Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/96270A820D4211EC9BBAA17DD8A014CE.roa
File: 96270A820D4211EC9BBAA17DD8A014CE.roa (raw, json)
Hash identifier: 4LXG4XCax8Xif8jx2ndmiiQb/dp8DEpiYtvt5s975PM=
Subject key identifier: DD:26:BF:6D:FC:DC:E3:D0:CE:E2:5C:BC:77:F6:01:F4:57:76:0D:84
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 065C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/96270A820D4211EC9BBAA17DD8A014CE.roa
Signing time: Sat 04 Sep 2021 05:40:18 +0000
ROA not before: Sat 04 Sep 2021 05:40:15 +0000
ROA not after: Sun 04 Sep 2022 05:40:15 +0000
asID: 399838
IP address blocks: 154.16.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1628 (0x65c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 4 05:40:15 2021 GMT
Not After : Sep 4 05:40:15 2022 GMT
Subject: CN=613306c2-8e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:43:d6:e8:f0:7a:57:46:22:f3:98:c0:fe:
da:a7:39:9e:ae:b1:64:88:92:64:ef:c0:c9:d9:50:
9c:89:31:37:46:06:b4:92:34:d8:27:29:b6:95:a3:
a5:e7:c9:d9:26:7f:af:58:e9:41:0b:07:c9:b0:bc:
bb:8c:a3:b4:86:6d:32:db:ae:1a:e9:3b:92:31:d3:
33:ab:60:61:0f:02:56:53:24:b4:19:66:89:bb:f1:
6b:fe:8f:4a:ef:4c:b5:8d:ff:03:f5:22:05:b2:f3:
1c:d9:e2:e0:c3:1d:ae:5e:df:0c:c1:d4:28:47:81:
f2:c0:c9:25:07:16:24:53:e7:3d:d7:61:0e:2c:40:
74:e1:47:41:16:ce:62:e1:99:76:84:32:23:2c:cb:
27:84:43:7b:fc:d6:3c:00:70:f2:da:d9:c8:4d:a0:
8a:9e:bd:85:39:94:3b:ec:cd:86:9e:d2:10:c3:09:
a3:7c:d6:74:0e:46:ee:a4:25:54:31:da:8f:bb:fc:
98:be:b5:7b:84:7d:7d:cb:05:0f:09:f1:34:7e:f4:
a9:54:bb:74:43:64:a2:1f:06:56:a1:3e:ad:66:d2:
a5:b4:ff:62:4e:15:36:e8:3f:11:c4:d3:35:d2:ea:
91:3e:64:79:9a:47:75:61:5c:79:1d:c6:6a:07:3c:
0b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:26:BF:6D:FC:DC:E3:D0:CE:E2:5C:BC:77:F6:01:F4:57:76:0D:84
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/96270A820D4211EC9BBAA17DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.130.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e7:71:05:c9:41:e5:2d:b7:8b:33:d7:ed:72:de:79:8c:10:
de:ef:e7:cc:26:e0:19:df:e2:ba:86:ba:06:f3:c6:68:57:1c:
16:41:fd:51:b4:5d:b5:0b:6f:4b:23:2f:3d:67:d1:3d:91:74:
3f:51:44:cc:87:ba:95:63:02:c8:10:11:1a:dd:9b:91:90:3c:
f5:b7:a0:f8:e3:4b:57:eb:76:31:42:35:d4:ae:2d:4f:07:dc:
e4:71:ae:4e:4a:da:22:f8:4c:14:90:34:0f:4a:29:19:1c:fb:
bd:0f:13:c3:e0:4d:23:e6:74:fe:09:a4:16:30:84:a7:3b:96:
13:e3:e4:6e:0e:ab:39:da:02:8e:20:70:39:1e:36:8b:e7:4d:
2b:0d:b3:59:38:d7:b0:9e:51:30:f0:24:4f:ba:e8:f4:50:e6:
7e:2d:b0:34:60:1e:85:bd:4d:e7:53:4e:bd:9e:aa:2c:03:5f:
c7:d2:0a:49:25:55:55:df:0d:94:7e:94:f9:92:69:44:1d:7f:
1b:c5:66:14:dd:92:45:28:00:e7:91:01:f1:99:a2:eb:06:81:
63:61:2d:0e:b7:1f:3e:b2:f1:99:d2:06:3d:3f:13:4a:d9:d8:
b6:c0:c9:67:10:a5:ae:09:2d:a5:c4:82:76:a1:53:84:e5:04:
7a:2e:08:c7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBlwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMTA5MDQwNTQwMTVaFw0yMjA5MDQwNTQwMTVaMBgxFjAU
BgNVBAMMDTYxMzMwNmMyLThlMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWQ0PW6PB6V0Yi85jA/tqnOZ6usWSIkmTvwMnZUJyJMTdGBrSSNNgnKbaV
o6Xnydkmf69Y6UELB8mwvLuMo7SGbTLbrhrpO5Ix0zOrYGEPAlZTJLQZZom78Wv+
j0rvTLWN/wP1IgWy8xzZ4uDDHa5e3wzB1ChHgfLAySUHFiRT5z3XYQ4sQHThR0EW
zmLhmXaEMiMsyyeEQ3v81jwAcPLa2chNoIqevYU5lDvszYae0hDDCaN81nQORu6k
JVQx2o+7/Ji+tXuEfX3LBQ8J8TR+9KlUu3RDZKIfBlahPq1m0qW0/2JOFTboPxHE
0zXS6pE+ZHmaR3VhXHkdxmoHPAtrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU3Sa/
bfzc49DO4ly8d/YB9Fd2DYQwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4Lzk2MjcwQTgyMEQ0MjExRUM5QkJBQTE3REQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEIIwDQYJKoZIhvcNAQEL
BQADggEBAIzncQXJQeUtt4sz1+1y3nmMEN7v58wm4Bnf4rqGugbzxmhXHBZB/VG0
XbULb0sjLz1n0T2RdD9RRMyHupVjAsgQERrdm5GQPPW3oPjjS1frdjFCNdSuLU8H
3ORxrk5K2iL4TBSQNA9KKRkc+70PE8PgTSPmdP4JpBYwhKc7lhPj5G4OqznaAo4g
cDkeNovnTSsNs1k417CeUTDwJE+66PRQ5n4tsDRgHoW9TedTTr2eqiwDX8fSCkkl
VVXfDZR+lPmSaUQdfxvFZhTdkkUoAOeRAfGZousGgWNhLQ63Hz6y8ZnSBj0/E0rZ
2LbAyWcQpa4JLaXEgnahU4TlBHouCMc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org