Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4874987C7F6611ECADBF44855A40D577.roa
File: 4874987C7F6611ECADBF44855A40D577.roa (raw, json)
Hash identifier: UMhsmvRfBFwhomZ7Pn3/ukI74qvEOwjPZVXX/5DRMLs=
Subject key identifier: ED:E4:42:5A:D5:E7:B4:A9:8F:21:67:35:14:92:9D:6B:A6:FE:72:3F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 079C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4874987C7F6611ECADBF44855A40D577.roa
Signing time: Thu 27 Jan 2022 11:43:02 +0000
ROA not before: Thu 27 Jan 2022 11:42:58 +0000
ROA not after: Fri 27 Jan 2023 11:42:58 +0000
asID: 46562
IP address blocks: 154.16.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1948 (0x79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 27 11:42:58 2022 GMT
Not After : Jan 27 11:42:58 2023 GMT
Subject: CN=61f28546-3917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:d7:dd:5f:56:ce:f8:48:32:c0:d6:b6:b4:
7f:e2:7c:53:93:53:c7:83:61:8f:a8:5c:03:5c:49:
3c:f5:8f:c6:96:9b:ee:98:7a:c8:c0:2a:d3:25:36:
e1:76:77:af:6a:a1:47:48:27:81:e8:77:d2:7d:c8:
6f:e8:e4:a9:10:5a:73:f3:9f:13:73:ca:ea:ab:d1:
9e:25:cf:4a:2d:9e:a3:ea:e6:90:2a:f5:36:e7:b6:
da:b1:c5:76:17:31:26:07:ed:51:17:be:8e:ee:b0:
a8:b7:85:40:26:cc:d7:88:f0:d0:15:02:f9:99:66:
56:97:aa:b7:72:85:4b:be:dc:32:c5:ce:01:5d:2f:
e7:4e:6d:26:c8:58:8b:1c:3f:2e:0d:01:90:47:19:
f1:07:de:7d:fd:fb:af:f2:39:e5:63:aa:9b:a7:30:
96:82:b8:df:be:8b:42:f6:40:32:9c:f2:ea:95:fc:
ad:b5:8b:a7:10:3e:d0:b1:57:d8:64:91:24:77:d3:
8c:ca:85:b5:77:9b:50:fc:67:15:99:23:92:94:b5:
f9:e8:ee:c0:cf:58:ce:e6:8c:f6:9f:bc:e0:eb:a4:
d3:20:11:ce:19:69:85:5f:0e:df:84:db:dd:33:b2:
b4:89:82:a3:bc:bf:46:d3:48:b5:9a:11:5c:d4:49:
9f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E4:42:5A:D5:E7:B4:A9:8F:21:67:35:14:92:9D:6B:A6:FE:72:3F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4874987C7F6611ECADBF44855A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.162.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:c7:2b:68:0e:bb:3a:26:5d:6c:dc:47:6d:f4:ab:6a:99:a9:
72:c8:ab:83:c6:b5:e8:63:31:5c:0b:85:9b:7e:b9:a7:f6:a5:
f2:42:41:b8:2c:96:2c:a6:d1:d2:40:90:5a:4a:12:3f:68:3a:
b3:92:2a:7f:f6:fe:d3:3b:c9:b1:a1:44:fb:48:14:69:c6:0c:
db:fd:97:c3:8d:46:d3:7b:7e:6d:f8:22:c3:b3:73:3f:e1:bd:
fa:79:83:a0:89:5e:4a:56:68:e7:56:ed:43:e0:4c:c4:e2:2a:
4d:33:89:be:00:24:39:a6:68:2e:44:11:a3:be:fd:d3:ee:82:
35:20:f0:2b:35:ce:66:e0:4d:a1:19:36:e4:83:7a:8e:08:59:
40:60:f7:db:47:a1:ce:44:77:30:26:32:a8:71:b9:8d:e2:19:
6d:72:1c:67:0f:66:90:05:86:c3:ec:c4:56:f7:c1:7b:0d:13:
ae:61:cc:e6:de:f7:00:da:9a:ee:a6:7f:30:76:49:71:76:ea:
a3:eb:65:87:2c:2f:0a:1f:7d:4e:79:70:55:5c:ab:81:c9:bb:
23:82:b6:70:6d:3f:33:c1:3d:d4:c2:fd:d8:f0:5f:a9:41:97:
7f:65:41:d6:b3:c8:53:e6:3d:d1:af:a2:da:59:b3:73:5e:22:
96:7a:3e:db
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB5wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjAxMjcxMTQyNThaFw0yMzAxMjcxMTQyNThaMBgxFjAU
BgNVBAMMDTYxZjI4NTQ2LTM5MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCohtfdX1bO+EgywNa2tH/ifFOTU8eDYY+oXANcSTz1j8aWm+6YesjAKtMl
NuF2d69qoUdIJ4Hod9J9yG/o5KkQWnPznxNzyuqr0Z4lz0otnqPq5pAq9Tbnttqx
xXYXMSYH7VEXvo7usKi3hUAmzNeI8NAVAvmZZlaXqrdyhUu+3DLFzgFdL+dObSbI
WIscPy4NAZBHGfEH3n39+6/yOeVjqpunMJaCuN++i0L2QDKc8uqV/K21i6cQPtCx
V9hkkSR304zKhbV3m1D8ZxWZI5KUtfno7sDPWM7mjPafvODrpNMgEc4ZaYVfDt+E
290zsrSJgqO8v0bTSLWaEVzUSZ9bAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU7eRC
WtXntKmPIWc1FJKda6b+cj8wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzQ4NzQ5ODdDN0Y2NjExRUNBREJGNDQ4NTVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEKIwDQYJKoZIhvcNAQEL
BQADggEBAFrHK2gOuzomXWzcR230q2qZqXLIq4PGtehjMVwLhZt+uaf2pfJCQbgs
liym0dJAkFpKEj9oOrOSKn/2/tM7ybGhRPtIFGnGDNv9l8ONRtN7fm34IsOzcz/h
vfp5g6CJXkpWaOdW7UPgTMTiKk0zib4AJDmmaC5EEaO+/dPugjUg8Cs1zmbgTaEZ
NuSDeo4IWUBg99tHoc5EdzAmMqhxuY3iGW1yHGcPZpAFhsPsxFb3wXsNE65hzObe
9wDamu6mfzB2SXF26qPrZYcsLwoffU55cFVcq4HJuyOCtnBtPzPBPdTC/djwX6lB
l39lQdazyFPmPdGvotpZs3NeIpZ6Pts=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org