Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/89971E1C539511ECB00C0A44D8A014CE.roa
File: 89971E1C539511ECB00C0A44D8A014CE.roa (raw, json)
Hash identifier: 7gj5gc3MEL830TwiAprNM8KsXB3FU/H3IfQlajVRlP4=
Subject key identifier: EE:F9:E3:98:4D:3A:09:9F:CC:D5:3E:93:F0:3D:F0:8A:B0:BE:3D:D5
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0719
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/89971E1C539511ECB00C0A44D8A014CE.roa
Signing time: Thu 02 Dec 2021 17:30:26 +0000
ROA not before: Thu 02 Dec 2021 17:30:22 +0000
ROA not after: Fri 02 Dec 2022 17:30:22 +0000
asID: 139660
IP address blocks: 154.16.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1817 (0x719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 2 17:30:22 2021 GMT
Not After : Dec 2 17:30:22 2022 GMT
Subject: CN=61a902b2-d06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:29:84:fa:e7:7d:1a:50:c8:25:66:db:39:
9b:d0:4e:72:f6:20:a1:6f:37:9f:20:22:56:d7:ce:
79:21:50:b1:41:71:a4:d0:7a:3c:f8:12:a7:c6:0d:
be:0b:90:d2:24:77:10:00:2d:a5:c0:3d:d3:26:02:
b0:b4:a5:9c:75:0c:d9:a8:b2:59:42:09:54:94:09:
3c:04:4a:13:03:b6:21:27:b2:fe:35:fd:5d:51:14:
fb:32:dd:23:e7:91:8d:f4:3e:15:f3:86:ff:82:e8:
f3:ce:b8:40:39:cb:66:2b:3f:7b:fc:3c:fd:af:f8:
36:23:6e:55:03:47:be:4c:54:2d:f8:88:b6:a6:69:
3a:58:5e:b6:b4:44:65:de:40:3d:09:fb:50:9c:e9:
07:ec:c5:f2:5c:54:74:ef:f2:a1:af:25:e3:11:de:
13:ef:90:37:0c:39:0d:dd:9b:a6:ce:2c:8f:00:be:
a6:ec:47:bc:a2:80:4a:1f:c7:df:b3:02:90:94:79:
0b:be:37:37:11:7c:bb:90:47:cd:65:f5:d4:98:d2:
fb:2b:a1:37:86:1f:2f:bd:27:fd:d7:9b:bb:8d:fd:
15:1b:2a:c2:2b:9d:54:56:87:2d:f8:27:56:56:73:
98:b2:a9:09:4c:e9:de:e3:0e:2f:bf:04:22:03:10:
42:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F9:E3:98:4D:3A:09:9F:CC:D5:3E:93:F0:3D:F0:8A:B0:BE:3D:D5
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/89971E1C539511ECB00C0A44D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.99.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:f8:8a:bf:5e:cb:13:a0:57:64:4b:36:98:2b:34:f4:04:ba:
97:56:b7:b3:72:08:79:5a:8d:9e:ab:bb:a1:4e:c6:2c:ed:f1:
15:d4:c2:95:19:4e:93:d6:c6:fb:60:ab:9f:79:0f:64:34:36:
cf:cb:bc:c9:93:45:77:f9:a9:0e:8f:db:51:c0:49:68:33:e4:
d2:aa:11:1d:54:67:df:61:15:3b:f0:8d:3a:86:a9:de:d6:2e:
78:2f:07:d3:55:a1:9c:1d:75:8a:9b:fe:ff:09:91:d6:30:b5:
9c:9b:81:6a:d3:5e:67:3b:4d:60:62:03:2f:19:6a:9f:8b:26:
80:10:74:b4:43:cc:72:ad:2a:4a:a2:cb:f4:a4:30:26:6c:47:
5e:fe:0b:d3:47:a7:a7:22:c6:47:b9:67:08:a9:6f:c8:9c:d4:
44:e2:f1:05:ca:69:27:53:0c:ee:80:5a:27:16:e5:53:9e:21:
d3:0d:70:e3:d5:83:f2:18:c3:2b:e9:4c:fd:b4:75:af:b1:d7:
68:1e:5e:2f:0f:c4:22:70:9a:0c:be:21:65:af:c7:44:a6:7a:
93:f7:91:47:dc:7a:f8:9d:47:e9:5a:1f:e5:b9:14:cf:98:0a:
93:c6:e9:91:5d:d5:95:fb:1c:54:cf:04:90:35:2b:8d:78:b0:
e0:89:d5:32
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBxkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMTEyMDIxNzMwMjJaFw0yMjEyMDIxNzMwMjJaMBgxFjAU
BgNVBAMMDTYxYTkwMmIyLWQwNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQfCmE+ud9GlDIJWbbOZvQTnL2IKFvN58gIlbXznkhULFBcaTQejz4EqfG
Db4LkNIkdxAALaXAPdMmArC0pZx1DNmosllCCVSUCTwEShMDtiEnsv41/V1RFPsy
3SPnkY30PhXzhv+C6PPOuEA5y2YrP3v8PP2v+DYjblUDR75MVC34iLamaTpYXra0
RGXeQD0J+1Cc6QfsxfJcVHTv8qGvJeMR3hPvkDcMOQ3dm6bOLI8AvqbsR7yigEof
x9+zApCUeQu+NzcRfLuQR81l9dSY0vsroTeGHy+9J/3Xm7uN/RUbKsIrnVRWhy34
J1ZWc5iyqQlM6d7jDi+/BCIDEEKPAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU7vnj
mE06CZ/M1T6T8D3wirC+PdUwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4Lzg5OTcxRTFDNTM5NTExRUNCMDBDMEE0NEQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEGMwDQYJKoZIhvcNAQEL
BQADggEBAKz4ir9eyxOgV2RLNpgrNPQEupdWt7NyCHlajZ6ru6FOxizt8RXUwpUZ
TpPWxvtgq595D2Q0Ns/LvMmTRXf5qQ6P21HASWgz5NKqER1UZ99hFTvwjTqGqd7W
LngvB9NVoZwddYqb/v8JkdYwtZybgWrTXmc7TWBiAy8Zap+LJoAQdLRDzHKtKkqi
y/SkMCZsR17+C9NHp6cixke5Zwipb8ic1ETi8QXKaSdTDO6AWicW5VOeIdMNcOPV
g/IYwyvpTP20da+x12geXi8PxCJwmgy+IWWvx0SmepP3kUfcevidR+laH+W5FM+Y
CpPG6ZFd1ZX7HFTPBJA1K414sOCJ1TI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org