Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/80067CD4D4C511EB987C5024F8AEA228.roa
File: 80067CD4D4C511EB987C5024F8AEA228.roa (raw, json)
Hash identifier: RL1KW+e/FEF32xmiJKi8qcVNlOl3kbvHkFmPpsnET2c=
Subject key identifier: 51:9B:6B:26:A9:A6:82:99:E2:65:B4:4F:74:E4:CC:96:AD:6E:D7:0C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 05BF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/80067CD4D4C511EB987C5024F8AEA228.roa
Signing time: Thu 24 Jun 2021 08:23:49 +0000
ROA not before: Thu 24 Jun 2021 08:23:43 +0000
ROA not after: Fri 24 Jun 2022 08:23:43 +0000
asID: 3356
IP address blocks: 154.16.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1471 (0x5bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Jun 24 08:23:43 2021 GMT
Not After : Jun 24 08:23:43 2022 GMT
Subject: CN=60d44115-529d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5e:60:2a:01:46:7c:dc:0d:f1:b0:f7:04:bb:
c1:98:ea:2b:43:ed:b6:d9:40:4b:dc:0d:20:31:d1:
ec:88:92:aa:76:96:12:a6:64:0f:23:8d:0d:6d:54:
57:90:7b:fc:df:41:8f:3c:7b:34:44:ff:25:af:d4:
85:99:06:a8:dd:1b:9a:b0:6c:96:a1:5f:b8:9e:95:
fb:94:97:1a:e3:f2:11:c4:0c:f7:06:f2:34:d1:a1:
93:d6:85:fe:7c:67:2e:f8:22:51:32:18:c8:34:55:
2f:fc:ae:93:4c:90:ef:7c:35:96:87:a4:6e:00:ca:
3f:89:dc:08:ff:08:e4:0c:31:af:a5:a1:6d:3a:55:
6c:a6:71:17:a0:3c:ca:b3:8c:17:63:6d:b7:fa:e4:
25:de:6d:92:4d:05:86:08:b7:66:db:3e:5d:8a:ad:
c6:53:11:94:b7:34:7d:98:f2:3c:4f:4b:f8:b9:2d:
29:69:53:12:b1:71:e6:03:c9:c6:60:c8:c5:5d:f1:
51:8a:8e:c1:20:af:89:0c:01:b0:3c:2d:08:97:9d:
2f:52:bc:09:75:2d:0c:71:09:e5:fe:65:ca:16:bb:
76:c2:a2:21:c2:dc:5b:1c:39:f2:59:72:22:1f:f6:
3f:8f:f0:f7:4d:1f:5a:5f:63:de:25:f8:be:9d:e1:
b4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9B:6B:26:A9:A6:82:99:E2:65:B4:4F:74:E4:CC:96:AD:6E:D7:0C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/80067CD4D4C511EB987C5024F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.212.0/24
Signature Algorithm: sha256WithRSAEncryption
34:0d:a3:3a:9a:6a:3f:6e:89:c5:30:62:9f:48:cb:45:f2:7a:
ca:0a:35:5e:77:cd:ec:c6:ed:a8:71:55:62:97:23:27:30:c5:
55:bf:e3:a8:ea:28:63:78:89:aa:ef:af:1c:71:3d:0a:93:32:
0b:06:8f:98:f1:38:ca:2f:89:de:d4:d7:6a:ee:30:0a:3b:40:
a2:fc:00:68:c7:ea:1f:dd:30:29:73:c2:2a:79:b9:f6:fa:96:
2b:2b:c3:1c:76:51:46:42:2e:12:f8:10:fa:b9:46:ec:1e:bb:
c0:57:25:e9:f7:f1:60:23:31:5f:8f:40:54:8d:da:70:48:86:
7b:5e:47:37:0d:85:3a:df:9d:a8:05:71:02:d2:10:01:ed:76:
d4:7a:7c:49:4f:c5:d8:d4:24:5e:7c:12:43:bb:20:dd:b2:2a:
f4:40:f9:62:aa:33:21:9d:b8:a9:31:74:a5:66:9d:13:f5:dc:
98:3e:28:8c:05:70:a9:bc:25:b3:f2:26:55:ba:14:1a:e0:70:
81:da:67:0d:ef:b4:91:93:98:44:81:2e:bd:09:51:ee:98:9b:
be:3f:71:fd:bf:36:82:4c:f9:02:f8:54:75:7a:a6:5d:9a:e5:
76:1a:46:22:cb:78:3f:2a:6a:cd:32:a2:d9:51:56:84:3a:a5:
67:2d:ce:33
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBb8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMTA2MjQwODIzNDNaFw0yMjA2MjQwODIzNDNaMBgxFjAU
BgNVBAMTDTYwZDQ0MTE1LTUyOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDhXmAqAUZ83A3xsPcEu8GY6itD7bbZQEvcDSAx0eyIkqp2lhKmZA8jjQ1t
VFeQe/zfQY88ezRE/yWv1IWZBqjdG5qwbJahX7ielfuUlxrj8hHEDPcG8jTRoZPW
hf58Zy74IlEyGMg0VS/8rpNMkO98NZaHpG4Ayj+J3Aj/COQMMa+loW06VWymcReg
PMqzjBdjbbf65CXebZJNBYYIt2bbPl2KrcZTEZS3NH2Y8jxPS/i5LSlpUxKxceYD
ycZgyMVd8VGKjsEgr4kMAbA8LQiXnS9SvAl1LQxxCeX+ZcoWu3bCoiHC3FscOfJZ
ciIf9j+P8PdNH1pfY94l+L6d4bRdAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUUZtr
JqmmgpniZbRPdOTMlq1u1wwwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzgwMDY3Q0Q0RDRDNTExRUI5ODdDNTAyNEY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaENQwDQYJKoZIhvcNAQEL
BQADggEBADQNozqaaj9uicUwYp9Iy0XyesoKNV53zezG7ahxVWKXIycwxVW/46jq
KGN4iarvrxxxPQqTMgsGj5jxOMovid7U12ruMAo7QKL8AGjH6h/dMClzwip5ufb6
lisrwxx2UUZCLhL4EPq5Ruweu8BXJen38WAjMV+PQFSN2nBIhnteRzcNhTrfnagF
cQLSEAHtdtR6fElPxdjUJF58EkO7IN2yKvRA+WKqMyGduKkxdKVmnRP13Jg+KIwF
cKm8JbPyJlW6FBrgcIHaZw3vtJGTmESBLr0JUe6Ym74/cf2/NoJM+QL4VHV6pl2a
5XYaRiLLeD8qas0yotlRVoQ6pWctzjM=
-----END CERTIFICATE-----
Generated at Wed Feb 5 15:03:00 2025 by rpki-client