Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/43DCBB640EC911EBAC7E170FF8AEA228.roa
File: 43DCBB640EC911EBAC7E170FF8AEA228.roa (raw, json)
Hash identifier: ZeceeJn5KHe4FROS3KJZysaUinCrfNsQkI1w30Ju3OE=
Subject key identifier: E8:EF:33:B9:DA:9A:38:06:0C:B7:44:23:AE:B9:1C:0A:3D:26:89:AF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 03DD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/43DCBB640EC911EBAC7E170FF8AEA228.roa
Signing time: Thu 15 Oct 2020 09:31:57 +0000
ROA not before: Thu 15 Oct 2020 09:31:49 +0000
ROA not after: Fri 02 Sep 2022 09:31:49 +0000
asID: 3356
IP address blocks: 154.16.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 989 (0x3dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Oct 15 09:31:49 2020 GMT
Not After : Sep 2 09:31:49 2022 GMT
Subject: CN=5f88170c-cc09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:03:c3:3c:6a:8d:60:ce:f5:dc:2b:07:c1:
db:04:5c:70:4b:b6:10:6f:60:be:26:d9:cd:72:7d:
d1:e6:c5:5c:56:d3:e4:94:9c:21:d5:99:5e:bc:a7:
ce:c4:09:ca:e9:ec:7c:ce:09:40:aa:62:c8:3c:67:
1c:1a:b5:9a:5d:05:db:7b:ae:90:45:b6:28:90:ab:
88:b3:5c:54:8d:73:01:6b:c2:c1:91:59:fa:76:4a:
d9:16:11:db:d2:89:8f:55:e2:82:ea:46:df:96:ea:
16:01:74:b6:59:10:67:49:8e:eb:74:d3:bf:10:13:
1b:4e:19:58:31:21:0e:45:77:2b:36:8b:96:49:e0:
8f:4b:9c:df:22:36:e4:5b:64:0f:c0:ad:83:bd:56:
02:01:33:15:39:ac:54:c9:8b:14:e6:90:66:fc:d0:
ff:53:7f:dd:34:47:74:ea:7d:49:75:a2:65:57:66:
54:22:91:30:f1:26:7b:7d:50:1e:fa:e4:63:88:3c:
b1:41:c8:43:08:a0:c0:e1:2b:ed:be:70:ec:c2:de:
d4:41:ff:13:38:96:49:69:cd:36:8b:68:fb:99:0f:
89:38:d0:fe:ca:e3:ca:df:9e:94:c3:68:c1:cb:72:
92:2f:a4:d7:c9:c9:20:d7:fa:9b:43:2f:72:54:79:
c5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EF:33:B9:DA:9A:38:06:0C:B7:44:23:AE:B9:1C:0A:3D:26:89:AF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/43DCBB640EC911EBAC7E170FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.188.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:ea:d6:67:6d:48:57:79:10:b6:48:23:17:1b:4b:ce:04:7f:
b2:cb:c6:90:9a:e9:87:06:ab:19:37:bc:70:20:f4:50:e5:33:
26:a1:d1:32:b1:05:68:24:7f:2b:fd:7c:f9:06:7e:30:e9:56:
1c:6a:fe:4d:8b:5d:ba:e9:70:3b:9e:61:f0:c2:a0:25:07:56:
f0:55:f1:bb:aa:2b:42:45:55:7b:7b:18:0d:32:66:de:9d:0c:
11:d5:c4:15:46:00:c1:0e:70:e1:02:29:33:c4:42:ae:c6:92:
57:e3:38:d9:a2:4d:b5:59:c4:a0:88:e2:94:c1:9d:6f:ef:02:
7e:a4:b5:12:97:1e:d3:21:fb:22:a7:cd:2d:00:bd:8e:6d:fd:
5d:b7:a3:d5:7e:11:8d:5d:94:44:a8:71:b0:89:8c:e4:9a:bc:
43:9a:8c:05:8c:7d:61:0f:e0:b9:a0:e3:99:24:83:10:da:54:
be:45:fa:cb:fa:d0:dc:95:77:53:f0:51:b5:bd:e7:db:7f:d1:
f4:01:6b:d6:5f:01:cc:22:e6:c3:8a:88:1e:c8:4d:91:f7:a0:
bc:82:d0:61:df:8f:d4:39:3b:0f:87:70:42:82:7d:06:5e:bd:
19:32:20:96:eb:02:4e:9e:ee:c9:b5:4c:dc:68:d6:fe:1a:ae:
87:7d:57:39
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA90wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMDEwMTUwOTMxNDlaFw0yMjA5MDIwOTMxNDlaMBgxFjAU
BgNVBAMTDTVmODgxNzBjLWNjMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC81gPDPGqNYM713CsHwdsEXHBLthBvYL4m2c1yfdHmxVxW0+SUnCHVmV68
p87ECcrp7HzOCUCqYsg8ZxwatZpdBdt7rpBFtiiQq4izXFSNcwFrwsGRWfp2StkW
EdvSiY9V4oLqRt+W6hYBdLZZEGdJjut0078QExtOGVgxIQ5Fdys2i5ZJ4I9LnN8i
NuRbZA/ArYO9VgIBMxU5rFTJixTmkGb80P9Tf900R3TqfUl1omVXZlQikTDxJnt9
UB765GOIPLFByEMIoMDhK+2+cOzC3tRB/xM4lklpzTaLaPuZD4k40P7K48rfnpTD
aMHLcpIvpNfJySDX+ptDL3JUecUvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU6O8z
udqaOAYMt0QjrrkcCj0mia8wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzQzRENCQjY0MEVDOTExRUJBQzdFMTcwRkY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKaELwwDQYJKoZIhvcNAQEL
BQADggEBAKfq1mdtSFd5ELZIIxcbS84Ef7LLxpCa6YcGqxk3vHAg9FDlMyah0TKx
BWgkfyv9fPkGfjDpVhxq/k2LXbrpcDueYfDCoCUHVvBV8buqK0JFVXt7GA0yZt6d
DBHVxBVGAMEOcOECKTPEQq7GklfjONmiTbVZxKCI4pTBnW/vAn6ktRKXHtMh+yKn
zS0AvY5t/V23o9V+EY1dlESocbCJjOSavEOajAWMfWEP4Lmg45kkgxDaVL5F+sv6
0NyVd1PwUbW959t/0fQBa9ZfAcwi5sOKiB7ITZH3oLyC0GHfj9Q5Ow+HcEKCfQZe
vRkyIJbrAk6e7sm1TNxo1v4arod9Vzk=
-----END CERTIFICATE-----
Generated at Wed Feb 5 14:59:56 2025 by rpki-client