Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/402C3F3E23FE11ED8ACE9587F1222468.roa
File: 402C3F3E23FE11ED8ACE9587F1222468.roa (raw, json)
Hash identifier: U8BBrFLEJoFrPX7ODgMX6YPCN3EkTavALVf74+SHeF4=
Subject key identifier: DB:A3:94:70:D0:7A:25:E8:72:03:C9:BE:97:06:5D:2D:BE:56:28:6E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0953
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/402C3F3E23FE11ED8ACE9587F1222468.roa
Signing time: Wed 24 Aug 2022 22:44:02 +0000
ROA not before: Wed 24 Aug 2022 22:43:59 +0000
ROA not after: Fri 25 Aug 2023 22:43:59 +0000
asID: 212238
IP address blocks: 154.16.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2387 (0x953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 24 22:43:59 2022 GMT
Not After : Aug 25 22:43:59 2023 GMT
Subject: CN=6306a9b2-4f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:98:9b:f8:e2:df:3b:7d:05:e5:8f:bf:b3:
cb:81:d0:24:1a:bb:aa:a7:ab:aa:1d:96:12:c1:e4:
52:8b:f4:1c:73:c0:83:e4:3b:0d:24:73:f1:8d:38:
98:2f:31:f6:df:a3:7e:ff:cd:22:03:64:c6:97:07:
f5:7c:2b:9a:3d:ee:a1:c7:96:15:f7:09:27:bc:5a:
66:60:dc:b9:e0:d9:27:0a:7c:e3:9f:d9:59:32:99:
59:b7:d7:95:80:68:e9:9e:fe:15:45:41:d9:2c:f8:
ce:8b:6b:72:2c:b2:e9:1b:d1:00:24:ad:b0:d7:ad:
26:4c:43:1a:b9:d8:6a:51:3a:68:23:3c:48:8d:27:
68:8b:fa:35:22:49:51:a6:b5:8c:40:7c:19:3a:f6:
3e:46:fd:24:78:0a:b6:46:fc:d1:0b:e9:31:41:39:
02:1a:89:39:8a:37:fa:c3:9e:4a:27:22:d9:93:fe:
03:17:36:ce:cb:00:56:87:d6:2a:50:de:c8:27:8b:
b1:e8:5a:26:62:56:3e:5c:23:bc:86:69:11:82:35:
ae:71:81:8f:51:9a:ad:ac:af:a7:d5:8f:9b:84:2b:
65:fe:3a:c0:40:20:53:7a:d0:c1:bf:eb:b5:9e:e8:
60:60:4e:a7:80:16:e2:51:9f:88:be:26:1a:fb:6b:
1f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A3:94:70:D0:7A:25:E8:72:03:C9:BE:97:06:5D:2D:BE:56:28:6E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/402C3F3E23FE11ED8ACE9587F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.31.0/24
Signature Algorithm: sha256WithRSAEncryption
90:d5:85:d7:76:d0:79:2f:07:cb:d9:9c:69:d2:03:47:1d:ba:
6e:2b:6e:38:a7:e2:0b:1b:75:73:26:d7:64:5b:8b:c8:9d:ed:
7b:9c:37:dc:49:f9:6f:cd:21:7e:e0:39:4a:e2:90:4e:32:76:
19:be:63:c3:03:6a:ef:0f:38:a0:bf:f7:e3:69:dd:36:b7:72:
48:8c:b5:61:a2:a6:9a:7b:b3:be:ca:e6:a5:ab:28:19:7c:59:
97:df:d8:47:f2:e8:68:42:57:8e:a1:c3:dc:1b:de:5c:3c:8a:
09:f6:07:5b:dd:95:44:6b:15:97:5f:b9:cd:f6:0e:04:08:b4:
90:49:b9:75:33:6b:94:9a:bc:f8:30:1f:2d:6c:d3:a7:88:fc:
42:02:89:18:e0:3a:42:19:a3:ee:45:77:bd:79:2a:c3:0e:f1:
8b:72:a2:5d:71:9b:91:98:cd:52:be:8b:d4:7d:3f:3d:fb:ab:
c6:20:81:55:01:6a:ff:d7:99:54:14:68:aa:ca:f5:30:1d:0d:
24:37:4a:18:1d:a8:ac:8f:ea:7a:a7:87:c3:68:e5:b2:61:6c:
56:2c:ac:96:f2:e8:de:c7:ae:f1:45:b0:2f:49:8b:98:90:27:
a1:a2:52:59:85:be:b8:06:af:19:d2:d3:21:70:9a:55:96:aa:
d5:a7:d7:9f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCVMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjA4MjQyMjQzNTlaFw0yMzA4MjUyMjQzNTlaMBgxFjAU
BgNVBAMMDTYzMDZhOWIyLTRmNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8hJib+OLfO30F5Y+/s8uB0CQau6qnq6odlhLB5FKL9BxzwIPkOw0kc/GN
OJgvMfbfo37/zSIDZMaXB/V8K5o97qHHlhX3CSe8WmZg3Lng2ScKfOOf2VkymVm3
15WAaOme/hVFQdks+M6La3Issukb0QAkrbDXrSZMQxq52GpROmgjPEiNJ2iL+jUi
SVGmtYxAfBk69j5G/SR4CrZG/NEL6TFBOQIaiTmKN/rDnkonItmT/gMXNs7LAFaH
1ipQ3sgni7HoWiZiVj5cI7yGaRGCNa5xgY9Rmq2sr6fVj5uEK2X+OsBAIFN60MG/
67We6GBgTqeAFuJRn4i+Jhr7ax/lAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU26OU
cNB6JehyA8m+lwZdLb5WKG4wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzQwMkMzRjNFMjNGRTExRUQ4QUNFOTU4N0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEB8wDQYJKoZIhvcNAQEL
BQADggEBAJDVhdd20HkvB8vZnGnSA0cdum4rbjin4gsbdXMm12Rbi8id7XucN9xJ
+W/NIX7gOUrikE4ydhm+Y8MDau8POKC/9+Np3Ta3ckiMtWGippp7s77K5qWrKBl8
WZff2Efy6GhCV46hw9wb3lw8ign2B1vdlURrFZdfuc32DgQItJBJuXUza5SavPgw
Hy1s06eI/EICiRjgOkIZo+5Fd715KsMO8Ytyol1xm5GYzVK+i9R9Pz37q8YggVUB
av/XmVQUaKrK9TAdDSQ3ShgdqKyP6nqnh8No5bJhbFYsrJby6N7HrvFFsC9Ji5iQ
J6GiUlmFvrgGrxnS0yFwmlWWqtWn158=
-----END CERTIFICATE-----
Generated at Sat Aug 26 01:13:23 2023 by rpki-client on console-fra.rpki-client.org