Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F737C7D0E46D11EE9B604652775412E6.roa
File: F737C7D0E46D11EE9B604652775412E6.roa (raw, json)
Hash identifier: FPguEbcPuXD22bugIwTQKFK/LEpfIv12gLxal893lbs=
Subject key identifier: 3F:B0:64:BE:6E:AF:B5:A6:8E:DA:0B:DA:0B:2D:3B:7E:38:7B:59:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A201
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F737C7D0E46D11EE9B604652775412E6.roa
Signing time: Sun 17 Mar 2024 14:52:25 +0000
ROA not before: Sun 17 Mar 2024 14:52:21 +0000
ROA not after: Tue 30 Apr 2024 14:52:21 +0000
asID: 63139
IP address blocks: 154.93.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41473 (0xa201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 14:52:21 2024 GMT
Not After : Apr 30 14:52:21 2024 GMT
Subject: CN=65f703a8-c7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:9b:ed:bf:57:c4:1d:b3:6a:25:1e:e9:a5:
4c:0e:42:9a:b2:d3:f1:7e:06:67:cf:16:b6:1b:50:
ed:b8:83:ab:ce:39:1a:0e:75:d1:8c:84:1c:86:41:
18:3c:0f:4d:be:9e:70:71:d7:62:5e:17:ae:b8:ed:
e1:c9:c2:7d:53:a6:a3:6e:df:f0:ac:20:a3:ef:60:
9d:76:50:ef:ac:85:f1:f8:71:05:4a:6f:4c:17:de:
5b:35:e8:63:00:00:4a:5c:a0:13:67:99:91:7c:85:
36:d2:bd:37:57:3c:7a:b4:69:03:49:db:20:69:cf:
b8:4d:43:83:56:6c:da:2c:c8:3f:fe:47:77:b9:a4:
18:5d:33:a3:03:af:31:8c:03:37:6c:02:1e:cd:30:
cb:12:26:ed:d7:1e:bc:e1:84:1f:87:c0:8f:45:12:
96:af:07:8c:e8:0c:8e:03:d1:bf:0d:b1:05:0e:51:
c8:ff:3d:b0:50:23:68:f7:f6:3d:d9:9d:b2:42:15:
31:05:aa:f4:f3:36:c6:dd:c7:01:e2:66:20:37:7c:
64:da:d0:2d:ed:ac:b3:02:0f:3e:2e:43:98:70:f2:
ef:7b:a7:ba:75:78:d0:6f:c4:5b:d5:73:3b:51:60:
cc:ce:05:b1:a5:62:72:6b:67:51:98:d3:48:09:70:
fa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B0:64:BE:6E:AF:B5:A6:8E:DA:0B:DA:0B:2D:3B:7E:38:7B:59:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F737C7D0E46D11EE9B604652775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.65.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:bd:dd:24:a6:0d:dd:b8:79:84:39:24:91:fa:39:b9:3b:f2:
aa:99:00:59:0e:8e:01:19:d4:7f:dd:24:bf:82:07:9b:7d:b7:
f6:83:e4:b2:63:7a:71:e6:2c:61:fa:6a:eb:7d:85:04:c8:53:
bc:91:89:cd:4f:63:c7:b4:1b:c5:a3:d4:04:50:70:c6:a8:f1:
99:2c:6f:6e:f1:53:eb:09:83:66:b0:be:eb:bf:f5:9d:2e:54:
82:23:e6:1c:ef:28:d8:29:ab:50:66:8b:c4:7f:83:b2:db:d5:
36:1c:ce:2a:7e:81:92:da:a5:ef:ac:f5:19:27:30:86:a0:79:
42:e4:8f:ae:25:19:29:04:16:5e:d0:bd:32:f0:d3:8a:38:c1:
c2:f5:de:87:d0:53:c3:5d:81:2d:c0:f4:92:ac:54:0b:bd:43:
30:e9:b1:1e:bf:55:3f:79:29:74:d8:a8:86:52:6d:ca:72:47:
c5:64:df:73:b3:e0:fa:61:5a:32:fa:bf:4d:6a:39:77:87:6a:
ad:b7:cb:ef:2b:5e:59:92:ff:5b:b5:18:c1:1f:3f:14:ba:5a:
b5:a7:cf:a2:9e:34:63:d2:15:d1:77:54:25:c0:02:5c:c8:47:
03:f4:8b:7a:e6:41:a7:66:79:da:da:bc:4e:87:fa:f0:d8:12:
54:83:96:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKIBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzE3MTQ1MjIxWhcNMjQwNDMwMTQ1MjIxWjAYMRYw
FAYDVQQDEw02NWY3MDNhOC1jN2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApSGb7b9XxB2zaiUe6aVMDkKastPxfgZnzxa2G1DtuIOrzjkaDnXRjIQc
hkEYPA9Nvp5wcddiXheuuO3hycJ9U6ajbt/wrCCj72CddlDvrIXx+HEFSm9MF95b
NehjAABKXKATZ5mRfIU20r03Vzx6tGkDSdsgac+4TUODVmzaLMg//kd3uaQYXTOj
A68xjAM3bAIezTDLEibt1x684YQfh8CPRRKWrweM6AyOA9G/DbEFDlHI/z2wUCNo
9/Y92Z2yQhUxBar08zbG3ccB4mYgN3xk2tAt7ayzAg8+LkOYcPLve6e6dXjQb8Rb
1XM7UWDMzgWxpWJya2dRmNNICXD63wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFD+w
ZL5ur7WmjtoL2gstO344e1lTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNzM3QzdEMEU0NkQxMUVFOUI2MDQ2NTI3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml1BMA0GCSqGSIb3DQEB
CwUAA4IBAQDBvd0kpg3duHmEOSSR+jm5O/KqmQBZDo4BGdR/3SS/ggebfbf2g+Sy
Y3px5ixh+mrrfYUEyFO8kYnNT2PHtBvFo9QEUHDGqPGZLG9u8VPrCYNmsL7rv/Wd
LlSCI+Yc7yjYKatQZovEf4Oy29U2HM4qfoGS2qXvrPUZJzCGoHlC5I+uJRkpBBZe
0L0y8NOKOMHC9d6H0FPDXYEtwPSSrFQLvUMw6bEev1U/eSl02KiGUm3KckfFZN9z
s+D6YVoy+r9Najl3h2qtt8vvK15Zkv9btRjBHz8Uulq1p8+injRj0hXRd1QlwAJc
yEcD9It65kGnZnna2rxOh/rw2BJUg5Yb
-----END CERTIFICATE-----
Generated at Wed May 1 02:40:37 2024 by rpki-client on console-fra.rpki-client.org