Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/720FD276496011EEBB5F2C384AD9E6FC.roa
File: 720FD276496011EEBB5F2C384AD9E6FC.roa (raw, json)
Hash identifier: t+4A5kbS0njYO3uSo3VwWLzvSyb4KS2scIcky/kb/l4=
Subject key identifier: 24:30:89:A7:2D:EC:A1:29:5D:B8:F4:3D:96:72:97:01:4C:62:55:CE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 11DF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/720FD276496011EEBB5F2C384AD9E6FC.roa
Signing time: Sat 02 Sep 2023 07:15:08 +0000
ROA not before: Sat 02 Sep 2023 07:15:04 +0000
ROA not after: Tue 03 Sep 2024 07:15:04 +0000
asID: 834
IP address blocks: 154.16.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4575 (0x11df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Sep 2 07:15:04 2023 GMT
Not After : Sep 3 07:15:04 2024 GMT
Subject: CN=64f2e0fb-f05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0b:bc:4e:26:60:10:98:de:92:05:9e:b3:5c:
23:36:6e:e8:0e:5a:39:60:26:4f:9d:b1:0e:9b:47:
11:5a:ad:e2:ab:64:fb:20:d1:df:0b:29:27:69:9f:
59:ff:89:ce:88:1f:30:ed:39:9d:46:8a:dd:b2:32:
7d:1a:e7:ca:96:e0:f1:7a:6b:66:64:23:96:ef:a1:
11:a8:34:3e:da:eb:8b:c0:93:52:d1:69:4a:0e:94:
91:88:37:19:05:b9:ed:30:b3:06:0d:cb:96:bd:4b:
3a:50:1b:3b:58:d7:b8:2f:8d:7c:fc:57:c9:82:16:
3d:ce:79:d2:ec:b5:12:13:3f:30:20:e1:bf:5d:58:
e3:a1:75:21:b7:e1:5d:6c:30:5f:56:1f:54:d3:f7:
78:f8:05:13:4f:1a:90:ae:ea:41:f5:ba:3c:e1:18:
06:ad:f5:9d:be:b8:ea:c9:b1:f7:a8:8c:7d:a3:7e:
4d:74:19:e5:c7:2c:d5:cc:f1:b2:6e:8e:25:4d:59:
22:d1:65:60:a3:5c:61:a5:1e:dc:61:3b:eb:46:73:
03:57:f5:21:00:57:27:67:54:8a:03:ba:12:93:a3:
67:89:ea:04:f8:e2:48:e8:56:c0:6b:8c:6c:d1:fc:
2d:62:6e:62:0c:c3:5d:32:50:10:cc:5b:04:df:60:
b6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:30:89:A7:2D:EC:A1:29:5D:B8:F4:3D:96:72:97:01:4C:62:55:CE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/720FD276496011EEBB5F2C384AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.93.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:61:82:85:4d:e8:13:ce:af:0a:bd:5f:82:e6:75:6d:28:f8:
45:94:3c:55:ea:6c:fb:ea:b2:72:45:e7:4a:d4:80:ec:8d:75:
cb:f7:e5:26:84:4c:82:bc:6f:d6:a6:21:d3:83:4a:89:68:e2:
df:9e:bf:1b:0e:99:85:e5:d0:95:76:69:dc:b8:ec:77:ff:ec:
52:d1:8b:11:a1:10:d8:7e:24:3d:23:a2:1e:22:de:40:bf:ac:
26:bf:d4:4e:22:fc:7d:8c:a6:e9:4c:c2:ca:28:3c:70:eb:eb:
f0:c4:ef:7e:ae:dd:50:5c:1f:0e:71:b5:70:6b:aa:49:93:ce:
33:a8:82:d9:ae:d4:93:60:63:96:75:c7:aa:4a:82:89:7e:aa:
91:64:c0:71:c8:38:3d:67:d5:be:78:ee:dd:16:59:7b:81:64:
c7:6e:66:b4:8a:18:23:7f:9f:c1:95:63:0e:be:86:e8:15:1d:
0b:7a:43:f7:6b:13:94:23:37:cb:6a:d8:31:d3:e9:15:9a:8b:
33:5b:ca:7c:f4:98:d6:1d:59:42:4c:72:af:0d:bd:e3:29:17:
52:3a:0a:1b:6d:7a:e4:57:24:4f:66:20:41:57:f7:00:22:f4:
84:6c:9c:ac:af:f8:9a:5c:80:cb:3a:4b:ce:87:b5:15:19:63:
5f:ca:75:c8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEd8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA5MDIwNzE1MDRaFw0yNDA5MDMwNzE1MDRaMBgxFjAU
BgNVBAMTDTY0ZjJlMGZiLWYwNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDfC7xOJmAQmN6SBZ6zXCM2bugOWjlgJk+dsQ6bRxFareKrZPsg0d8LKSdp
n1n/ic6IHzDtOZ1Git2yMn0a58qW4PF6a2ZkI5bvoRGoND7a64vAk1LRaUoOlJGI
NxkFue0wswYNy5a9SzpQGztY17gvjXz8V8mCFj3OedLstRITPzAg4b9dWOOhdSG3
4V1sMF9WH1TT93j4BRNPGpCu6kH1ujzhGAat9Z2+uOrJsfeojH2jfk10GeXHLNXM
8bJujiVNWSLRZWCjXGGlHtxhO+tGcwNX9SEAVydnVIoDuhKTo2eJ6gT44kjoVsBr
jGzR/C1ibmIMw10yUBDMWwTfYLbrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUJDCJ
py3soSlduPQ9lnKXAUxiVc4wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzcyMEZEMjc2NDk2MDExRUVCQjVGMkMzODRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEF0wDQYJKoZIhvcNAQEL
BQADggEBANJhgoVN6BPOrwq9X4LmdW0o+EWUPFXqbPvqsnJF50rUgOyNdcv35SaE
TIK8b9amIdODSolo4t+evxsOmYXl0JV2ady47Hf/7FLRixGhENh+JD0joh4i3kC/
rCa/1E4i/H2MpulMwsooPHDr6/DE736u3VBcHw5xtXBrqkmTzjOogtmu1JNgY5Z1
x6pKgol+qpFkwHHIOD1n1b547t0WWXuBZMduZrSKGCN/n8GVYw6+hugVHQt6Q/dr
E5QjN8tq2DHT6RWaizNbynz0mNYdWUJMcq8NveMpF1I6ChtteuRXJE9mIEFX9wAi
9IRsnKyv+JpcgMs6S86HtRUZY1/Kdcg=
-----END CERTIFICATE-----
Generated at Wed Feb 5 14:55:30 2025 by rpki-client