Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB2921D6E46E11EEA7C44F57775412E6.roa
File: EB2921D6E46E11EEA7C44F57775412E6.roa (raw, json)
Hash identifier: 0dMhvq49CWPP/2njDSJRBmgMQ6j9BHeOpt5beTYY/u4=
Subject key identifier: 4E:06:8C:86:EC:D3:E1:3A:0C:21:60:36:6E:7B:C0:9E:6D:34:B0:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A20B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB2921D6E46E11EEA7C44F57775412E6.roa
Signing time: Sun 17 Mar 2024 14:59:14 +0000
ROA not before: Sun 17 Mar 2024 14:59:10 +0000
ROA not after: Tue 30 Apr 2024 14:59:10 +0000
asID: 63139
IP address blocks: 154.94.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41483 (0xa20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 14:59:10 2024 GMT
Not After : Apr 30 14:59:10 2024 GMT
Subject: CN=65f70542-cf72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:6b:ed:33:8d:1f:e0:43:5c:73:b5:86:6a:
c4:e5:d8:2e:08:57:a2:43:76:32:55:4a:2e:f5:12:
00:93:c1:7f:36:24:33:f4:93:55:a4:ab:8a:e2:c4:
f7:4b:e7:c9:0e:f2:96:66:73:c2:23:83:90:ae:3d:
c3:a1:90:77:f8:48:c6:e1:01:ea:a6:b8:59:3c:fc:
f5:95:7c:02:93:99:27:44:50:a7:99:15:cd:92:0b:
4a:8f:8a:f6:3e:eb:db:dc:4c:a3:a3:35:c7:eb:9c:
99:67:2c:86:45:cf:3f:31:35:93:c0:61:1b:0f:e7:
71:20:48:1a:2b:cb:ff:4b:26:3f:ec:9c:c3:f5:4c:
f4:8e:67:67:f6:b5:1d:4d:8a:07:09:c0:f2:ea:29:
70:38:38:b9:83:c7:f0:29:16:c5:6a:d5:b3:ce:b9:
0d:39:30:15:a5:12:ad:25:20:11:5e:cf:5e:35:b1:
50:a8:3a:0f:e8:88:42:ca:5f:9e:31:71:1d:94:e5:
7d:e0:c2:7c:8d:92:7f:ca:63:69:aa:fa:a4:04:a6:
a4:73:af:c7:36:99:cb:32:44:3a:54:b3:5f:db:7d:
bb:63:6a:05:35:4a:f6:b8:a0:fe:e4:27:84:2e:95:
11:b5:0f:81:87:a1:8e:44:9f:6d:ed:3f:ec:99:91:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:06:8C:86:EC:D3:E1:3A:0C:21:60:36:6E:7B:C0:9E:6D:34:B0:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB2921D6E46E11EEA7C44F57775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.94.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:bf:ae:9c:1c:fb:a7:b0:ac:2f:6a:f6:51:ef:25:18:a8:ad:
72:57:10:c6:32:19:1f:1a:1e:83:20:23:aa:86:46:4c:42:bd:
cb:f0:b4:88:ed:1d:98:c7:1e:95:c6:a1:c5:e8:b5:6a:9c:f4:
43:e2:17:70:98:6f:38:dd:73:c5:d3:1f:aa:21:94:2b:12:a7:
01:6f:63:56:d5:f1:85:39:f2:1d:49:3f:85:61:9c:f1:91:99:
96:f8:93:ad:dd:e4:34:5b:f7:77:fb:d5:64:3b:7a:59:7c:06:
61:fe:d0:21:e4:cf:3a:2a:07:2a:3f:de:41:69:6b:1c:41:4f:
2e:00:db:a4:e8:d7:83:a5:f3:12:98:ef:56:6d:6d:0f:5a:90:
7c:f0:1a:d7:82:5f:64:e5:f3:58:61:a4:39:17:91:05:b6:0b:
4e:76:a7:cd:5e:4c:3c:66:b1:27:64:33:c2:4c:e3:fd:e0:1c:
d7:37:37:3e:fa:28:2d:80:d0:24:4d:15:cd:ae:c6:6f:68:e9:
6d:e4:38:9a:0c:2b:f1:64:b6:e9:d5:61:5d:74:5b:17:e8:75:
3e:7b:38:cb:b9:53:3a:ae:26:69:eb:a6:df:8d:eb:65:9f:0a:
29:1b:3c:97:a5:08:78:b9:85:69:de:b7:90:28:8c:b6:e5:91:
27:80:5a:33
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKILMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzE3MTQ1OTEwWhcNMjQwNDMwMTQ1OTEwWjAYMRYw
FAYDVQQDEw02NWY3MDU0Mi1jZjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw2Rr7TONH+BDXHO1hmrE5dguCFeiQ3YyVUou9RIAk8F/NiQz9JNVpKuK
4sT3S+fJDvKWZnPCI4OQrj3DoZB3+EjG4QHqprhZPPz1lXwCk5knRFCnmRXNkgtK
j4r2Puvb3EyjozXH65yZZyyGRc8/MTWTwGEbD+dxIEgaK8v/SyY/7JzD9Uz0jmdn
9rUdTYoHCcDy6ilwODi5g8fwKRbFatWzzrkNOTAVpRKtJSARXs9eNbFQqDoP6IhC
yl+eMXEdlOV94MJ8jZJ/ymNpqvqkBKakc6/HNpnLMkQ6VLNf2327Y2oFNUr2uKD+
5CeELpURtQ+Bh6GORJ9t7T/smZGOuQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFE4G
jIbs0+E6DCFgNm57wJ5tNLCLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FQjI5MjFENkU0NkUxMUVFQTdDNDRGNTc3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5eMA0GCSqGSIb3DQEB
CwUAA4IBAQA8v66cHPunsKwvavZR7yUYqK1yVxDGMhkfGh6DICOqhkZMQr3L8LSI
7R2Yxx6VxqHF6LVqnPRD4hdwmG843XPF0x+qIZQrEqcBb2NW1fGFOfIdST+FYZzx
kZmW+JOt3eQ0W/d3+9VkO3pZfAZh/tAh5M86KgcqP95BaWscQU8uANuk6NeDpfMS
mO9WbW0PWpB88BrXgl9k5fNYYaQ5F5EFtgtOdqfNXkw8ZrEnZDPCTOP94BzXNzc+
+igtgNAkTRXNrsZvaOlt5DiaDCvxZLbp1WFddFsX6HU+ezjLuVM6riZp66bfjetl
nwopGzyXpQh4uYVp3reQKIy25ZEngFoz
-----END CERTIFICATE-----
Generated at Wed May 1 02:40:37 2024 by rpki-client on console-fra.rpki-client.org