Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0597C8C4493F11ECB0A68F62D8A014CE.roa
File: 0597C8C4493F11ECB0A68F62D8A014CE.roa (raw, json)
Hash identifier: 10dskyv13ZahKKsKEJWZccKsy26E130b67is2L1bPHk=
Subject key identifier: FF:C4:17:FD:FF:22:DC:41:27:E3:92:B5:4A:D5:19:C6:DB:CC:16:25
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0708
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0597C8C4493F11ECB0A68F62D8A014CE.roa
Signing time: Fri 19 Nov 2021 13:45:57 +0000
ROA not before: Fri 19 Nov 2021 13:45:52 +0000
ROA not after: Sat 19 Nov 2022 13:45:52 +0000
asID: 53340
IP address blocks: 154.16.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1800 (0x708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 19 13:45:52 2021 GMT
Not After : Nov 19 13:45:52 2022 GMT
Subject: CN=6197aa95-fa1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:a9:ac:74:a3:c3:ae:ba:41:9a:e2:30:97:
cf:43:ee:d1:31:e4:55:bb:5e:2e:31:ad:57:09:ea:
c4:59:b4:fc:97:05:d6:24:44:76:79:dc:f5:b5:98:
20:f8:36:42:d9:f1:63:43:d6:8d:71:a6:a5:56:93:
d0:38:b8:9d:a7:c7:51:38:84:c5:f4:13:50:e8:2f:
7f:52:6b:b8:01:1d:ca:61:5f:05:91:ee:16:8f:13:
9f:94:b6:3e:1a:55:aa:06:24:cd:28:f2:3f:55:72:
4b:2c:33:3b:2e:c5:4f:4d:8b:bc:f4:9b:20:95:89:
8b:fa:ed:fc:6e:4e:9c:fe:f9:5e:21:a7:57:a8:0d:
4d:35:11:da:48:61:7b:dc:72:13:cb:b3:f0:4a:b1:
74:19:4a:49:ef:4d:bb:cb:b0:fc:e1:6c:85:6c:10:
86:2d:4c:c1:82:ef:1e:4f:93:31:71:1a:4a:cd:75:
ec:dd:5a:e9:12:79:30:fd:76:ca:c6:1c:59:85:56:
bf:24:67:3f:8e:b4:d5:22:52:0a:d6:9c:94:cc:5b:
5b:5f:9d:90:ce:25:80:8a:14:2c:fc:d2:d5:be:28:
98:9d:be:2c:97:24:23:a7:e9:fd:37:c5:26:dd:2d:
f8:d2:70:cf:94:9f:9d:0d:8b:87:8d:06:52:a9:6f:
35:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C4:17:FD:FF:22:DC:41:27:E3:92:B5:4A:D5:19:C6:DB:CC:16:25
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0597C8C4493F11ECB0A68F62D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.176.0/24
Signature Algorithm: sha256WithRSAEncryption
27:15:ed:e2:a9:0d:15:b4:45:41:c8:3d:68:97:fb:3f:13:10:
ba:1c:da:16:e2:67:d4:29:3c:86:19:2f:37:5e:37:37:9b:3d:
85:1d:39:c0:1c:0b:19:22:cb:ca:7b:ff:23:d9:2d:61:6c:57:
80:f8:90:f4:c9:47:90:41:49:6f:38:56:f5:d6:b6:36:7b:f1:
73:eb:6a:0e:d5:b1:cb:45:3f:5f:b5:66:17:f3:6d:83:90:6d:
56:cf:4b:b6:21:dc:76:3c:87:22:98:69:56:cf:35:1a:d0:fd:
48:26:1d:1c:1b:a5:f5:6a:8b:f0:77:73:2c:9b:70:b6:00:dd:
d8:14:c8:01:fc:46:60:94:ac:b3:39:b4:bf:1a:8f:6d:e3:17:
6a:09:06:64:cb:c1:1b:bf:a2:63:2e:b3:e6:d9:f3:8f:79:ee:
27:bc:3c:d3:03:92:8b:28:e3:a2:94:0a:5b:ad:38:50:b2:5c:
47:fc:87:46:0b:ab:fa:6d:ea:c5:5f:85:64:4d:f1:02:e2:24:
fe:35:0a:0c:80:94:48:d6:91:d2:03:c6:4a:08:fc:e8:5e:89:
9d:70:a7:6b:ce:24:8f:84:76:bc:a5:9f:2c:82:dc:b1:63:5a:
40:d3:22:f4:62:e0:7c:02:0f:13:c8:4b:40:09:6a:b8:65:6b:
30:4f:30:e8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBwgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMTExMTkxMzQ1NTJaFw0yMjExMTkxMzQ1NTJaMBgxFjAU
BgNVBAMMDTYxOTdhYTk1LWZhMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuJamsdKPDrrpBmuIwl89D7tEx5FW7Xi4xrVcJ6sRZtPyXBdYkRHZ53PW1
mCD4NkLZ8WND1o1xpqVWk9A4uJ2nx1E4hMX0E1DoL39Sa7gBHcphXwWR7haPE5+U
tj4aVaoGJM0o8j9VckssMzsuxU9Ni7z0myCViYv67fxuTpz++V4hp1eoDU01EdpI
YXvcchPLs/BKsXQZSknvTbvLsPzhbIVsEIYtTMGC7x5PkzFxGkrNdezdWukSeTD9
dsrGHFmFVr8kZz+OtNUiUgrWnJTMW1tfnZDOJYCKFCz80tW+KJidviyXJCOn6f03
xSbdLfjScM+Un50Ni4eNBlKpbzUzAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU/8QX
/f8i3EEn45K1StUZxtvMFiUwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzA1OTdDOEM0NDkzRjExRUNCMEE2OEY2MkQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaELAwDQYJKoZIhvcNAQEL
BQADggEBACcV7eKpDRW0RUHIPWiX+z8TELoc2hbiZ9QpPIYZLzdeNzebPYUdOcAc
Cxkiy8p7/yPZLWFsV4D4kPTJR5BBSW84VvXWtjZ78XPrag7VsctFP1+1ZhfzbYOQ
bVbPS7Yh3HY8hyKYaVbPNRrQ/UgmHRwbpfVqi/B3cyybcLYA3dgUyAH8RmCUrLM5
tL8aj23jF2oJBmTLwRu/omMus+bZ84957ie8PNMDkoso46KUClutOFCyXEf8h0YL
q/pt6sVfhWRN8QLiJP41CgyAlEjWkdIDxkoI/OheiZ1wp2vOJI+EdrylnyyC3LFj
WkDTIvRi4HwCDxPIS0AJarhlazBPMOg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org