Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/394834946A4011EBA19E5E3AF8AEA228.roa
File: 394834946A4011EBA19E5E3AF8AEA228.roa (raw, json)
Hash identifier: p1zbGls4WqNJ9LCrjHThub0Ap6qh+yQcbtnPhs7s2iU=
Subject key identifier: 97:F6:4F:F0:6E:52:D0:B5:A3:B1:72:6D:15:EA:9F:D4:C4:FC:87:F4
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 04AE
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/394834946A4011EBA19E5E3AF8AEA228.roa
Signing time: Mon 08 Feb 2021 19:02:44 +0000
ROA not before: Tue 09 Feb 2021 19:02:38 +0000
ROA not after: Wed 09 Feb 2022 19:02:38 +0000
asID: 3356
IP address blocks: 154.16.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1198 (0x4ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 9 19:02:38 2021 GMT
Not After : Feb 9 19:02:38 2022 GMT
Subject: CN=60218ad4-34c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a2:f0:ae:0c:9e:7d:d0:f6:6b:a9:9f:3d:7d:
e1:5a:31:c9:f3:02:2e:0d:6c:4c:d0:d6:42:9c:cb:
a3:22:f8:fa:a0:c3:b0:41:72:88:fe:05:13:b0:8b:
5e:ce:29:c4:cb:f3:e0:89:4a:eb:ea:d3:64:e8:d8:
b2:d7:13:8c:3d:e9:c5:7c:fa:f3:d0:40:b6:b1:74:
1a:38:a9:25:5b:06:f7:e9:ba:48:fe:c9:33:1b:f9:
b8:76:85:fb:fa:fe:e8:66:52:ba:dd:f8:fd:35:6a:
1f:47:f5:10:45:e9:09:f0:d7:63:3c:b3:d2:c9:ff:
c6:ab:01:24:15:cb:99:13:cb:7d:de:c0:f1:af:5f:
6f:48:ab:94:c2:51:00:80:dd:fb:df:e5:83:ce:dc:
48:b9:86:60:f3:66:ec:69:7b:a3:00:fc:fb:2f:76:
d1:08:dc:85:f6:ac:c4:e0:36:fe:54:7a:2a:84:f3:
4b:8c:30:00:c2:1b:2b:aa:a7:0b:d7:66:b1:d5:7d:
9f:fd:09:38:e6:67:4b:ba:eb:91:95:90:d9:9a:a3:
dd:29:a1:97:ee:e6:86:b4:8b:b5:56:fb:3d:61:d2:
08:de:26:53:c7:50:6f:70:08:b8:ad:fd:b2:8f:10:
47:92:b9:94:c7:6d:25:2e:3c:60:ed:99:0f:51:bd:
a6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F6:4F:F0:6E:52:D0:B5:A3:B1:72:6D:15:EA:9F:D4:C4:FC:87:F4
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/394834946A4011EBA19E5E3AF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.105.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c8:18:41:9e:8e:d1:06:37:e3:70:ee:38:1d:5c:63:fd:e9:
91:a2:2c:ff:1d:1d:fc:4f:98:04:22:d3:d3:fd:8a:82:a8:62:
86:a2:58:39:54:a1:0c:24:e7:a3:7d:dc:5d:99:ed:df:dc:bb:
31:3f:7e:14:c7:b0:73:c0:08:b0:03:30:26:ee:f2:b5:3e:90:
cc:a4:dd:96:5c:c9:e7:06:cd:10:ae:03:32:5f:70:88:c0:a2:
74:b7:2c:00:e0:d0:b7:81:b1:ec:87:23:19:76:a7:f8:04:15:
91:ac:3b:b7:67:f3:7a:a6:4d:e0:3f:d5:89:12:62:c2:c3:f9:
77:ef:ae:ac:f1:2a:b0:6e:b1:a6:99:0a:46:19:b5:e5:43:38:
fe:9b:d6:90:16:fd:ac:68:c8:20:4f:a8:ae:5b:23:e8:11:93:
97:27:84:3d:a0:2b:04:3a:c8:be:fb:6f:8e:e2:3b:75:44:39:
e0:2d:d0:b8:2c:a3:59:f1:75:a1:e6:b8:52:79:80:fb:a2:46:
3c:f7:53:b1:ce:f2:8d:2e:99:fc:51:9e:34:0f:ca:b5:8e:43:
7d:24:c1:e5:7a:50:bb:a6:e8:a4:e0:aa:7a:c7:fe:fc:e2:50:
b3:54:a8:7c:df:92:3a:80:34:87:1d:1b:d9:d9:f9:17:0b:4a:
6e:0a:d0:73
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBK4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMTAyMDkxOTAyMzhaFw0yMjAyMDkxOTAyMzhaMBgxFjAU
BgNVBAMTDTYwMjE4YWQ0LTM0YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDqovCuDJ590PZrqZ89feFaMcnzAi4NbEzQ1kKcy6Mi+Pqgw7BBcoj+BROw
i17OKcTL8+CJSuvq02To2LLXE4w96cV8+vPQQLaxdBo4qSVbBvfpukj+yTMb+bh2
hfv6/uhmUrrd+P01ah9H9RBF6Qnw12M8s9LJ/8arASQVy5kTy33ewPGvX29Iq5TC
UQCA3fvf5YPO3Ei5hmDzZuxpe6MA/PsvdtEI3IX2rMTgNv5UeiqE80uMMADCGyuq
pwvXZrHVfZ/9CTjmZ0u665GVkNmao90poZfu5oa0i7VW+z1h0gjeJlPHUG9wCLit
/bKPEEeSuZTHbSUuPGDtmQ9RvaZFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUl/ZP
8G5S0LWjsXJtFeqf1MT8h/QwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzM5NDgzNDk0NkE0MDExRUJBMTlFNUUzQUY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEGkwDQYJKoZIhvcNAQEL
BQADggEBAFjIGEGejtEGN+Nw7jgdXGP96ZGiLP8dHfxPmAQi09P9ioKoYoaiWDlU
oQwk56N93F2Z7d/cuzE/fhTHsHPACLADMCbu8rU+kMyk3ZZcyecGzRCuAzJfcIjA
onS3LADg0LeBseyHIxl2p/gEFZGsO7dn83qmTeA/1YkSYsLD+XfvrqzxKrBusaaZ
CkYZteVDOP6b1pAW/axoyCBPqK5bI+gRk5cnhD2gKwQ6yL77b47iO3VEOeAt0Lgs
o1nxdaHmuFJ5gPuiRjz3U7HO8o0umfxRnjQPyrWOQ30kweV6ULum6KTgqnrH/vzi
ULNUqHzfkjqANIcdG9nZ+RcLSm4K0HM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org