Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E62EE9769F9511EF89543B58762E951A.roa
File: E62EE9769F9511EF89543B58762E951A.roa (raw, json)
Hash identifier: HbzxBhaUs/o2zstMnwHfY2Js576lxCGDc3Z+qrlfd/s=
Subject key identifier: EB:06:F6:1C:50:D2:82:28:F1:D9:DB:EB:E7:30:76:4F:EB:D1:4B:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010BA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E62EE9769F9511EF89543B58762E951A.roa
Signing time: Sun 10 Nov 2024 18:59:23 +0000
ROA not before: Sun 10 Nov 2024 18:59:19 +0000
ROA not after: Thu 21 Nov 2024 18:59:19 +0000
asID: 63139
IP address blocks: 154.223.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68520 (0x10ba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 10 18:59:19 2024 GMT
Not After : Nov 21 18:59:19 2024 GMT
Subject: CN=6731028b-ef39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:cd:b8:e1:a1:e3:47:49:49:ad:7a:01:81:
fc:1d:8f:d0:73:b0:31:aa:89:10:65:c4:fd:ae:e3:
0e:66:e0:0a:45:89:ba:89:eb:5d:04:dd:c5:2d:96:
53:42:12:01:f8:11:1f:d5:71:93:1f:2c:2d:03:59:
b6:98:a8:d8:9a:2a:00:d0:33:f2:d8:69:d5:ec:3e:
f5:eb:1f:92:77:3e:ed:ba:09:12:ac:e1:5b:08:95:
43:e9:86:1b:5b:03:eb:5e:6a:da:4c:5f:a3:ed:b8:
ed:b9:9a:7a:14:06:40:b0:3f:ac:c0:fc:59:cd:29:
75:12:92:4b:fe:6b:ab:60:b5:8e:97:62:8b:c1:62:
3e:30:75:59:9a:f6:23:14:62:80:3f:b4:de:92:35:
37:e5:1f:8c:57:4f:b8:bf:7d:36:8d:89:e9:28:27:
fc:26:ce:28:6a:ec:04:4f:de:b0:e8:75:87:ee:97:
3f:fa:19:d5:a6:b1:1b:93:fc:0a:84:7c:7f:28:ac:
32:da:52:04:d0:1d:e7:4a:15:24:9f:9c:cb:f8:bb:
64:94:ce:58:a0:cb:70:f3:58:ee:c7:60:3b:8b:8e:
b7:82:1b:89:b3:ee:a3:bb:f4:a9:a2:71:39:97:69:
3b:df:8e:99:df:7f:24:94:10:9f:bd:db:28:57:ae:
ca:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:06:F6:1C:50:D2:82:28:F1:D9:DB:EB:E7:30:76:4F:EB:D1:4B:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E62EE9769F9511EF89543B58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.50.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d5:a8:b0:fc:06:bb:ff:d8:6d:eb:d3:2c:0c:b8:68:b5:6d:
51:9c:b9:88:ed:09:3c:b6:e3:28:ac:df:7e:8f:8f:18:9c:c1:
98:db:0f:4c:f6:ac:82:90:8c:1e:6e:ca:f0:f2:18:cd:e4:b9:
f3:3d:cd:bb:88:2c:4a:35:5b:8b:0b:4e:3e:c4:12:1d:eb:e4:
7b:78:5e:ae:5b:26:50:be:5e:e2:6e:a8:ff:6b:a4:e6:4f:75:
db:e8:07:02:da:ea:a6:57:b5:2b:6c:f8:04:42:55:5b:7f:e7:
db:70:dc:6a:a0:66:77:2d:21:c6:6c:a7:43:1f:a6:1a:34:4c:
eb:60:d9:90:6a:63:41:9e:18:fd:96:b5:bc:c2:20:f2:ac:bc:
cb:13:03:02:b7:66:6d:3b:35:06:85:10:0b:64:58:7d:c0:1a:
76:4f:06:42:ce:9f:97:e3:78:eb:1b:27:4f:9a:83:fb:eb:d8:
16:2d:3f:39:ed:6f:4f:3f:90:02:ec:19:0f:25:f9:13:4a:24:
13:eb:54:c1:2a:38:da:6a:d7:8f:4d:62:f0:83:7f:3f:25:98:
62:67:32:0d:cf:65:e3:9b:a7:be:8d:2d:57:45:b8:ae:c8:2c:
c2:81:5c:94:55:60:5b:b9:83:56:ae:6f:47:62:e8:23:be:8a:
4c:eb:0a:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQuoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTEwMTg1OTE5WhcNMjQxMTIxMTg1OTE5WjAYMRYw
FAYDVQQDEw02NzMxMDI4Yi1lZjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvZfNuOGh40dJSa16AYH8HY/Qc7AxqokQZcT9ruMOZuAKRYm6ietdBN3F
LZZTQhIB+BEf1XGTHywtA1m2mKjYmioA0DPy2GnV7D716x+Sdz7tugkSrOFbCJVD
6YYbWwPrXmraTF+j7bjtuZp6FAZAsD+swPxZzSl1EpJL/murYLWOl2KLwWI+MHVZ
mvYjFGKAP7TekjU35R+MV0+4v302jYnpKCf8Js4oauwET96w6HWH7pc/+hnVprEb
k/wKhHx/KKwy2lIE0B3nShUkn5zL+LtklM5YoMtw81jux2A7i463ghuJs+6ju/Sp
onE5l2k7346Z338klBCfvdsoV67K8QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOsG
9hxQ0oIo8dnb6+cwdk/r0Us/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNjJFRTk3NjlGOTUxMUVGODk1NDNCNTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt8yMA0GCSqGSIb3DQEB
CwUAA4IBAQBF1aiw/Aa7/9ht69MsDLhotW1RnLmI7Qk8tuMorN9+j48YnMGY2w9M
9qyCkIwebsrw8hjN5LnzPc27iCxKNVuLC04+xBId6+R7eF6uWyZQvl7ibqj/a6Tm
T3Xb6AcC2uqmV7UrbPgEQlVbf+fbcNxqoGZ3LSHGbKdDH6YaNEzrYNmQamNBnhj9
lrW8wiDyrLzLEwMCt2ZtOzUGhRALZFh9wBp2TwZCzp+X43jrGydPmoP769gWLT85
7W9PP5AC7BkPJfkTSiQT61TBKjjaatePTWLwg38/JZhiZzINz2Xjm6e+jS1XRbiu
yCzCgVyUVWBbuYNWrm9HYugjvopM6wrR
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:02:52 2024 by rpki-client on console-ams.rpki-client.org