Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFD49C6AE47711EEBB94218F775412E6.roa
File: AFD49C6AE47711EEBB94218F775412E6.roa (raw, json)
Hash identifier: x8HbeBEix2Q/F2PNV44PA3D5Rbw93H+SRdEAS1ydPio=
Subject key identifier: 87:C2:CF:ED:BF:25:76:9A:D4:50:55:43:25:01:6A:7F:5B:3C:AA:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A267
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFD49C6AE47711EEBB94218F775412E6.roa
Signing time: Sun 17 Mar 2024 16:02:00 +0000
ROA not before: Sun 17 Mar 2024 16:01:56 +0000
ROA not after: Tue 30 Apr 2024 16:01:56 +0000
asID: 63139
IP address blocks: 154.94.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41575 (0xa267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 16:01:56 2024 GMT
Not After : Apr 30 16:01:56 2024 GMT
Subject: CN=65f713f8-c2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:d7:2d:66:eb:17:74:cc:ff:c5:42:7f:eb:
78:f3:58:f9:81:de:d2:f9:01:90:7e:81:3f:82:6f:
3c:8f:00:40:19:ad:75:7b:e0:71:49:f2:3a:8a:74:
69:1f:80:db:95:da:17:f9:b9:cf:55:4b:6e:71:7b:
fc:6c:31:f2:b9:b2:09:10:81:08:9c:c2:d6:b3:ed:
b3:f6:2f:55:3a:aa:e5:85:54:63:14:7c:d8:5d:98:
8e:79:7e:1a:41:f3:47:04:5c:70:3d:b6:4a:06:10:
06:3f:53:c3:ac:54:e1:e6:90:36:7b:f9:5d:11:4d:
2a:60:ba:69:d6:75:2b:d1:f7:8d:0d:52:81:2a:c3:
9a:2e:b1:7b:35:b5:cb:f8:f9:00:83:f0:c1:59:a1:
48:01:ec:2e:f3:1e:30:af:2d:df:fd:58:c0:7c:0c:
43:d9:bb:c4:a1:c0:75:9c:32:cf:56:97:1c:45:2d:
42:02:8d:14:91:07:4c:01:7e:30:89:e9:be:01:c6:
82:5d:44:7a:ea:9d:8f:ad:2b:a0:3d:ee:f2:20:e6:
e8:75:46:0c:e5:f1:a8:ff:2a:6f:c9:2b:5a:a0:94:
98:cd:50:53:e3:0d:e9:86:ae:e9:30:ec:fa:74:cd:
8e:b4:a7:8a:a5:12:f6:98:da:e7:24:10:4a:db:ff:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C2:CF:ED:BF:25:76:9A:D4:50:55:43:25:01:6A:7F:5B:3C:AA:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFD49C6AE47711EEBB94218F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.95.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:a1:5d:96:85:15:db:3b:60:eb:b2:30:9f:3f:a7:68:20:3b:
03:35:36:cf:1e:c8:a9:bd:a4:7f:97:82:f6:38:10:7e:dd:9f:
98:5a:5f:1a:e0:b3:c6:3f:90:f5:ba:12:f4:2d:71:db:e1:80:
76:e7:3d:ba:02:9f:1b:29:18:8c:8b:68:b6:d7:d2:ee:a3:6d:
eb:e7:47:ee:e3:78:ca:81:75:5f:c7:1d:38:9c:d5:ce:aa:b2:
d6:bd:d4:cb:0d:f3:b9:5b:f6:83:96:b8:c6:4b:75:8c:df:90:
f2:43:9c:3a:ec:ee:a6:77:9b:06:64:c8:2d:6e:7b:a0:5b:9b:
11:ba:74:7b:dd:2d:f4:1b:a2:01:26:d5:30:f9:d8:bf:06:f1:
2e:76:dd:91:fd:5f:f3:82:93:ae:12:3e:c9:fa:33:73:f8:aa:
2b:1e:13:1d:5e:67:ff:10:94:e3:2f:65:fe:1e:3c:87:99:07:
78:29:3f:c6:65:25:86:8f:8c:a8:41:eb:5c:d4:0a:62:e9:8f:
38:33:a6:f5:38:9b:04:6f:1e:c6:49:07:a1:91:a1:86:fb:17:
0d:fc:c6:23:83:01:7d:ef:0c:c1:d9:e2:74:fa:fa:c6:5c:a1:
07:06:8e:03:14:b3:09:bc:50:da:2a:84:30:48:47:77:eb:8f:
a1:e7:af:ec
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKJnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzE3MTYwMTU2WhcNMjQwNDMwMTYwMTU2WjAYMRYw
FAYDVQQDEw02NWY3MTNmOC1jMmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArgXXLWbrF3TM/8VCf+t481j5gd7S+QGQfoE/gm88jwBAGa11e+BxSfI6
inRpH4DbldoX+bnPVUtucXv8bDHyubIJEIEInMLWs+2z9i9VOqrlhVRjFHzYXZiO
eX4aQfNHBFxwPbZKBhAGP1PDrFTh5pA2e/ldEU0qYLpp1nUr0feNDVKBKsOaLrF7
NbXL+PkAg/DBWaFIAewu8x4wry3f/VjAfAxD2bvEocB1nDLPVpccRS1CAo0UkQdM
AX4wiem+AcaCXUR66p2PrSugPe7yIObodUYM5fGo/ypvyStaoJSYzVBT4w3phq7p
MOz6dM2OtKeKpRL2mNrnJBBK2/+BKQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIfC
z+2/JXaa1FBVQyUBan9bPKoPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BRkQ0OUM2QUU0NzcxMUVFQkI5NDIxOEY3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5fMA0GCSqGSIb3DQEB
CwUAA4IBAQBvoV2WhRXbO2DrsjCfP6doIDsDNTbPHsipvaR/l4L2OBB+3Z+YWl8a
4LPGP5D1uhL0LXHb4YB25z26Ap8bKRiMi2i219Luo23r50fu43jKgXVfxx04nNXO
qrLWvdTLDfO5W/aDlrjGS3WM35DyQ5w67O6md5sGZMgtbnugW5sRunR73S30G6IB
JtUw+di/BvEudt2R/V/zgpOuEj7J+jNz+KorHhMdXmf/EJTjL2X+HjyHmQd4KT/G
ZSWGj4yoQetc1Api6Y84M6b1OJsEbx7GSQehkaGG+xcN/MYjgwF97wzB2eJ0+vrG
XKEHBo4DFLMJvFDaKoQwSEd364+h56/s
-----END CERTIFICATE-----
Generated at Wed May 1 02:40:37 2024 by rpki-client on console-fra.rpki-client.org