Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC6D337AFBA211EE9AE48B56017001B1.roa
File: EC6D337AFBA211EE9AE48B56017001B1.roa (raw, json)
Hash identifier: ZUV85ZJhejj/I+UkeN4pCvnZnqIDGatPz441T4FyZQo=
Subject key identifier: 70:30:4C:90:89:3A:8A:1A:39:AF:DB:B7:DC:1A:61:06:36:94:F6:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD55
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC6D337AFBA211EE9AE48B56017001B1.roa
Signing time: Tue 16 Apr 2024 03:39:27 +0000
ROA not before: Tue 16 Apr 2024 03:39:23 +0000
ROA not after: Wed 24 Apr 2024 03:39:23 +0000
asID: 142062
IP address blocks: 154.206.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44373 (0xad55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 03:39:23 2024 GMT
Not After : Apr 24 03:39:23 2024 GMT
Subject: CN=661df2ee-f5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:92:19:ac:8e:5b:07:df:4c:83:7e:46:99:98:
44:73:b3:73:69:d6:4e:cb:9c:9c:7b:7b:b3:b0:11:
54:51:46:79:c5:fb:64:8f:22:25:8b:79:a6:12:c9:
7c:29:4b:b5:89:62:7f:34:78:17:ee:c7:06:38:4c:
4d:ea:bd:3e:64:73:7f:55:19:80:1d:77:46:bd:6c:
6e:68:fc:27:59:b6:d3:f6:1b:7b:f4:b4:2f:91:2b:
6d:61:dc:18:f1:c8:b5:b4:4b:eb:74:2f:3a:a9:65:
3e:d0:19:ef:aa:51:c6:4b:da:79:b5:8f:6c:d1:47:
ee:a3:9e:8a:e7:ef:3f:af:2e:50:43:18:90:36:10:
9e:61:72:dc:7c:41:0e:92:e7:48:af:e1:2e:d3:6a:
b2:ae:9b:f5:8e:44:8c:06:19:a3:eb:e6:18:a1:f5:
41:a8:73:fd:b4:ae:31:ab:7e:72:4b:8b:36:fa:45:
ef:1a:01:c6:ea:a6:55:2c:03:36:d6:cd:97:8d:29:
2b:45:4e:bb:82:c5:4e:9a:85:f8:32:a4:2f:65:f4:
87:2a:e8:91:07:7b:76:eb:60:a4:32:b0:88:5f:13:
64:98:cb:55:de:93:31:01:44:9c:7e:54:e7:62:f5:
1e:d5:f4:67:07:68:70:aa:d0:cc:f3:d7:80:9d:2e:
d2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:30:4C:90:89:3A:8A:1A:39:AF:DB:B7:DC:1A:61:06:36:94:F6:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC6D337AFBA211EE9AE48B56017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.199.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:62:86:2c:7c:0c:37:8c:f3:2b:97:10:36:f7:6b:b1:57:f9:
7c:72:82:c4:38:1b:ca:71:43:c3:2a:df:c0:8a:33:e7:cb:e9:
d9:0d:e3:77:cc:e1:63:1e:b3:2f:e3:80:cb:b9:09:d2:03:d4:
f7:76:c9:86:69:77:d7:fe:04:0b:46:99:fa:b1:fb:04:a6:82:
11:9c:15:da:77:42:e7:f4:1b:73:92:d5:14:36:56:1b:77:46:
fe:a5:c7:fc:c9:68:7a:f0:58:58:3d:8b:92:6e:e2:c8:40:98:
ed:e8:3c:98:9f:f7:19:e3:72:0f:5a:79:ea:7c:2c:de:1f:d0:
72:45:5e:e0:44:2f:78:6d:f0:18:3e:2c:ea:b9:1d:0b:68:a4:
bf:98:34:c2:a3:f0:eb:e5:2f:d0:67:b2:c4:2c:54:db:7a:cb:
fa:41:da:80:6c:9c:68:d7:e3:b5:8c:bc:ca:6a:19:b5:36:cf:
c5:4c:15:fd:ac:52:53:5c:60:85:48:12:d4:d8:1b:57:96:25:
2d:a6:82:19:f1:d2:3b:43:d2:77:eb:a7:d8:9a:fa:a3:c6:58:
d7:ea:f6:bd:c3:c8:50:e8:47:44:8b:7f:d2:66:cc:6a:c5:b3:
8d:7e:26:ba:2e:97:eb:64:78:b2:55:a6:5d:62:33:9e:65:9c:
c3:66:38:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK1VMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE2MDMzOTIzWhcNMjQwNDI0MDMzOTIzWjAYMRYw
FAYDVQQDEw02NjFkZjJlZS1mNWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA75IZrI5bB99Mg35GmZhEc7NzadZOy5yce3uzsBFUUUZ5xftkjyIli3mm
Esl8KUu1iWJ/NHgX7scGOExN6r0+ZHN/VRmAHXdGvWxuaPwnWbbT9ht79LQvkStt
YdwY8ci1tEvrdC86qWU+0BnvqlHGS9p5tY9s0Ufuo56K5+8/ry5QQxiQNhCeYXLc
fEEOkudIr+Eu02qyrpv1jkSMBhmj6+YYofVBqHP9tK4xq35yS4s2+kXvGgHG6qZV
LAM21s2XjSkrRU67gsVOmoX4MqQvZfSHKuiRB3t262CkMrCIXxNkmMtV3pMxAUSc
flTnYvUe1fRnB2hwqtDM89eAnS7SrwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHAw
TJCJOooaOa/bt9waYQY2lPYgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FQzZEMzM3QUZCQTIxMUVFOUFFNDhCNTYwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms7HMA0GCSqGSIb3DQEB
CwUAA4IBAQB8YoYsfAw3jPMrlxA292uxV/l8coLEOBvKcUPDKt/AijPny+nZDeN3
zOFjHrMv44DLuQnSA9T3dsmGaXfX/gQLRpn6sfsEpoIRnBXad0Ln9BtzktUUNlYb
d0b+pcf8yWh68FhYPYuSbuLIQJjt6DyYn/cZ43IPWnnqfCzeH9ByRV7gRC94bfAY
PizquR0LaKS/mDTCo/Dr5S/QZ7LELFTbesv6QdqAbJxo1+O1jLzKahm1Ns/FTBX9
rFJTXGCFSBLU2BtXliUtpoIZ8dI7Q9J366fYmvqjxljX6va9w8hQ6EdEi3/SZsxq
xbONfia6LpfrZHiyVaZdYjOeZZzDZjjq
-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:44 2024 by rpki-client on console-ams.rpki-client.org