Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7A3B00D6699E11ECAE1AE2AA5A40D577.roa
File: 7A3B00D6699E11ECAE1AE2AA5A40D577.roa (raw, json)
Hash identifier: BGyqaxJI4wO4pdjMbgySjfmiKcAezyOlFqjOgWyPxSI=
Subject key identifier: 4F:1A:E7:E2:5B:2B:D6:E3:46:A4:98:9C:98:2C:1F:D5:A7:9B:FB:C4
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0755
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7A3B00D6699E11ECAE1AE2AA5A40D577.roa
Signing time: Thu 30 Dec 2021 18:29:52 +0000
ROA not before: Thu 30 Dec 2021 18:29:47 +0000
ROA not after: Fri 30 Dec 2022 18:29:47 +0000
asID: 207326
IP address blocks: 154.16.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1877 (0x755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Dec 30 18:29:47 2021 GMT
Not After : Dec 30 18:29:47 2022 GMT
Subject: CN=61cdfaa0-1eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:83:9d:97:ab:76:d5:49:51:53:ad:30:8c:
9f:66:c1:85:ab:a5:18:6c:ef:e7:2d:6c:73:b6:f0:
a3:73:87:42:ec:18:6b:1c:33:dd:f7:ec:6a:1d:84:
74:ee:52:bf:60:2d:1f:50:5c:5d:92:f8:2f:e4:d1:
a4:18:a4:e4:d5:3c:dd:f5:94:b5:ea:83:c2:52:21:
34:c1:48:b8:29:fc:b7:20:3d:9a:8c:10:e4:0f:1b:
fa:62:52:e5:74:0e:83:cf:83:77:98:c0:18:4f:7b:
1e:df:21:7a:57:0f:3a:82:d1:b9:8f:e0:7b:1d:76:
39:f6:61:3c:06:c6:6c:f1:90:e3:cb:94:14:8f:3d:
12:c3:d3:ee:43:bf:cb:18:c5:98:e4:5f:d5:d3:cc:
8b:ec:e0:4e:f8:65:2d:6b:6b:65:0b:82:02:96:b8:
d7:bd:fa:e0:42:33:f4:f5:ae:b5:5b:0e:4b:56:3c:
8f:32:08:8c:a0:d7:83:87:e8:4f:30:1d:17:50:29:
38:5c:55:da:ea:78:5b:9d:d6:76:94:b0:3a:e2:72:
c1:92:7b:98:bb:89:68:a6:b7:f7:b5:e7:b7:ad:0e:
06:ab:d7:5d:ec:21:87:3b:b9:d6:ab:09:9b:d0:83:
cf:6d:56:b4:8e:26:d8:91:f7:d5:b1:02:50:f5:99:
36:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1A:E7:E2:5B:2B:D6:E3:46:A4:98:9C:98:2C:1F:D5:A7:9B:FB:C4
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7A3B00D6699E11ECAE1AE2AA5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.77.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ca:d6:de:35:74:1a:36:f4:cd:c2:db:23:8c:05:33:3f:80:
11:82:6d:24:96:9b:42:2f:22:62:11:7c:37:9d:22:d0:71:f1:
d8:43:c9:c7:60:5d:e2:8d:8c:9c:54:86:fd:6c:00:08:42:7a:
5f:41:ea:de:fb:f8:5f:d2:21:3b:52:28:96:c9:db:ab:88:34:
f1:c6:84:1c:b4:6c:ae:06:e7:d8:6a:bf:29:c5:49:0e:a5:dc:
1b:3b:e7:9c:d0:45:60:c4:d1:62:fe:42:e4:fc:9d:15:57:a8:
56:d6:ea:e0:40:23:90:d7:ed:e0:c2:d1:74:b4:5e:77:fe:0e:
06:db:dc:8f:97:c8:99:fc:fc:7e:dd:9e:f3:76:f8:7e:14:71:
25:b4:1a:29:01:d9:c7:09:32:ae:66:a9:43:c8:61:49:d2:50:
8f:f1:02:f9:8b:55:24:0f:a7:72:55:e7:64:3b:df:8a:b9:a1:
99:cf:4e:61:df:4c:bd:29:51:07:e9:c1:c4:5c:5d:b9:91:58:
df:b7:88:70:12:89:e9:01:70:ae:4a:e4:f7:4a:d9:49:df:3b:
39:6e:dd:50:27:69:1e:01:19:4a:35:e1:6d:a0:ea:51:e9:65:
95:9a:eb:6a:ad:96:f9:b3:4c:90:dd:a2:6f:ad:a2:6a:e8:fb:
a9:67:2e:08
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB1UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMTEyMzAxODI5NDdaFw0yMjEyMzAxODI5NDdaMBgxFjAU
BgNVBAMMDTYxY2RmYWEwLTFlZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrTYOdl6t21UlRU60wjJ9mwYWrpRhs7+ctbHO28KNzh0LsGGscM9337God
hHTuUr9gLR9QXF2S+C/k0aQYpOTVPN31lLXqg8JSITTBSLgp/LcgPZqMEOQPG/pi
UuV0DoPPg3eYwBhPex7fIXpXDzqC0bmP4Hsddjn2YTwGxmzxkOPLlBSPPRLD0+5D
v8sYxZjkX9XTzIvs4E74ZS1ra2ULggKWuNe9+uBCM/T1rrVbDktWPI8yCIyg14OH
6E8wHRdQKThcVdrqeFud1naUsDricsGSe5i7iWimt/e157etDgar113sIYc7udar
CZvQg89tVrSOJtiR99WxAlD1mTaFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUTxrn
4lsr1uNGpJicmCwf1aeb+8QwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzdBM0IwMEQ2Njk5RTExRUNBRTFBRTJBQTVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEE0wDQYJKoZIhvcNAQEL
BQADggEBAGTK1t41dBo29M3C2yOMBTM/gBGCbSSWm0IvImIRfDedItBx8dhDycdg
XeKNjJxUhv1sAAhCel9B6t77+F/SITtSKJbJ26uINPHGhBy0bK4G59hqvynFSQ6l
3Bs755zQRWDE0WL+QuT8nRVXqFbW6uBAI5DX7eDC0XS0Xnf+Dgbb3I+XyJn8/H7d
nvN2+H4UcSW0GikB2ccJMq5mqUPIYUnSUI/xAvmLVSQPp3JV52Q734q5oZnPTmHf
TL0pUQfpwcRcXbmRWN+3iHASiekBcK5K5PdK2UnfOzlu3VAnaR4BGUo14W2g6lHp
ZZWa62qtlvmzTJDdom+tomro+6lnLgg=
-----END CERTIFICATE-----
Generated at Wed Feb 5 14:51:17 2025 by rpki-client