Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D49F4F9E8B9411EFA9B1D149762E951A.roa
File: D49F4F9E8B9411EFA9B1D149762E951A.roa (raw, json)
Hash identifier: m/0Nk7r5qWeVK266y20qyyzahWwkIZENcHi4sdpzHQU=
Subject key identifier: D1:31:77:4F:FC:B2:6B:05:67:DF:01:6E:D3:31:E0:5F:90:94:B2:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FE8F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D49F4F9E8B9411EFA9B1D149762E951A.roa
Signing time: Wed 16 Oct 2024 08:01:21 +0000
ROA not before: Wed 16 Oct 2024 08:01:18 +0000
ROA not after: Sun 17 Nov 2024 08:01:18 +0000
asID: 209242
IP address blocks: 154.198.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65167 (0xfe8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 08:01:18 2024 GMT
Not After : Nov 17 08:01:18 2024 GMT
Subject: CN=670f72d1-a87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f3:f5:71:49:d5:d4:17:fb:14:8c:51:37:64:
29:01:72:1b:0d:1a:de:1c:fe:6d:2c:ba:62:5f:01:
4e:6b:6e:a0:9b:2c:6a:ee:5b:83:02:93:a7:b0:91:
31:08:fe:cc:d0:39:a6:12:28:e2:07:cb:62:69:7e:
38:b9:47:fa:ef:49:30:6b:68:dd:1c:43:b7:47:5a:
b4:87:9b:47:9f:40:4e:7b:bf:35:f0:6f:ba:9a:f0:
9f:82:62:b4:5d:05:86:11:6b:65:b8:65:45:7f:63:
f6:15:63:7d:23:38:03:ec:7a:da:7a:97:9d:db:c8:
62:bf:bc:d4:7d:d6:82:9f:73:d6:22:9d:ea:ca:35:
a7:a2:7e:a1:ed:21:58:4f:a8:d6:81:7a:35:d4:b7:
15:bb:2c:4a:16:68:d2:2e:4b:64:ba:84:65:bd:1c:
95:d2:72:e1:69:1c:24:3b:f7:5d:52:bd:9a:38:2c:
a9:b2:06:87:3e:e2:d9:87:e9:4a:8b:92:16:90:62:
42:e6:f4:c0:ba:03:25:26:be:01:ce:91:2b:d8:32:
bd:6c:da:72:bd:ea:2c:3b:86:b8:47:85:32:6f:98:
c4:16:7f:76:df:8c:6a:24:31:13:6d:9f:60:fc:3f:
3d:bd:3f:32:ac:24:88:51:4e:9a:a0:94:93:9a:4e:
91:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:31:77:4F:FC:B2:6B:05:67:DF:01:6E:D3:31:E0:5F:90:94:B2:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D49F4F9E8B9411EFA9B1D149762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.173.0/24
Signature Algorithm: sha256WithRSAEncryption
12:80:09:70:b4:b9:c3:ab:96:6e:71:39:84:82:75:5e:43:08:
9c:53:ad:85:3a:b3:c9:e4:c6:b5:aa:03:29:21:94:6e:6c:4c:
55:5b:70:a7:4c:87:e9:39:71:f4:83:38:4b:9d:66:4d:79:7d:
fd:9a:ce:a5:3a:c1:16:93:b6:29:ed:f5:fa:58:ee:e2:9d:e9:
49:92:6f:36:01:74:ef:83:ff:74:3a:a1:1f:c9:87:df:5a:54:
e0:b4:5c:66:68:74:72:0b:5e:e3:13:50:81:45:b1:89:3b:e1:
11:cf:e7:c7:e2:dd:3f:80:6d:52:dd:6d:01:47:e0:2c:6c:56:
75:f3:e3:e3:b3:b3:29:f7:70:d4:c3:51:3b:90:79:b3:c8:d5:
52:13:2c:64:1a:c1:de:6c:01:cc:5e:f0:1a:f8:78:1b:80:17:
1b:95:fc:4b:0a:d5:47:50:49:e1:06:fa:85:a6:28:cd:1e:e3:
6a:72:a6:ee:59:3e:c0:cd:52:35:89:1c:39:7d:ba:e9:3b:d3:
3a:5f:c7:1a:e4:f9:58:06:02:ae:f5:24:b8:01:b0:19:1f:58:
7e:e1:80:0c:6b:25:fb:18:56:92:5f:88:05:38:7c:43:78:22:
c3:4d:33:73:2c:0d:0d:be:5c:47:bc:90:43:db:3e:ed:b2:f7:
32:47:e9:f7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAP6PMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDE2MDgwMTE4WhcNMjQxMTE3MDgwMTE4WjAYMRYw
FAYDVQQDEw02NzBmNzJkMS1hODdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz/P1cUnV1Bf7FIxRN2QpAXIbDRreHP5tLLpiXwFOa26gmyxq7luDApOn
sJExCP7M0DmmEijiB8tiaX44uUf670kwa2jdHEO3R1q0h5tHn0BOe7818G+6mvCf
gmK0XQWGEWtluGVFf2P2FWN9IzgD7Hraeped28hiv7zUfdaCn3PWIp3qyjWnon6h
7SFYT6jWgXo11LcVuyxKFmjSLktkuoRlvRyV0nLhaRwkO/ddUr2aOCypsgaHPuLZ
h+lKi5IWkGJC5vTAugMlJr4BzpEr2DK9bNpyveosO4a4R4Uyb5jEFn9234xqJDET
bZ9g/D89vT8yrCSIUU6aoJSTmk6RkQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNEx
d0/8smsFZ98BbtMx4F+QlLJoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENDlGNEY5RThCOTQxMUVGQTlCMUQxNDk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsatMA0GCSqGSIb3DQEB
CwUAA4IBAQASgAlwtLnDq5ZucTmEgnVeQwicU62FOrPJ5Ma1qgMpIZRubExVW3Cn
TIfpOXH0gzhLnWZNeX39ms6lOsEWk7Yp7fX6WO7inelJkm82AXTvg/90OqEfyYff
WlTgtFxmaHRyC17jE1CBRbGJO+ERz+fH4t0/gG1S3W0BR+AsbFZ18+Pjs7Mp93DU
w1E7kHmzyNVSEyxkGsHebAHMXvAa+HgbgBcblfxLCtVHUEnhBvqFpijNHuNqcqbu
WT7AzVI1iRw5fbrpO9M6X8ca5PlYBgKu9SS4AbAZH1h+4YAMayX7GFaSX4gFOHxD
eCLDTTNzLA0NvlxHvJBD2z7tsvcyR+n3
-----END CERTIFICATE-----
Generated at Sun Nov 17 10:24:01 2024 by rpki-client on console-ams.rpki-client.org