Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3AB99A6FADC11EE9190EE03017001B1.roa
File: D3AB99A6FADC11EE9190EE03017001B1.roa (raw, json)
Hash identifier: 7o5nFaMKUIf9QP4u/lhd99yNx3LX2YmKRWsMpAJ0fZQ=
Subject key identifier: BE:36:02:FB:5B:57:9C:58:50:52:C8:1B:D0:B5:A5:DB:0B:ED:83:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC2D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3AB99A6FADC11EE9190EE03017001B1.roa
Signing time: Mon 15 Apr 2024 04:01:25 +0000
ROA not before: Mon 15 Apr 2024 04:01:21 +0000
ROA not after: Wed 24 Apr 2024 04:01:21 +0000
asID: 142062
IP address blocks: 154.206.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44077 (0xac2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 04:01:21 2024 GMT
Not After : Apr 24 04:01:21 2024 GMT
Subject: CN=661ca695-d995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:f3:3c:95:02:e1:dd:c5:f8:f2:cd:fc:cc:
b9:0f:5b:ea:28:8c:fb:54:4d:0c:1c:99:10:a6:46:
6f:da:7f:96:f6:5f:9c:15:7f:21:7c:a4:d8:98:75:
3e:36:b5:fa:b5:51:f2:87:1e:0c:ce:0f:3c:cc:79:
54:ca:be:a8:a9:15:64:8f:81:ca:79:fb:ab:45:c1:
8e:c3:f6:b0:10:74:b7:6f:32:a2:80:f4:ba:d3:e9:
0d:85:30:67:a3:e2:fb:84:59:1a:e3:72:15:c9:7e:
ff:84:64:14:7b:64:61:fc:50:d6:44:fb:d3:35:f6:
19:50:ac:5b:17:2e:25:06:e0:cf:cd:d4:3e:96:63:
10:cb:2f:68:0a:85:45:82:31:7d:47:cf:5d:f7:2a:
7d:9c:df:47:67:f3:aa:88:55:d1:21:4b:14:b7:77:
4d:bc:4b:be:98:0d:2a:0d:72:a0:9b:30:c5:29:72:
53:da:e3:02:1b:c3:35:f0:42:02:b6:9b:0a:8b:3b:
61:7b:19:e4:1d:ce:75:13:3f:74:bb:eb:10:68:8e:
e2:b2:ed:db:eb:64:11:ec:aa:32:26:d4:72:eb:5d:
cd:ee:a4:71:ab:46:55:05:61:e5:d6:99:16:b4:c3:
0f:94:8d:18:7d:01:3c:67:2b:f9:e1:51:9a:54:2a:
1b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:36:02:FB:5B:57:9C:58:50:52:C8:1B:D0:B5:A5:DB:0B:ED:83:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3AB99A6FADC11EE9190EE03017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.228.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:14:aa:fa:49:6d:6e:8f:fe:bc:b1:47:11:30:89:3d:b8:2b:
69:7b:cf:ef:6b:e3:d5:a2:7d:76:26:d1:b5:93:56:01:1e:37:
00:f2:d6:1d:4b:79:b7:d1:c6:bc:cb:e8:1a:29:2a:2e:1b:68:
b9:36:a4:3f:16:3d:ab:09:81:ea:64:32:4d:53:7e:f1:e6:f2:
9a:3f:22:4f:7b:24:fb:90:8c:6d:45:d8:1e:58:bb:24:06:3e:
27:84:4e:ba:49:8c:f3:1a:d6:2d:e1:f0:ff:66:b7:62:d9:60:
6c:f9:de:0a:af:fe:f3:bd:66:3c:45:62:58:82:af:e7:9b:ad:
80:af:6c:5a:50:0b:16:30:eb:41:51:99:07:ec:51:51:53:f2:
be:be:ce:42:14:4a:ec:c0:8f:35:28:f2:ef:d6:13:a1:bf:0c:
14:75:82:96:23:f0:51:ce:cb:49:58:8a:da:51:90:7c:1a:41:
b4:21:8b:3d:c1:e6:e8:09:08:47:2b:cd:dd:14:61:55:6f:99:
b9:2d:f3:88:d0:66:f7:ef:af:b3:4f:0d:f3:33:2b:d0:95:48:
40:03:41:a1:a6:08:39:20:32:2a:09:49:0b:40:9d:49:a8:25:
73:65:6e:d0:db:0e:2e:78:a3:e0:bc:ea:48:1b:8b:6e:ce:34:
74:17:ea:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKwtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE1MDQwMTIxWhcNMjQwNDI0MDQwMTIxWjAYMRYw
FAYDVQQDEw02NjFjYTY5NS1kOTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxi/zPJUC4d3F+PLN/My5D1vqKIz7VE0MHJkQpkZv2n+W9l+cFX8hfKTY
mHU+NrX6tVHyhx4Mzg88zHlUyr6oqRVkj4HKefurRcGOw/awEHS3bzKigPS60+kN
hTBno+L7hFka43IVyX7/hGQUe2Rh/FDWRPvTNfYZUKxbFy4lBuDPzdQ+lmMQyy9o
CoVFgjF9R89d9yp9nN9HZ/OqiFXRIUsUt3dNvEu+mA0qDXKgmzDFKXJT2uMCG8M1
8EICtpsKizthexnkHc51Ez90u+sQaI7isu3b62QR7KoyJtRy613N7qRxq0ZVBWHl
1pkWtMMPlI0YfQE8Zyv54VGaVCob/QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL42
AvtbV5xYUFLIG9C1pdsL7YOaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EM0FCOTlBNkZBREMxMUVFOTE5MEVFMDMwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms7kMA0GCSqGSIb3DQEB
CwUAA4IBAQCzFKr6SW1uj/68sUcRMIk9uCtpe8/va+PVon12JtG1k1YBHjcA8tYd
S3m30ca8y+gaKSouG2i5NqQ/Fj2rCYHqZDJNU37x5vKaPyJPeyT7kIxtRdgeWLsk
Bj4nhE66SYzzGtYt4fD/Zrdi2WBs+d4Kr/7zvWY8RWJYgq/nm62Ar2xaUAsWMOtB
UZkH7FFRU/K+vs5CFErswI81KPLv1hOhvwwUdYKWI/BRzstJWIraUZB8GkG0IYs9
weboCQhHK83dFGFVb5m5LfOI0Gb376+zTw3zMyvQlUhAA0Ghpgg5IDIqCUkLQJ1J
qCVzZW7Q2w4ueKPgvOpIG4tuzjR0F+oS
-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:39 2024 by rpki-client on console-fra.rpki-client.org