Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/699570ECEA4311ECBA5F0F99F1222468.roa
File: 699570ECEA4311ECBA5F0F99F1222468.roa (raw, json)
Hash identifier: xKmt6K4u8x+Y+HhmC3vs2ad+Z8LHW6aMj9uYDjX6K+k=
Subject key identifier: 03:D0:D9:D2:92:CA:C9:5F:7F:8C:D7:C4:24:73:E4:80:20:68:39:FF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0891
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/699570ECEA4311ECBA5F0F99F1222468.roa
Signing time: Sun 12 Jun 2022 11:33:00 +0000
ROA not before: Sun 12 Jun 2022 11:32:56 +0000
ROA not after: Mon 12 Jun 2023 11:32:56 +0000
asID: 398464
IP address blocks: 154.16.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2193 (0x891)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 12 11:32:56 2022 GMT
Not After : Jun 12 11:32:56 2023 GMT
Subject: CN=62a5ceec-51c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:12:2c:b2:73:52:fc:33:b3:9b:a3:dd:5a:
98:79:f0:c3:f2:7e:e7:f6:69:6a:34:bf:d5:a4:5a:
b6:27:6e:5d:87:2e:c7:00:73:e4:f4:09:20:01:1b:
0c:8a:7f:fb:79:79:de:c1:e3:19:f0:76:1a:e1:2e:
94:ee:fe:14:de:69:bd:9c:ab:57:84:60:43:51:e2:
89:ce:d7:95:80:ec:f8:73:10:db:32:66:d2:9a:79:
7e:fc:18:a4:15:53:a0:90:3a:6a:ee:86:27:35:3a:
0a:31:3b:b9:78:8c:13:78:1f:16:14:98:5b:e5:57:
8a:eb:5b:fd:03:a2:b2:45:4b:bd:2f:74:1e:22:c2:
68:19:18:33:b8:fc:c1:6f:f7:d4:1a:6a:96:49:63:
d2:d9:69:c0:c5:f7:b9:3a:f0:27:a8:35:ed:5a:a0:
57:1f:d4:79:24:af:49:f6:e7:b7:f5:7d:aa:e0:e6:
e4:86:aa:5d:20:75:3f:37:4d:b6:1d:71:01:ab:db:
fe:7a:0c:ca:20:57:99:79:92:67:fd:4c:69:5f:bc:
66:6e:18:d5:83:14:46:e5:ea:75:1d:a5:61:fd:86:
e0:11:ac:15:e0:a5:01:c7:8f:d0:73:b7:52:40:e1:
6e:fe:4e:15:c4:95:e0:4b:14:0a:d7:70:24:72:b7:
bb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D0:D9:D2:92:CA:C9:5F:7F:8C:D7:C4:24:73:E4:80:20:68:39:FF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/699570ECEA4311ECBA5F0F99F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.194.0/24
Signature Algorithm: sha256WithRSAEncryption
29:cc:82:7c:28:0b:bd:52:77:2e:5e:20:6f:bd:9b:52:b8:a6:
88:58:3f:86:e1:39:7a:07:b4:10:24:2f:16:5e:b8:3b:b0:66:
3a:ce:08:5b:1d:d3:66:90:6a:8e:b8:51:94:80:9a:67:15:15:
2c:67:e8:23:d5:ae:69:9e:65:c8:dc:e9:87:5e:7e:6a:15:9b:
3a:1b:0d:ed:b8:0e:f9:f2:58:3b:56:7e:05:98:c1:1c:4b:8a:
10:38:ce:bb:bd:3d:4f:97:b7:8b:c6:85:be:ae:37:f3:ff:aa:
75:bf:cc:91:bd:50:9f:96:15:d0:b8:3f:16:d3:f8:7a:d1:2c:
ef:43:04:cf:95:99:c0:92:2f:d2:d1:86:24:a6:c9:28:e0:4c:
d4:26:48:0d:96:16:c8:3c:6f:c0:56:3f:03:b8:a6:f5:34:98:
4e:f5:6e:f6:98:27:ee:88:0b:1e:96:02:61:b4:71:5c:89:60:
a9:f6:e8:d1:45:c5:13:15:9f:75:44:09:f7:1f:ea:57:a8:25:
e6:1c:ca:15:3b:e6:75:36:70:7f:5c:d7:69:00:fb:38:53:0d:
e0:b9:ce:84:b0:63:36:d1:d5:a7:b1:ff:78:0c:dd:82:5b:80:
30:2b:c9:f8:40:22:b5:db:85:84:0e:07:9d:72:70:e3:fe:bb:
58:a6:b1:74
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCJEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjA2MTIxMTMyNTZaFw0yMzA2MTIxMTMyNTZaMBgxFjAU
BgNVBAMMDTYyYTVjZWVjLTUxYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEjBIssnNS/DOzm6PdWph58MPyfuf2aWo0v9WkWrYnbl2HLscAc+T0CSAB
GwyKf/t5ed7B4xnwdhrhLpTu/hTeab2cq1eEYENR4onO15WA7PhzENsyZtKaeX78
GKQVU6CQOmruhic1OgoxO7l4jBN4HxYUmFvlV4rrW/0DorJFS70vdB4iwmgZGDO4
/MFv99QaapZJY9LZacDF97k68CeoNe1aoFcf1Hkkr0n257f1farg5uSGql0gdT83
TbYdcQGr2/56DMogV5l5kmf9TGlfvGZuGNWDFEbl6nUdpWH9huARrBXgpQHHj9Bz
t1JA4W7+ThXEleBLFArXcCRyt7tvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUA9DZ
0pLKyV9/jNfEJHPkgCBoOf8wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzY5OTU3MEVDRUE0MzExRUNCQTVGMEY5OUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEMIwDQYJKoZIhvcNAQEL
BQADggEBACnMgnwoC71Sdy5eIG+9m1K4pohYP4bhOXoHtBAkLxZeuDuwZjrOCFsd
02aQao64UZSAmmcVFSxn6CPVrmmeZcjc6YdefmoVmzobDe24DvnyWDtWfgWYwRxL
ihA4zru9PU+Xt4vGhb6uN/P/qnW/zJG9UJ+WFdC4PxbT+HrRLO9DBM+VmcCSL9LR
hiSmySjgTNQmSA2WFsg8b8BWPwO4pvU0mE71bvaYJ+6ICx6WAmG0cVyJYKn26NFF
xRMVn3VECfcf6leoJeYcyhU75nU2cH9c12kA+zhTDeC5zoSwYzbR1aex/3gM3YJb
gDAryfhAIrXbhYQOB51ycOP+u1imsXQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org