Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E046D8680EAC11EFB0324101017001B1.roa
File: E046D8680EAC11EFB0324101017001B1.roa (raw, json)
Hash identifier: zw/HvyxpSWPvrDMfEd2Ogjhgrl6hY+lZ3jZFbyBtUaI=
Subject key identifier: CF:CA:32:3B:DA:12:F6:0A:9D:AE:E9:E2:7D:4F:F7:19:AB:F0:3E:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B690
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E046D8680EAC11EFB0324101017001B1.roa
Signing time: Fri 10 May 2024 09:08:33 +0000
ROA not before: Fri 10 May 2024 09:08:30 +0000
ROA not after: Mon 20 May 2024 09:08:30 +0000
asID: 142062
IP address blocks: 154.206.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46736 (0xb690)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 09:08:30 2024 GMT
Not After : May 20 09:08:30 2024 GMT
Subject: CN=663de411-899f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b8:8e:4a:1b:45:80:a3:e9:42:7c:72:e7:83:
26:0b:e6:2f:d2:be:b1:cf:43:fc:59:37:58:02:ff:
ff:75:91:41:3f:99:31:8c:d3:c5:7a:65:52:ee:18:
73:e0:0f:b7:34:42:da:b7:c1:8e:4a:87:d4:78:24:
c9:ee:4a:5c:29:5f:38:2e:55:51:d6:c9:17:19:dc:
b9:a4:b5:e6:25:81:29:ff:9f:32:56:aa:9b:73:32:
ef:e8:0c:15:8c:18:21:9e:84:a6:20:a2:1b:4e:87:
22:c9:a0:dd:94:a4:62:48:c5:8a:4a:7c:08:7e:21:
e5:ef:1a:67:dd:0f:ff:6b:93:ad:e3:c7:6c:38:58:
4c:8b:fa:33:39:ee:cd:b9:ec:35:17:b0:69:84:79:
3e:8f:48:5d:3c:33:e8:ac:7f:7e:01:3c:92:d8:bb:
bf:65:14:d4:11:2b:0c:4e:99:a3:43:75:3f:11:c3:
df:a0:1f:1f:7c:7b:3c:40:9b:55:2e:11:ce:86:9e:
96:16:62:66:ca:df:95:7d:03:61:0e:be:a0:c7:00:
78:42:82:c6:12:d2:df:63:a7:3e:fd:95:56:e1:a8:
4e:a3:e8:5f:11:3a:34:49:8e:98:4d:b0:9c:cb:d3:
79:5c:c5:ad:6f:c4:84:96:e1:50:1c:4c:6a:27:94:
73:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CA:32:3B:DA:12:F6:0A:9D:AE:E9:E2:7D:4F:F7:19:AB:F0:3E:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E046D8680EAC11EFB0324101017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.215.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:28:85:46:1a:8c:69:c5:3d:5e:4d:48:f0:0e:fb:41:81:3c:
8f:00:87:d4:eb:a4:8b:3b:55:d4:0c:4a:31:21:6d:99:88:52:
d0:9a:92:45:75:83:0b:9e:38:6f:fe:cd:43:4e:d6:3d:12:cb:
3c:a2:c6:3a:3f:6b:ed:bb:59:d7:fc:d1:f6:9e:31:2f:d1:25:
01:c4:5a:10:06:63:d6:b9:8b:e4:24:6c:2c:40:18:ce:4b:2d:
56:ef:ee:87:4c:39:c2:c8:a1:c3:f5:85:a4:4a:a7:91:f2:53:
cc:6e:98:48:61:c0:92:73:37:83:96:18:0c:85:fd:14:8b:8e:
d8:1d:bf:d2:56:dd:2b:38:4e:8e:e8:37:21:24:e5:e5:4f:c0:
2c:50:a8:07:b7:21:26:f0:f2:7d:52:f7:21:ca:2a:fd:93:b8:
0d:9a:f1:d8:63:ee:36:a6:02:45:1e:81:31:32:1d:54:31:d1:
a0:63:9b:a1:81:fd:75:50:2b:66:9a:82:cd:46:34:b6:b1:f0:
bd:55:e0:90:14:70:2d:e7:60:aa:6d:2f:67:47:17:fa:03:dd:
65:76:b5:59:e9:00:b5:7a:bf:48:b2:dc:8f:41:e3:02:06:35:
be:37:12:1f:42:43:3b:d9:3f:17:ec:09:ee:6d:8a:50:0a:9c:
ba:23:45:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALaQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTEwMDkwODMwWhcNMjQwNTIwMDkwODMwWjAYMRYw
FAYDVQQDEw02NjNkZTQxMS04OTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp7iOShtFgKPpQnxy54MmC+Yv0r6xz0P8WTdYAv//dZFBP5kxjNPFemVS
7hhz4A+3NELat8GOSofUeCTJ7kpcKV84LlVR1skXGdy5pLXmJYEp/58yVqqbczLv
6AwVjBghnoSmIKIbTociyaDdlKRiSMWKSnwIfiHl7xpn3Q//a5Ot48dsOFhMi/oz
Oe7Nuew1F7BphHk+j0hdPDPorH9+ATyS2Lu/ZRTUESsMTpmjQ3U/EcPfoB8ffHs8
QJtVLhHOhp6WFmJmyt+VfQNhDr6gxwB4QoLGEtLfY6c+/ZVW4ahOo+hfETo0SY6Y
TbCcy9N5XMWtb8SEluFQHExqJ5RzUwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM/K
MjvaEvYKna7p4n1P9xmr8D6pMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMDQ2RDg2ODBFQUMxMUVGQjAzMjQxMDEwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms7XMA0GCSqGSIb3DQEB
CwUAA4IBAQBMKIVGGoxpxT1eTUjwDvtBgTyPAIfU66SLO1XUDEoxIW2ZiFLQmpJF
dYMLnjhv/s1DTtY9Ess8osY6P2vtu1nX/NH2njEv0SUBxFoQBmPWuYvkJGwsQBjO
Sy1W7+6HTDnCyKHD9YWkSqeR8lPMbphIYcCSczeDlhgMhf0Ui47YHb/SVt0rOE6O
6DchJOXlT8AsUKgHtyEm8PJ9Uvchyir9k7gNmvHYY+42pgJFHoExMh1UMdGgY5uh
gf11UCtmmoLNRjS2sfC9VeCQFHAt52CqbS9nRxf6A91ldrVZ6QC1er9IstyPQeMC
BjW+NxIfQkM72T8X7AnubYpQCpy6I0VM
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:49:14 2024 by rpki-client on console-fra.rpki-client.org