Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF6CBB109F9111EFA4CCE2BE762E951A.roa
File: FF6CBB109F9111EFA4CCE2BE762E951A.roa (raw, json)
Hash identifier: QLY4pFKP2HMnZVdESZA51DkYllEK4xd5MeJ3CPXL5/c=
Subject key identifier: A1:39:19:31:60:1B:60:8F:75:95:48:79:98:6B:BC:EE:A3:29:66:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010B78
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF6CBB109F9111EFA4CCE2BE762E951A.roa
Signing time: Sun 10 Nov 2024 18:31:28 +0000
ROA not before: Sun 10 Nov 2024 18:31:23 +0000
ROA not after: Thu 21 Nov 2024 18:31:23 +0000
asID: 63139
IP address blocks: 154.223.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68472 (0x10b78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 10 18:31:23 2024 GMT
Not After : Nov 21 18:31:23 2024 GMT
Subject: CN=6730fbff-c63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c8:d7:28:7f:ed:6e:33:30:27:fe:8f:53:38:
be:56:0c:bf:29:cc:51:39:7f:8a:ca:a2:c1:3f:00:
c8:64:ab:0a:07:08:89:58:f4:88:1f:4e:1e:b5:da:
a2:85:13:6e:f5:31:31:0b:0c:14:3b:51:22:7e:1f:
00:46:cd:f9:15:dc:d0:bd:cc:c6:61:fe:05:f7:90:
8f:29:82:5d:d9:c0:74:ed:3d:80:59:59:d3:10:f3:
fa:16:b7:87:b8:8d:e9:81:53:85:ae:87:2e:01:df:
01:38:f4:3a:42:b0:9c:bd:8e:d7:e6:aa:e0:22:8a:
ee:b9:10:08:4d:06:b4:18:31:be:36:8e:75:3f:93:
02:ec:d7:f4:9e:20:01:9e:97:50:37:a8:00:f8:12:
3d:bc:69:86:ec:03:ce:47:68:75:d7:89:8a:d1:64:
dc:74:c0:97:87:2d:f2:e3:d3:8b:d4:d9:c3:f1:97:
d6:8e:1d:69:dd:bb:52:e6:8d:be:15:1a:82:75:fc:
85:d0:bf:66:81:9e:19:0e:e4:63:68:fc:af:b9:a0:
af:44:eb:05:17:63:d4:d7:b8:b0:61:c1:85:39:df:
f9:98:f5:6d:ba:03:a7:27:fa:16:66:89:53:95:42:
74:57:17:2d:e2:63:85:7e:d3:12:c8:45:66:45:50:
82:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:39:19:31:60:1B:60:8F:75:95:48:79:98:6B:BC:EE:A3:29:66:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF6CBB109F9111EFA4CCE2BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.31.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:1d:3a:b7:15:40:77:e2:c8:60:2d:fe:99:aa:06:27:47:04:
fc:a7:f1:f6:28:8f:b8:4f:10:eb:5b:97:a8:aa:60:b7:82:63:
8a:d3:81:e7:43:ea:01:72:16:f3:00:00:5f:81:87:02:62:91:
1d:8d:bc:dd:d9:95:4f:b1:ec:52:2a:e0:76:90:01:8c:e9:da:
7f:b7:b7:38:14:7e:52:ca:91:3b:31:5c:3e:00:ee:2b:f9:88:
91:14:27:d0:1b:95:36:f1:4e:53:a0:d9:e7:71:67:68:36:2b:
96:fe:a9:f5:54:12:96:f9:fa:e9:2b:1a:f0:3a:af:e9:3f:90:
0b:23:e0:4a:4f:c4:91:da:cd:ef:6e:72:ff:39:52:19:01:a9:
df:3f:94:5c:4c:35:84:af:6d:dd:1f:54:47:62:52:02:b8:c5:
72:42:18:71:cb:d7:2a:0c:8f:fe:38:b8:9e:bd:3a:3c:2e:79:
a7:c2:77:59:b6:ea:10:a7:5a:2a:95:17:f1:8a:fd:8d:89:16:
55:45:b7:77:9a:0a:48:a4:9f:61:fb:7b:4c:c6:67:3c:aa:db:
86:f7:e1:5c:a3:e7:e0:2b:cb:2b:0d:3f:51:c5:b9:4b:a9:fb:
88:8d:05:0f:e9:18:3d:c0:f2:c6:bd:ee:0f:b0:6f:ab:8a:c1:
18:68:c7:05
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQt4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTEwMTgzMTIzWhcNMjQxMTIxMTgzMTIzWjAYMRYw
FAYDVQQDEw02NzMwZmJmZi1jNjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlsjXKH/tbjMwJ/6PUzi+Vgy/KcxROX+KyqLBPwDIZKsKBwiJWPSIH04e
tdqihRNu9TExCwwUO1Eifh8ARs35FdzQvczGYf4F95CPKYJd2cB07T2AWVnTEPP6
FreHuI3pgVOFrocuAd8BOPQ6QrCcvY7X5qrgIoruuRAITQa0GDG+No51P5MC7Nf0
niABnpdQN6gA+BI9vGmG7APOR2h114mK0WTcdMCXhy3y49OL1NnD8ZfWjh1p3btS
5o2+FRqCdfyF0L9mgZ4ZDuRjaPyvuaCvROsFF2PU17iwYcGFOd/5mPVtugOnJ/oW
ZolTlUJ0Vxct4mOFftMSyEVmRVCCXwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKE5
GTFgG2CPdZVIeZhrvO6jKWYjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRjZDQkIxMDlGOTExMUVGQTRDQ0UyQkU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt8fMA0GCSqGSIb3DQEB
CwUAA4IBAQBfHTq3FUB34shgLf6ZqgYnRwT8p/H2KI+4TxDrW5eoqmC3gmOK04Hn
Q+oBchbzAABfgYcCYpEdjbzd2ZVPsexSKuB2kAGM6dp/t7c4FH5SypE7MVw+AO4r
+YiRFCfQG5U28U5ToNnncWdoNiuW/qn1VBKW+frpKxrwOq/pP5ALI+BKT8SR2s3v
bnL/OVIZAanfP5RcTDWEr23dH1RHYlICuMVyQhhxy9cqDI/+OLievTo8LnmnwndZ
tuoQp1oqlRfxiv2NiRZVRbd3mgpIpJ9h+3tMxmc8qtuG9+Fco+fgK8srDT9RxblL
qfuIjQUP6Rg9wPLGve4PsG+risEYaMcF
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:02:52 2024 by rpki-client on console-ams.rpki-client.org