Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0171F92FD3711EE96A8DD3B017001B1.roa
File: D0171F92FD3711EE96A8DD3B017001B1.roa (raw, json)
Hash identifier: xg85sqoR3IkjymoCMxkodkiES5O/O/4hlT2p6NkjUmg=
Subject key identifier: 0D:76:57:5A:7B:15:E8:D2:95:27:70:11:5B:D2:42:CE:43:EF:2E:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE07
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0171F92FD3711EE96A8DD3B017001B1.roa
Signing time: Thu 18 Apr 2024 03:57:45 +0000
ROA not before: Thu 18 Apr 2024 03:57:42 +0000
ROA not after: Sat 27 Apr 2024 03:57:42 +0000
asID: 7018
IP address blocks: 154.81.0.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44551 (0xae07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 03:57:42 2024 GMT
Not After : Apr 27 03:57:42 2024 GMT
Subject: CN=66209a39-d65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:27:f1:19:f0:3a:bc:ea:42:71:93:66:cd:af:
74:51:72:4b:95:f9:cf:27:3b:9e:9d:d5:70:2b:75:
81:44:28:e4:05:a6:15:00:34:b2:45:14:b0:5c:70:
f6:94:a9:26:b4:7c:8b:f1:62:8c:f6:8c:d4:f0:f3:
7e:cb:4d:4d:58:dd:f6:61:23:93:15:30:36:93:6b:
98:4b:45:4f:18:a8:1e:70:94:38:55:9b:11:6c:6a:
4f:54:23:ea:37:a6:8e:85:09:5e:02:31:f6:cf:58:
05:28:8e:9b:9b:d5:50:5a:f1:05:f4:a5:0c:1b:c7:
80:d9:88:8a:a1:14:09:75:2c:ea:80:0f:64:c6:3a:
bc:67:9a:50:90:fe:28:27:33:60:bc:d4:e5:00:57:
d3:cc:6b:0e:d8:7b:96:43:9d:ff:61:87:e5:d4:3c:
10:f8:ca:44:88:e6:94:94:7b:b9:26:9e:fd:fd:f8:
bb:e2:c1:e5:cf:34:10:08:48:ac:28:e8:eb:90:50:
e0:a3:86:e9:14:9f:5d:10:4b:63:7d:6d:84:1f:ca:
80:8d:80:a8:16:c5:4a:6f:15:d4:76:eb:af:a6:ce:
50:40:dc:4d:4b:67:7d:53:63:be:fc:4b:a7:26:a5:
f5:0b:ae:fe:88:dd:e8:09:aa:79:35:4a:03:be:5b:
ab:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:76:57:5A:7B:15:E8:D2:95:27:70:11:5B:D2:42:CE:43:EF:2E:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0171F92FD3711EE96A8DD3B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.0.0/21
Signature Algorithm: sha256WithRSAEncryption
63:92:d4:93:e1:00:d7:77:60:42:c9:bc:eb:b9:f7:42:9d:34:
2b:95:0d:dd:b3:64:5b:92:4f:5c:db:a6:04:7b:fe:ce:e3:9a:
8a:dc:bb:8f:b6:f1:c2:29:b6:c4:f6:8d:d0:f1:e2:da:c0:cd:
5b:1f:9b:1b:2d:12:40:9e:f8:f1:aa:c3:f4:21:f2:4d:94:80:
09:92:d6:08:a3:a4:f5:ef:a6:a6:d7:ce:27:f0:b0:8d:33:0e:
fc:62:da:fc:5e:3d:ff:c9:37:b9:66:1a:a2:44:be:d3:3b:d0:
28:28:47:89:05:45:4a:e3:0f:f0:49:21:82:96:83:82:43:34:
ff:71:8c:07:e9:1a:1b:d1:ee:60:e1:7f:f2:1c:36:da:d1:97:
a5:d9:50:c7:7e:9a:57:09:53:c8:97:5b:66:18:5d:16:c7:14:
6c:e7:28:50:33:ac:47:c0:a0:70:27:ae:4a:c6:e2:ce:a4:78:
09:27:24:75:b0:13:b1:e0:92:07:5c:a1:1b:5c:1b:df:82:1e:
05:49:8b:ca:5a:73:bf:fa:d6:13:da:da:c9:58:97:25:d5:aa:
29:87:25:ab:f4:7c:16:f5:db:55:7e:e3:e1:42:05:4e:c9:f1:
b7:57:73:3e:2b:49:15:d5:fb:5d:33:b4:08:70:ba:49:26:31:
19:09:f7:88
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK4HMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE4MDM1NzQyWhcNMjQwNDI3MDM1NzQyWjAYMRYw
FAYDVQQDEw02NjIwOWEzOS1kNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2yfxGfA6vOpCcZNmza90UXJLlfnPJzuendVwK3WBRCjkBaYVADSyRRSw
XHD2lKkmtHyL8WKM9ozU8PN+y01NWN32YSOTFTA2k2uYS0VPGKgecJQ4VZsRbGpP
VCPqN6aOhQleAjH2z1gFKI6bm9VQWvEF9KUMG8eA2YiKoRQJdSzqgA9kxjq8Z5pQ
kP4oJzNgvNTlAFfTzGsO2HuWQ53/YYfl1DwQ+MpEiOaUlHu5Jp79/fi74sHlzzQQ
CEisKOjrkFDgo4bpFJ9dEEtjfW2EH8qAjYCoFsVKbxXUduuvps5QQNxNS2d9U2O+
/EunJqX1C67+iN3oCap5NUoDvlurdwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFA12
V1p7FejSlSdwEVvSQs5D7y4yMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMDE3MUY5MkZEMzcxMUVFOTZBOEREM0IwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmlEAMA0GCSqGSIb3DQEB
CwUAA4IBAQBjktST4QDXd2BCybzrufdCnTQrlQ3ds2Rbkk9c26YEe/7O45qK3LuP
tvHCKbbE9o3Q8eLawM1bH5sbLRJAnvjxqsP0IfJNlIAJktYIo6T176am184n8LCN
Mw78Ytr8Xj3/yTe5ZhqiRL7TO9AoKEeJBUVK4w/wSSGCloOCQzT/cYwH6Rob0e5g
4X/yHDba0Zel2VDHfppXCVPIl1tmGF0WxxRs5yhQM6xHwKBwJ65KxuLOpHgJJyR1
sBOx4JIHXKEbXBvfgh4FSYvKWnO/+tYT2trJWJcl1aophyWr9HwW9dtVfuPhQgVO
yfG3V3M+K0kV1ftdM7QIcLpJJjEZCfeI
-----END CERTIFICATE-----
Generated at Sat Apr 27 14:14:06 2024 by rpki-client on console-ams.rpki-client.org