Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/818A694A529611ECBC1C5E57D8A014CE.roa
File: 818A694A529611ECBC1C5E57D8A014CE.roa (raw, json)
Hash identifier: B7Bhj8ub7voQiWGI0C8perdWSbxf5oWOxkqTiZgWmHA=
Subject key identifier: 87:F0:98:1A:F7:A8:5B:13:E7:23:C4:9F:93:AF:EC:6D:7B:AB:8A:05
Certificate issuer: /CN=F367F26DAF/serialNumber=AB19964619FF85343CC091180673A8AC528610F4
Certificate serial: 03E0
Authority key identifier: AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/818A694A529611ECBC1C5E57D8A014CE.roa
Signing time: Wed 01 Dec 2021 11:04:51 +0000
ROA not before: Wed 01 Dec 2021 11:04:48 +0000
ROA not after: Fri 01 Dec 2023 11:04:48 +0000
asID: 328366
IP address blocks: 154.68.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 992 (0x3e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367F26DAF
Validity
Not Before: Dec 1 11:04:48 2021 GMT
Not After : Dec 1 11:04:48 2023 GMT
Subject: CN=61a756d3-d529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2a:58:0f:7f:c2:7a:af:f6:92:2b:45:e0:bf:
8d:e8:5f:8a:16:e2:6a:a0:41:88:65:32:a5:96:93:
1d:f9:ad:35:c6:6b:dd:34:8a:d1:db:51:74:fc:15:
bf:78:0c:00:5c:fb:2c:90:d4:7e:8a:c8:67:c9:13:
92:f2:5d:38:c0:c1:f3:94:0a:fc:53:1d:fa:76:78:
0b:25:ed:f3:27:72:09:27:f9:91:15:4f:15:e7:03:
af:7d:22:fa:58:48:cf:0e:5f:5b:00:a3:85:97:9e:
30:2a:75:99:a3:22:3c:c6:5e:c7:3d:a2:15:a9:b6:
85:2d:d6:88:58:2a:80:7d:5c:9a:24:4c:94:3d:13:
b4:82:be:a5:fa:d7:e2:5a:d1:97:b1:76:2b:91:83:
d0:17:8a:93:fc:ea:14:8a:66:b1:57:b2:5f:8a:79:
11:df:69:7e:c5:24:bb:76:6f:04:ba:f2:91:df:48:
7c:f2:f4:8d:33:4b:20:1c:5a:72:c7:5f:51:34:f5:
00:04:a6:0f:d3:01:83:b4:3d:aa:c6:db:13:eb:1f:
81:f0:d0:ef:3c:f7:56:eb:41:9a:1e:56:d9:eb:00:
38:61:af:f1:bf:63:fe:23:47:97:d4:3e:f6:00:5a:
6a:05:d6:fc:df:2f:c7:14:36:79:b9:24:4a:50:21:
fa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F0:98:1A:F7:A8:5B:13:E7:23:C4:9F:93:AF:EC:6D:7B:AB:8A:05
X509v3 Authority Key Identifier:
keyid:AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/818A694A529611ECBC1C5E57D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.68.176.0/20
Signature Algorithm: sha256WithRSAEncryption
79:76:cf:23:0a:c1:7c:96:9a:35:76:6e:9a:00:ee:31:b7:aa:
93:14:db:26:35:fe:7f:d7:84:36:51:cb:6c:61:9d:35:4f:2a:
61:4c:84:39:8d:1c:f5:14:b2:b3:d3:26:d3:da:84:90:13:e2:
59:ea:f5:30:57:e9:73:46:69:3e:45:ad:96:66:4f:d2:f7:4c:
46:ea:92:99:31:28:92:88:89:9f:d4:f0:c7:6d:ac:1a:c0:c1:
ea:06:4b:ef:f8:f6:a3:dd:db:f5:da:cf:0e:2d:91:53:02:ed:
fe:12:81:75:53:03:c5:7c:63:70:54:80:52:07:1d:c2:59:20:
81:40:9f:6a:33:26:bb:59:6f:a5:b6:04:55:a3:7e:81:eb:14:
29:6c:71:53:a7:75:9a:39:42:75:31:88:a9:f3:0a:ed:e9:8b:
01:8b:41:81:88:26:cc:48:d6:d2:c4:38:5b:57:1a:b9:c8:7b:
4e:34:43:5e:9b:f7:74:3f:06:75:aa:1d:5d:6d:ce:18:a8:2b:
7a:6d:0c:8e:5f:f3:d3:cb:4c:60:b3:bf:dd:ac:e8:34:0d:25:
f6:00:17:dc:03:39:b1:31:32:97:81:0f:24:f4:65:7b:69:7f:
08:2c:08:46:7e:06:f3:36:8b:5b:64:4c:18:aa:31:95:bc:38:
ff:01:c1:92
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA+AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
N0YyNkRBRjExMC8GA1UEBRMoQUIxOTk2NDYxOUZGODUzNDNDQzA5MTE4MDY3M0E4
QUM1Mjg2MTBGNDAeFw0yMTEyMDExMTA0NDhaFw0yMzEyMDExMTA0NDhaMBgxFjAU
BgNVBAMMDTYxYTc1NmQzLWQ1MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJKlgPf8J6r/aSK0Xgv43oX4oW4mqgQYhlMqWWkx35rTXGa900itHbUXT8
Fb94DABc+yyQ1H6KyGfJE5LyXTjAwfOUCvxTHfp2eAsl7fMncgkn+ZEVTxXnA699
IvpYSM8OX1sAo4WXnjAqdZmjIjzGXsc9ohWptoUt1ohYKoB9XJokTJQ9E7SCvqX6
1+Ja0ZexdiuRg9AXipP86hSKZrFXsl+KeRHfaX7FJLt2bwS68pHfSHzy9I0zSyAc
WnLHX1E09QAEpg/TAYO0ParG2xPrH4Hw0O8891brQZoeVtnrADhhr/G/Y/4jR5fU
PvYAWmoF1vzfL8cUNnm5JEpQIfpdAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUh/CY
GveoWxPnI8Sfk6/sbXurigUwHwYDVR0jBBgwFoAUqxmWRhn/hTQ8wJEYBnOorFKG
EPQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdGMjZELzJENTg1NEU4NzBCOTExRTlCNzEyM0QzRkY4QUVBMjI4L3F4bVdS
aG5faFRROHdKRVlCbk9vckZLR0VQUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3F4bVdSaG5faFRROHdKRVlCbk9vckZLR0VQUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdGMjZELzJENTg1NEU4NzBCOTExRTlCNzEyM0QzRkY4
QUVBMjI4LzgxOEE2OTRBNTI5NjExRUNCQzFDNUU1N0Q4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASaRLAwDQYJKoZIhvcNAQEL
BQADggEBAHl2zyMKwXyWmjV2bpoA7jG3qpMU2yY1/n/XhDZRy2xhnTVPKmFMhDmN
HPUUsrPTJtPahJAT4lnq9TBX6XNGaT5FrZZmT9L3TEbqkpkxKJKIiZ/U8MdtrBrA
weoGS+/49qPd2/Xazw4tkVMC7f4SgXVTA8V8Y3BUgFIHHcJZIIFAn2ozJrtZb6W2
BFWjfoHrFClscVOndZo5QnUxiKnzCu3piwGLQYGIJsxI1tLEOFtXGrnIe040Q16b
93Q/BnWqHV1tzhioK3ptDI5f89PLTGCzv92s6DQNJfYAF9wDObExMpeBDyT0ZXtp
fwgsCEZ+BvM2i1tkTBiqMZW8OP8BwZI=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:55 2025 by rpki-client