Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/059F4C5C2A0311ED922280C5F1222468.roa
File: 059F4C5C2A0311ED922280C5F1222468.roa (raw, json)
Hash identifier: 5OZq9mU3Nd3hHwkFcGtopJeyRDhAEDBtB+8KhJQ1W8E=
Subject key identifier: 48:47:8A:C6:E0:22:8A:B9:0C:F9:2F:5F:91:98:98:93:92:C3:2D:BC
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0978
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/059F4C5C2A0311ED922280C5F1222468.roa
Signing time: Thu 01 Sep 2022 14:33:19 +0000
ROA not before: Thu 01 Sep 2022 14:33:15 +0000
ROA not after: Thu 05 Sep 2024 14:33:15 +0000
asID: 22773
IP address blocks: 154.16.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2424 (0x978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Sep 1 14:33:15 2022 GMT
Not After : Sep 5 14:33:15 2024 GMT
Subject: CN=6310c2af-8633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:6e:e8:be:e1:e3:66:18:e8:13:0f:9b:e7:
66:7a:bd:99:93:64:8c:ec:3c:89:25:d9:86:90:4d:
cd:f4:29:8a:9d:11:a2:6a:a9:f7:e7:a5:1a:68:40:
fd:61:2a:02:68:1b:63:c3:79:ef:99:ec:c0:64:d1:
54:7c:4f:2b:f8:82:16:1e:36:a0:11:ef:da:2a:75:
28:fb:2d:d4:97:b5:86:fb:91:38:67:f4:dc:6f:31:
1f:5d:af:03:7e:72:50:11:8b:f7:c3:c2:0e:bd:f2:
fc:23:2b:d3:71:05:b9:6f:9b:a9:b2:5c:6c:d4:90:
47:33:b8:c8:6d:6b:cc:48:22:09:49:ad:df:c3:9d:
db:25:fa:31:0b:e6:96:07:a1:f8:73:3e:79:6a:54:
75:cf:f8:d4:d1:8d:6f:a9:e3:79:05:eb:fe:f7:90:
9e:71:5b:08:90:a2:39:63:7c:eb:53:c3:66:a3:85:
6b:56:36:59:0e:b3:63:a1:f5:fc:dc:a9:6c:16:e2:
82:d9:bc:58:36:b3:16:7d:e4:49:b1:6c:91:6d:99:
63:ae:2e:52:42:fe:f6:2b:64:f9:8a:56:48:97:ab:
66:9e:ce:bf:59:dd:c3:f5:9f:0e:da:9c:2c:28:17:
50:6e:f2:88:e9:8b:45:4d:94:58:a5:1b:1c:81:fe:
6b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:47:8A:C6:E0:22:8A:B9:0C:F9:2F:5F:91:98:98:93:92:C3:2D:BC
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/059F4C5C2A0311ED922280C5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.242.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:fd:06:41:8f:9b:3f:d3:d8:4e:2a:6c:33:7d:a7:88:f2:86:
7d:c8:15:5a:0a:88:08:aa:39:2b:cf:30:dc:70:23:d8:cd:f5:
1e:63:18:01:cf:79:73:8a:53:86:4a:28:9f:92:8c:16:4d:82:
36:2b:18:86:e4:4b:2f:f6:bd:6e:97:eb:16:bb:db:38:6a:40:
8f:06:c8:7b:87:5d:70:69:a1:1d:8f:93:4f:d6:6f:95:c6:8f:
2a:20:31:de:ea:e5:b6:69:75:3d:c5:05:bc:03:d5:06:8e:84:
60:f4:07:35:c0:38:c8:4a:6f:29:11:96:ee:01:e4:ca:d2:d1:
87:66:95:d5:49:35:66:e4:c0:d6:70:aa:86:5e:6e:59:ca:6e:
62:57:60:fd:48:dc:c6:4b:6a:e0:1d:08:d5:fa:24:4a:af:6e:
3a:22:a8:83:07:db:14:a3:07:75:f0:cc:a8:bb:b1:ee:ec:4d:
33:42:b2:4c:4c:e3:8d:92:0f:1e:18:20:8d:ef:c0:ba:8a:85:
45:a5:88:0f:64:0f:8b:d2:15:75:0d:8e:aa:7a:55:2e:52:c1:
63:0b:23:e3:76:9e:48:03:6f:f8:5c:b8:73:40:80:f6:be:4f:
79:b3:9f:d9:d8:67:3d:4a:a4:52:89:11:77:23:21:07:91:13:
81:6a:e6:98
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCXgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjA5MDExNDMzMTVaFw0yNDA5MDUxNDMzMTVaMBgxFjAU
BgNVBAMMDTYzMTBjMmFmLTg2MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCnum7ovuHjZhjoEw+b52Z6vZmTZIzsPIkl2YaQTc30KYqdEaJqqffnpRpo
QP1hKgJoG2PDee+Z7MBk0VR8Tyv4ghYeNqAR79oqdSj7LdSXtYb7kThn9NxvMR9d
rwN+clARi/fDwg698vwjK9NxBblvm6myXGzUkEczuMhta8xIIglJrd/Dndsl+jEL
5pYHofhzPnlqVHXP+NTRjW+p43kF6/73kJ5xWwiQojljfOtTw2ajhWtWNlkOs2Oh
9fzcqWwW4oLZvFg2sxZ95EmxbJFtmWOuLlJC/vYrZPmKVkiXq2aezr9Z3cP1nw7a
nCwoF1Bu8ojpi0VNlFilGxyB/msLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUSEeK
xuAiirkM+S9fkZiYk5LDLbwwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzA1OUY0QzVDMkEwMzExRUQ5MjIyODBDNUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEPIwDQYJKoZIhvcNAQEL
BQADggEBALL9BkGPmz/T2E4qbDN9p4jyhn3IFVoKiAiqOSvPMNxwI9jN9R5jGAHP
eXOKU4ZKKJ+SjBZNgjYrGIbkSy/2vW6X6xa72zhqQI8GyHuHXXBpoR2Pk0/Wb5XG
jyogMd7q5bZpdT3FBbwD1QaOhGD0BzXAOMhKbykRlu4B5MrS0YdmldVJNWbkwNZw
qoZeblnKbmJXYP1I3MZLauAdCNX6JEqvbjoiqIMH2xSjB3XwzKi7se7sTTNCskxM
442SDx4YII3vwLqKhUWliA9kD4vSFXUNjqp6VS5SwWMLI+N2nkgDb/hcuHNAgPa+
T3mzn9nYZz1KpFKJEXcjIQeRE4Fq5pg=
-----END CERTIFICATE-----
Generated at Wed Feb 5 14:49:29 2025 by rpki-client