Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/25259C14F42211EC85F4C6EDF1222468.roa
File: 25259C14F42211EC85F4C6EDF1222468.roa (raw, json)
Hash identifier: 2IjqPm1v4Y4zNJ7dJbz6Pa06zLg54rieHQEPEms1uWU=
Subject key identifier: E1:7E:0E:E3:88:41:5F:46:5D:A6:E7:0A:04:48:C2:DF:C7:67:8A:90
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 08B1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/25259C14F42211EC85F4C6EDF1222468.roa
Signing time: Sat 25 Jun 2022 01:00:03 +0000
ROA not before: Sat 25 Jun 2022 00:00:59 +0000
ROA not after: Sun 25 Jun 2023 00:00:59 +0000
asID: 40676
IP address blocks: 154.16.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2225 (0x8b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Jun 25 00:00:59 2022 GMT
Not After : Jun 25 00:00:59 2023 GMT
Subject: CN=62b65e13-5ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:4d:c4:73:f7:01:c8:9c:e3:77:0d:18:98:
24:67:b5:b2:d1:a8:cc:8d:09:1b:83:06:74:32:aa:
61:94:12:12:af:c5:e8:47:0b:90:39:54:8c:3c:46:
27:6d:34:a0:73:7b:e4:fb:67:1d:ce:22:1c:a8:f0:
81:a4:30:22:39:97:69:88:ec:aa:64:83:e3:c9:0c:
d5:ae:95:d7:f5:7e:0d:e4:2e:e2:a5:29:7b:f7:be:
e4:ea:1f:ca:3b:89:a8:a7:ed:9b:e6:8b:d9:48:76:
18:b5:ff:ac:ea:8f:3c:39:c5:1f:ca:9a:81:23:99:
7d:92:ac:76:29:5d:cd:42:7d:87:6d:ef:40:69:94:
60:3a:be:02:c3:99:05:89:63:ee:4d:f1:78:36:f0:
c3:30:ae:29:79:5a:19:bd:66:7a:d4:4d:c3:1a:bd:
7e:b3:fc:f4:d2:6e:36:62:94:01:48:e3:41:4e:31:
8c:f0:26:87:7f:27:3e:7a:9f:a8:a6:43:20:94:01:
55:78:be:ef:7f:f3:c2:d9:36:15:28:16:f4:82:27:
6f:d5:5b:ba:e3:bd:d7:86:83:27:8f:0d:38:f4:d7:
2c:f6:45:3e:72:91:3c:ae:12:b6:1d:7a:72:b8:dd:
7a:87:89:61:53:67:64:2c:19:b9:39:7a:26:1a:7e:
67:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7E:0E:E3:88:41:5F:46:5D:A6:E7:0A:04:48:C2:DF:C7:67:8A:90
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/25259C14F42211EC85F4C6EDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.228.0/24
Signature Algorithm: sha256WithRSAEncryption
06:88:de:36:6e:41:65:26:46:c3:4d:fd:bd:48:6d:27:85:03:
c6:b3:82:29:21:0a:ed:d1:1d:93:9f:b8:c8:1f:08:6e:8f:16:
b0:8c:2b:89:2f:c0:c9:23:8a:3b:a1:1f:44:c3:53:a2:bb:b4:
ef:3e:a9:1a:e6:06:5d:fb:90:aa:92:8e:19:0a:e4:56:86:96:
29:6e:b3:ef:da:2c:02:83:d0:fb:d2:a3:f4:bc:20:79:46:72:
c3:44:d7:93:99:6e:41:af:2b:79:64:ac:a8:45:00:45:14:4e:
b5:00:ab:cf:c6:54:44:f3:25:a0:20:3a:a8:55:c5:d0:18:dc:
b3:b7:b1:ba:31:bf:6b:cc:ab:7c:6d:d6:50:e8:a6:95:26:97:
7b:33:7f:52:ad:47:d8:1f:e3:67:1d:4d:7b:6f:3e:b9:e4:3b:
77:1b:f5:c5:ea:1e:80:de:92:98:3b:26:b4:7a:a7:fb:7d:d9:
c0:4c:c8:6b:0e:2d:7b:29:88:9c:b4:ea:0d:d4:a9:75:fd:39:
22:03:17:88:f1:79:08:57:da:77:c8:9a:80:20:56:12:84:be:
89:c8:59:45:03:51:f2:89:89:d8:18:fc:60:3e:0d:aa:f4:a7:
85:e9:fe:05:73:25:45:79:c4:4f:c6:6c:51:d5:de:b0:bb:51:
e2:d7:bc:74
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCLEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjA2MjUwMDAwNTlaFw0yMzA2MjUwMDAwNTlaMBgxFjAU
BgNVBAMMDTYyYjY1ZTEzLTVjZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCszk3Ec/cByJzjdw0YmCRntbLRqMyNCRuDBnQyqmGUEhKvxehHC5A5VIw8
RidtNKBze+T7Zx3OIhyo8IGkMCI5l2mI7Kpkg+PJDNWuldf1fg3kLuKlKXv3vuTq
H8o7iain7Zvmi9lIdhi1/6zqjzw5xR/KmoEjmX2SrHYpXc1CfYdt70BplGA6vgLD
mQWJY+5N8Xg28MMwril5Whm9ZnrUTcMavX6z/PTSbjZilAFI40FOMYzwJod/Jz56
n6imQyCUAVV4vu9/88LZNhUoFvSCJ2/VW7rjvdeGgyePDTj01yz2RT5ykTyuErYd
enK43XqHiWFTZ2QsGbk5eiYafmfrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU4X4O
44hBX0ZdpucKBEjC38dnipAwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzI1MjU5QzE0RjQyMjExRUM4NUY0QzZFREYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEOQwDQYJKoZIhvcNAQEL
BQADggEBAAaI3jZuQWUmRsNN/b1IbSeFA8azgikhCu3RHZOfuMgfCG6PFrCMK4kv
wMkjijuhH0TDU6K7tO8+qRrmBl37kKqSjhkK5FaGlilus+/aLAKD0PvSo/S8IHlG
csNE15OZbkGvK3lkrKhFAEUUTrUAq8/GVETzJaAgOqhVxdAY3LO3sboxv2vMq3xt
1lDoppUml3szf1KtR9gf42cdTXtvPrnkO3cb9cXqHoDekpg7JrR6p/t92cBMyGsO
LXspiJy06g3UqXX9OSIDF4jxeQhX2nfImoAgVhKEvonIWUUDUfKJidgY/GA+Dar0
p4Xp/gVzJUV5xE/GbFHV3rC7UeLXvHQ=
-----END CERTIFICATE-----
Generated at Wed Feb 5 14:52:33 2025 by rpki-client