Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F96316E4FADA11EEBD1B25F7007001B1.roa
File: F96316E4FADA11EEBD1B25F7007001B1.roa (raw, json)
Hash identifier: Y+TpxaCr3eZfvUx42LKAXzIkE6kjKk1vobKjnanmjh0=
Subject key identifier: A7:D7:84:DD:3B:F2:48:CA:62:71:E1:80:75:37:EF:89:B6:4C:FD:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC15
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F96316E4FADA11EEBD1B25F7007001B1.roa
Signing time: Mon 15 Apr 2024 03:48:09 +0000
ROA not before: Mon 15 Apr 2024 03:48:06 +0000
ROA not after: Wed 24 Apr 2024 03:48:06 +0000
asID: 142062
IP address blocks: 154.206.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44053 (0xac15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 03:48:06 2024 GMT
Not After : Apr 24 03:48:06 2024 GMT
Subject: CN=661ca379-1e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ae:8b:bd:46:fd:21:72:90:79:6b:08:62:5c:
b8:e9:17:81:3f:02:fa:ae:db:bc:8d:b6:43:3f:0d:
9b:8a:2b:4a:37:8f:45:e1:ad:dd:ba:38:ed:82:c0:
8b:71:a1:8d:17:c7:51:38:7f:db:47:83:19:90:c5:
21:57:a4:14:93:0e:bc:15:ac:e1:f4:0a:ac:ee:d1:
4e:75:c7:da:98:e6:69:69:0c:a4:b7:7f:78:7e:8e:
b9:7a:ab:4f:7e:dc:42:e6:66:5b:4a:e2:c2:aa:a6:
bb:ad:3f:a9:34:50:4a:4a:21:c8:60:38:fd:83:28:
8c:95:9d:d7:ca:e0:0c:8d:49:b4:60:a0:23:e3:d3:
94:c0:3e:34:4c:f3:df:84:88:81:d4:93:95:38:1a:
fb:4e:b4:4f:5a:c6:44:84:d7:d4:49:0a:a4:30:08:
da:23:9e:cd:2c:93:8b:68:8a:2e:e5:45:25:37:58:
14:ac:10:25:93:42:0a:68:97:2f:a2:ec:86:95:65:
0f:dc:de:79:04:a4:b6:44:1c:d5:e0:24:70:b5:67:
19:5b:19:d5:88:78:19:e6:a7:4e:68:40:7d:2d:af:
a8:1d:da:92:d5:2e:c9:21:cf:66:6e:cf:3b:10:06:
e9:2c:5d:c4:3f:34:d6:9e:66:5b:c4:ce:ea:eb:55:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D7:84:DD:3B:F2:48:CA:62:71:E1:80:75:37:EF:89:B6:4C:FD:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F96316E4FADA11EEBD1B25F7007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.216.0/24
Signature Algorithm: sha256WithRSAEncryption
af:3d:43:a8:a7:33:69:25:66:00:56:eb:13:30:c2:23:27:58:
c0:cb:ef:46:25:89:60:90:eb:d2:71:e0:91:f6:b7:f5:f1:30:
25:d5:a3:89:c1:b4:29:e2:17:c0:de:dc:e8:a7:77:b0:a1:00:
84:24:e2:4a:9c:6f:3a:e3:f2:6d:af:8e:5d:d3:77:eb:74:42:
0c:8a:fb:94:fd:ba:ec:54:f1:c3:19:7b:61:7f:74:2c:a5:fb:
76:c3:fd:c8:c0:29:da:94:ce:ee:f4:58:f9:29:b8:bb:08:e0:
a5:b6:6c:7c:df:f6:e2:f2:35:aa:1c:de:93:70:23:5e:f5:89:
0d:9b:50:12:b2:ec:da:81:b1:3d:76:d1:15:bd:e5:f6:4c:a0:
8f:6d:c3:9b:09:7b:4a:a2:75:5b:25:98:ec:4e:24:d4:b7:0c:
fd:c6:76:73:39:63:a8:9d:3f:11:20:5c:a8:cc:89:e2:74:70:
42:6d:cc:ee:d8:e3:10:3d:58:d7:01:22:a9:c5:a1:23:29:f4:
be:4e:aa:68:b5:72:b8:1f:2c:f3:01:c4:2f:19:13:bd:bb:5d:
e3:8f:aa:fc:fb:20:e8:37:74:36:a0:b3:d1:11:da:60:4a:a6:
63:67:38:40:e6:58:76:a1:ec:d5:07:81:0f:d1:74:21:c2:c9:
26:b3:84:5d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKwVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE1MDM0ODA2WhcNMjQwNDI0MDM0ODA2WjAYMRYw
FAYDVQQDEw02NjFjYTM3OS0xZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAma6LvUb9IXKQeWsIYly46ReBPwL6rtu8jbZDPw2biitKN49F4a3dujjt
gsCLcaGNF8dROH/bR4MZkMUhV6QUkw68Fazh9Aqs7tFOdcfamOZpaQykt394fo65
eqtPftxC5mZbSuLCqqa7rT+pNFBKSiHIYDj9gyiMlZ3XyuAMjUm0YKAj49OUwD40
TPPfhIiB1JOVOBr7TrRPWsZEhNfUSQqkMAjaI57NLJOLaIou5UUlN1gUrBAlk0IK
aJcvouyGlWUP3N55BKS2RBzV4CRwtWcZWxnViHgZ5qdOaEB9La+oHdqS1S7JIc9m
bs87EAbpLF3EPzTWnmZbxM7q61XBqwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKfX
hN078kjKYnHhgHU374m2TP3sMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GOTYzMTZFNEZBREExMUVFQkQxQjI1RjcwMDcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms7YMA0GCSqGSIb3DQEB
CwUAA4IBAQCvPUOopzNpJWYAVusTMMIjJ1jAy+9GJYlgkOvSceCR9rf18TAl1aOJ
wbQp4hfA3tzop3ewoQCEJOJKnG864/Jtr45d03frdEIMivuU/brsVPHDGXthf3Qs
pft2w/3IwCnalM7u9Fj5Kbi7COCltmx83/bi8jWqHN6TcCNe9YkNm1ASsuzagbE9
dtEVveX2TKCPbcObCXtKonVbJZjsTiTUtwz9xnZzOWOonT8RIFyozInidHBCbczu
2OMQPVjXASKpxaEjKfS+TqpotXK4HyzzAcQvGRO9u13jj6r8+yDoN3Q2oLPREdpg
SqZjZzhA5lh2oezVB4EP0XQhwskms4Rd
-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:39 2024 by rpki-client on console-fra.rpki-client.org