Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF3E7B6C855311EFAB70A845762E951A.roa
File: BF3E7B6C855311EFAB70A845762E951A.roa (raw, json)
Hash identifier: vF+PbrbECqwObM60JEr0CJuXi8En9SZqgk9WeG9dvpA=
Subject key identifier: 09:40:BA:D6:DB:85:F4:19:68:13:8C:2B:B2:88:DF:C0:DD:7F:2E:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FAC1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF3E7B6C855311EFAB70A845762E951A.roa
Signing time: Tue 08 Oct 2024 09:00:21 +0000
ROA not before: Tue 08 Oct 2024 09:00:17 +0000
ROA not after: Fri 08 Nov 2024 09:00:17 +0000
asID: 25198
IP address blocks: 154.197.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64193 (0xfac1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 8 09:00:17 2024 GMT
Not After : Nov 8 09:00:17 2024 GMT
Subject: CN=6704f4a5-5ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:a6:9e:33:6b:3a:96:72:ed:e5:d8:50:92:
c5:ec:99:8e:12:9f:55:db:5f:b9:a6:41:3b:19:c6:
74:96:2b:cd:22:32:56:f4:57:09:2d:34:b5:f8:b0:
71:ba:d6:45:f8:e7:a8:ba:b9:9f:e4:e8:ae:cb:5c:
25:ef:45:d5:56:49:09:ce:e8:52:08:f1:33:a1:76:
71:f7:4a:d4:cf:39:6e:77:d0:18:7a:8b:ef:9a:a5:
d5:73:36:f1:37:61:5f:e4:4e:2e:37:91:ff:a1:a8:
0b:69:f7:a1:33:34:1d:df:03:86:53:d8:1e:64:e4:
e8:cc:96:05:69:d9:dd:f3:62:3a:2f:5d:da:43:79:
2a:17:a2:c1:36:a1:58:32:27:ab:29:9f:bd:34:28:
2a:0d:75:bf:75:86:29:de:6e:12:c9:a2:a3:fe:a2:
67:54:88:7d:fc:df:19:01:2e:b6:d6:ec:0b:d9:03:
ad:8b:f4:cd:ed:ba:5f:5e:c3:f5:82:cb:3e:81:72:
c0:d4:68:3d:4d:16:9e:90:1f:6e:1e:98:db:77:2a:
29:75:5e:11:ab:21:d0:f0:88:bc:a5:a2:9c:67:89:
56:60:5a:a7:44:d2:c0:00:bf:d4:0e:88:c3:c5:5f:
97:22:4d:7b:ff:3f:8b:a4:9a:3a:d2:3a:07:f5:23:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:40:BA:D6:DB:85:F4:19:68:13:8C:2B:B2:88:DF:C0:DD:7F:2E:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF3E7B6C855311EFAB70A845762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.104.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:c2:24:9b:09:7f:30:ab:1d:c4:c4:b7:51:44:58:7d:27:9c:
6f:5d:3a:70:ce:33:bb:50:ea:47:77:07:11:84:7d:5a:31:43:
ba:36:bf:40:5a:ed:04:fe:de:da:0d:9b:52:18:8e:57:8e:31:
c4:a0:b7:9c:cf:81:3f:3b:ab:c8:c5:79:e2:ae:a7:51:db:d5:
24:39:a1:c4:29:81:43:22:e6:9f:ef:ef:13:1d:07:93:7f:73:
00:8b:40:ef:1f:45:9c:8b:19:44:3b:0f:d9:80:bd:e6:4b:0b:
35:4f:ca:e8:9d:97:2c:7b:81:f5:b9:b3:fb:af:5a:16:9d:8c:
5d:bb:ab:7d:d3:92:71:b7:7f:8a:d1:83:0f:92:44:bf:7c:ac:
1e:4b:d0:3a:f6:f0:da:a3:80:ca:6d:24:48:0a:b9:52:ed:d8:
5f:77:d3:16:ff:eb:ce:1e:46:44:35:ca:d2:84:70:d6:07:f2:
68:a8:d5:58:33:78:16:39:84:b1:c0:14:27:d7:30:d3:6a:98:
98:af:30:1e:18:f5:46:fc:85:26:bf:7e:5d:fe:4f:1a:c6:de:
2f:23:0d:8f:c9:22:96:9b:ad:ed:28:bc:81:cc:fc:85:79:5d:
65:f1:c7:70:6e:00:51:e6:87:a4:4f:4c:d3:62:76:a7:b8:57:
42:5b:a4:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAPrBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDA4MDkwMDE3WhcNMjQxMTA4MDkwMDE3WjAYMRYw
FAYDVQQDEw02NzA0ZjRhNS01ZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAulumnjNrOpZy7eXYUJLF7JmOEp9V21+5pkE7GcZ0livNIjJW9FcJLTS1
+LBxutZF+Oeourmf5Oiuy1wl70XVVkkJzuhSCPEzoXZx90rUzzlud9AYeovvmqXV
czbxN2Ff5E4uN5H/oagLafehMzQd3wOGU9geZOTozJYFadnd82I6L13aQ3kqF6LB
NqFYMierKZ+9NCgqDXW/dYYp3m4SyaKj/qJnVIh9/N8ZAS621uwL2QOti/TN7bpf
XsP1gss+gXLA1Gg9TRaekB9uHpjbdyopdV4RqyHQ8Ii8paKcZ4lWYFqnRNLAAL/U
DojDxV+XIk17/z+LpJo60joH9SPSQwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAlA
utbbhfQZaBOMK7KI38Ddfy6jMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRjNFN0I2Qzg1NTMxMUVGQUI3MEE4NDU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVoMA0GCSqGSIb3DQEB
CwUAA4IBAQAewiSbCX8wqx3ExLdRRFh9J5xvXTpwzjO7UOpHdwcRhH1aMUO6Nr9A
Wu0E/t7aDZtSGI5XjjHEoLecz4E/O6vIxXnirqdR29UkOaHEKYFDIuaf7+8THQeT
f3MAi0DvH0WcixlEOw/ZgL3mSws1T8ronZcse4H1ubP7r1oWnYxdu6t905Jxt3+K
0YMPkkS/fKweS9A69vDao4DKbSRICrlS7dhfd9MW/+vOHkZENcrShHDWB/JoqNVY
M3gWOYSxwBQn1zDTapiYrzAeGPVG/IUmv35d/k8axt4vIw2PySKWm63tKLyBzPyF
eV1l8cdwbgBR5oekT0zTYnanuFdCW6TI
-----END CERTIFICATE-----
Generated at Fri Nov 8 12:59:00 2024 by rpki-client on console-fra.rpki-client.org