Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA3258FCFE2411EEA9BBF742017001B1.roa
File: BA3258FCFE2411EEA9BBF742017001B1.roa (raw, json)
Hash identifier: 4SLCAtKN13FcvqvwU1FubUjoe6/G9OXLCVk+OD6hvVI=
Subject key identifier: 03:3A:AA:A1:F2:51:81:E6:EF:35:2D:00:47:6C:44:F2:51:46:48:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE72
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA3258FCFE2411EEA9BBF742017001B1.roa
Signing time: Fri 19 Apr 2024 08:13:39 +0000
ROA not before: Fri 19 Apr 2024 08:13:36 +0000
ROA not after: Mon 29 Apr 2024 08:13:36 +0000
asID: 5065
IP address blocks: 154.85.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44658 (0xae72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 19 08:13:36 2024 GMT
Not After : Apr 29 08:13:36 2024 GMT
Subject: CN=662227b3-991b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:82:7d:cd:b7:06:b9:1b:e5:8a:21:02:4c:
98:4d:92:d2:8f:2f:44:7f:32:5a:23:d7:24:f4:ba:
2f:0e:c9:a6:7d:ab:d5:95:8d:6c:ad:a9:f7:ad:ac:
f3:f8:d9:e7:8d:c5:51:f3:90:4f:61:02:9d:42:0f:
98:f1:46:f0:dc:c6:ca:86:92:cf:e3:93:3f:2a:db:
fd:35:9a:5f:cc:8a:8b:e8:32:a9:0a:e9:28:0c:8c:
05:08:f3:4f:a0:36:f5:8e:d4:09:7e:e8:2a:1a:19:
b8:5c:89:30:f6:7b:55:e2:9a:8d:9e:35:bb:4d:a8:
73:79:64:1e:16:c0:1e:5b:4e:1a:69:3c:e2:4f:55:
1b:da:d4:9a:fc:9e:1c:b6:20:76:60:6b:d2:47:b0:
89:5c:f2:0a:a3:48:af:14:1e:5e:bf:6e:d4:58:0b:
fb:06:39:3d:77:8d:62:c1:29:20:5e:40:87:ac:a2:
33:b5:15:54:c3:3c:6e:01:24:b4:01:06:0a:46:5e:
1d:b1:7c:50:3f:f7:c6:e8:63:2f:bf:86:32:bb:ba:
60:4f:17:17:3c:b7:85:ef:4a:d2:a0:d8:c2:01:7a:
18:d7:4e:bc:fa:65:ce:16:bc:1d:32:9c:1a:ff:28:
0c:26:54:17:fa:4b:3d:51:23:78:7a:52:c1:8e:7b:
94:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3A:AA:A1:F2:51:81:E6:EF:35:2D:00:47:6C:44:F2:51:46:48:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA3258FCFE2411EEA9BBF742017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.20.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:ee:ef:26:b5:83:c5:38:26:e9:20:24:c4:2b:86:3b:8b:eb:
14:18:84:04:03:5f:e6:b9:88:8b:d9:98:8f:e3:88:b0:33:c1:
fb:c5:9c:8d:a2:e5:cf:7d:11:59:cf:cf:92:0f:f4:b4:1d:21:
8b:c4:c1:ed:5e:88:4b:db:f7:ad:33:ed:0e:94:26:99:5d:44:
30:c3:8b:7f:c1:39:91:6f:8f:46:a8:ad:d1:9b:bc:e8:08:07:
c3:28:8f:18:01:46:4a:c6:be:6c:fc:c1:da:e8:b7:4e:31:d0:
bf:cd:87:88:c7:bf:3b:4c:39:eb:5c:51:f9:03:2a:6f:e3:07:
a6:59:ff:5d:93:c4:fd:04:6e:78:3f:a1:e6:4b:5f:47:aa:ac:
d4:57:70:9f:68:ce:98:2b:8b:df:af:91:5d:03:8d:8d:de:29:
6d:d6:4b:dc:ad:ae:d3:ec:0b:83:6c:c5:4e:7e:f7:99:a0:be:
f3:32:da:68:a6:04:04:81:19:f5:ab:18:66:5e:d0:d0:26:8d:
39:51:ff:3f:a4:c8:90:ce:45:1c:67:91:09:5f:c6:14:4c:a3:
8d:5b:75:76:18:f9:7f:44:9a:ae:a0:94:45:1b:38:9e:76:0a:
ca:9a:ad:54:b3:1f:7f:3f:c5:18:02:a7:68:dc:01:84:6d:42:
86:9f:6c:de
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK5yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE5MDgxMzM2WhcNMjQwNDI5MDgxMzM2WjAYMRYw
FAYDVQQDEw02NjIyMjdiMy05OTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArGqCfc23Brkb5YohAkyYTZLSjy9EfzJaI9ck9LovDsmmfavVlY1sran3
razz+NnnjcVR85BPYQKdQg+Y8Ubw3MbKhpLP45M/Ktv9NZpfzIqL6DKpCukoDIwF
CPNPoDb1jtQJfugqGhm4XIkw9ntV4pqNnjW7TahzeWQeFsAeW04aaTziT1Ub2tSa
/J4ctiB2YGvSR7CJXPIKo0ivFB5ev27UWAv7Bjk9d41iwSkgXkCHrKIztRVUwzxu
ASS0AQYKRl4dsXxQP/fG6GMvv4Yyu7pgTxcXPLeF70rSoNjCAXoY1068+mXOFrwd
Mpwa/ygMJlQX+ks9USN4elLBjnuUPQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAM6
qqHyUYHm7zUtAEdsRPJRRkhkMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQTMyNThGQ0ZFMjQxMUVFQTlCQkY3NDIwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlUUMA0GCSqGSIb3DQEB
CwUAA4IBAQCM7u8mtYPFOCbpICTEK4Y7i+sUGIQEA1/muYiL2ZiP44iwM8H7xZyN
ouXPfRFZz8+SD/S0HSGLxMHtXohL2/etM+0OlCaZXUQww4t/wTmRb49GqK3Rm7zo
CAfDKI8YAUZKxr5s/MHa6LdOMdC/zYeIx787TDnrXFH5Aypv4wemWf9dk8T9BG54
P6HmS19HqqzUV3CfaM6YK4vfr5FdA42N3ilt1kvcra7T7AuDbMVOfveZoL7zMtpo
pgQEgRn1qxhmXtDQJo05Uf8/pMiQzkUcZ5EJX8YUTKONW3V2GPl/RJquoJRFGzie
dgrKmq1Usx9/P8UYAqdo3AGEbUKGn2ze
-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:25 2024 by rpki-client on console-fra.rpki-client.org