h5iWbi07h/BuvCoJtK32j3TZHhAz2it
pQPhhmQ+XbDCkvyFQ+2wqew8lVttgPF7Uryb2ruUZut814zzGyF3qgm7uRaz88VO
N3CehlR72lpDFMH5Q+5YU8oG4xhUtp8=
-----END CERTIFICATE-----
Generated at Thu Apr 25 10:41:11 2024 by rpki-client on console-ams.rpki-client.org