Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A26EE18C2A0311ED8AAC1BC7F1222468.roa
File: A26EE18C2A0311ED8AAC1BC7F1222468.roa (raw, json)
Hash identifier: ezKSifFFaqCI2ifwzyALjHVfo6NQnl7PeS1XjYlG5Dw=
Subject key identifier: 1B:20:4F:09:AA:2C:75:D6:BD:E8:48:4C:5D:A6:3E:84:6A:13:CD:8A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 097E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A26EE18C2A0311ED8AAC1BC7F1222468.roa
Signing time: Thu 01 Sep 2022 14:37:42 +0000
ROA not before: Thu 01 Sep 2022 14:37:38 +0000
ROA not after: Thu 05 Sep 2024 14:37:38 +0000
asID: 22773
IP address blocks: 154.16.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2430 (0x97e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Sep 1 14:37:38 2022 GMT
Not After : Sep 5 14:37:38 2024 GMT
Subject: CN=6310c3b6-a7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:b3:56:45:f0:09:56:30:58:88:af:1c:41:
ad:db:d1:c0:40:bf:d5:61:da:21:45:27:28:7b:1f:
06:d5:55:2c:c7:f3:13:99:f1:08:45:35:d6:74:1f:
f4:85:98:ad:5f:c0:da:d0:16:11:2c:40:94:2b:60:
9b:d6:7f:a8:76:b0:fc:2b:a5:a5:24:28:50:1c:8a:
ff:06:7b:93:8c:af:6f:37:9c:d7:d1:10:06:a6:34:
cb:63:0b:9f:32:5d:eb:92:2d:2c:73:05:54:a5:0a:
bc:33:85:f2:23:1f:17:48:42:6a:84:d4:4f:09:aa:
78:4e:c7:5f:47:35:90:13:ff:ba:b4:06:31:63:d0:
f9:93:07:2d:e0:ac:8c:1c:a8:61:24:a6:e5:35:39:
90:56:e0:a3:df:22:9f:69:e7:12:3e:ce:33:d6:8c:
2a:eb:fe:5f:c2:79:cb:4f:3f:ad:90:7a:7d:85:a1:
40:45:17:72:ed:f6:61:87:62:a6:80:e9:79:4d:7f:
1f:a6:6d:28:2d:51:71:d4:26:b5:33:11:76:d3:d5:
3b:59:6a:96:08:cb:36:df:29:f8:5f:08:64:71:b9:
a8:77:b2:e2:6e:f0:15:af:f8:a9:a9:d5:42:cb:47:
bb:75:f8:79:32:13:92:80:d3:0b:a4:a4:0f:f8:17:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:20:4F:09:AA:2C:75:D6:BD:E8:48:4C:5D:A6:3E:84:6A:13:CD:8A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A26EE18C2A0311ED8AAC1BC7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.194.0/24
Signature Algorithm: sha256WithRSAEncryption
60:12:69:8d:82:13:8a:d7:fb:e8:e1:ba:0e:de:da:fc:80:2e:
08:c7:1d:fc:d4:53:6a:74:fd:ed:ad:0c:c7:16:2e:50:08:10:
1a:5a:c7:9e:16:8c:f8:36:14:f3:e0:59:00:32:ab:f7:a8:6e:
ab:f3:4f:ec:8b:71:97:ad:72:f2:7a:70:6f:e3:91:23:10:1a:
18:10:93:2f:df:f8:cb:0e:59:fc:c9:25:d5:e0:97:bc:6d:5a:
2e:4b:8d:8c:22:82:d1:4a:ca:07:ef:28:7c:92:bf:3f:ea:6c:
fa:51:7c:02:67:64:9e:53:ea:d9:c3:0a:a3:1b:57:bc:c6:4d:
a4:15:31:4c:e7:f7:c8:00:c2:bb:cb:9e:55:04:9d:86:b1:ed:
87:4a:62:e7:bf:d9:fa:5e:9e:fa:91:3c:f0:1a:43:ba:cd:2a:
48:14:65:15:9e:50:e9:c4:15:2a:e7:2d:c3:db:4e:cf:7d:1e:
d3:1f:cf:b7:9e:40:04:36:2b:47:58:8a:54:e0:23:ed:b4:86:
7f:73:df:f0:07:97:16:ce:8a:2e:d5:43:2a:eb:10:65:43:28:
a0:23:3f:19:dd:cc:d9:51:00:8c:d2:2c:62:f1:78:1a:df:68:
b0:17:15:8d:5e:ae:cf:41:a1:a6:82:a4:e3:5b:dd:59:40:c2:
81:be:10:96
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCX4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjA5MDExNDM3MzhaFw0yNDA5MDUxNDM3MzhaMBgxFjAU
BgNVBAMMDTYzMTBjM2I2LWE3ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0c7NWRfAJVjBYiK8cQa3b0cBAv9Vh2iFFJyh7HwbVVSzH8xOZ8QhFNdZ0
H/SFmK1fwNrQFhEsQJQrYJvWf6h2sPwrpaUkKFAciv8Ge5OMr283nNfREAamNMtj
C58yXeuSLSxzBVSlCrwzhfIjHxdIQmqE1E8JqnhOx19HNZAT/7q0BjFj0PmTBy3g
rIwcqGEkpuU1OZBW4KPfIp9p5xI+zjPWjCrr/l/CectPP62Qen2FoUBFF3Lt9mGH
YqaA6XlNfx+mbSgtUXHUJrUzEXbT1TtZapYIyzbfKfhfCGRxuah3suJu8BWv+Kmp
1ULLR7t1+HkyE5KA0wukpA/4FysVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUGyBP
Caosdda96EhMXaY+hGoTzYowHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0EyNkVFMThDMkEwMzExRUQ4QUFDMUJDN0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEMIwDQYJKoZIhvcNAQEL
BQADggEBAGASaY2CE4rX++jhug7e2vyALgjHHfzUU2p0/e2tDMcWLlAIEBpax54W
jPg2FPPgWQAyq/eobqvzT+yLcZetcvJ6cG/jkSMQGhgQky/f+MsOWfzJJdXgl7xt
Wi5LjYwigtFKygfvKHySvz/qbPpRfAJnZJ5T6tnDCqMbV7zGTaQVMUzn98gAwrvL
nlUEnYax7YdKYue/2fpenvqRPPAaQ7rNKkgUZRWeUOnEFSrnLcPbTs99HtMfz7ee
QAQ2K0dYilTgI+20hn9z3/AHlxbOii7VQyrrEGVDKKAjPxndzNlRAIzSLGLxeBrf
aLAXFY1ers9BoaaCpONb3VlAwoG+EJY=
-----END CERTIFICATE-----
Generated at Wed Feb 5 14:49:42 2025 by rpki-client