Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C87D3BEC90B111E9A8A56813F8AEA228.roa
File: C87D3BEC90B111E9A8A56813F8AEA228.roa (raw, json)
Hash identifier: jq6iYbxi6rNYYcpuvOuMgrSrh3cOj7qKDTHgedfKtyk=
Subject key identifier: 31:1B:9E:24:91:2F:B4:43:38:B8:00:06:83:47:4C:0B:0C:2C:C7:EC
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 014A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C87D3BEC90B111E9A8A56813F8AEA228.roa
Signing time: Mon 17 Jun 2019 03:41:27 +0000
ROA not before: Mon 17 Jun 2019 03:41:21 +0000
ROA not after: Fri 17 Jun 2022 03:41:21 +0000
asID: 397423
IP address blocks: 154.127.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 17 03:41:21 2019 GMT
Not After : Jun 17 03:41:21 2022 GMT
Subject: CN=5d070be6-af9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:c3:f7:a8:95:71:e0:da:2f:9a:77:80:dd:
da:a5:3e:9b:a1:0a:54:1e:40:39:bf:da:9d:23:c7:
8f:00:48:31:08:d3:6c:f6:21:5b:6f:c7:5c:a7:16:
9f:7a:1f:35:1f:5e:7b:99:ee:cb:14:f7:18:9d:5f:
cb:e5:ea:64:77:4e:4f:76:dc:a3:8c:52:2d:8b:e4:
95:ff:70:d8:f2:31:0c:60:82:f7:28:4c:bd:83:41:
28:d7:67:07:61:98:14:df:16:ef:01:e6:c9:14:8b:
4e:b3:fb:5a:88:fa:bb:62:8f:70:58:e1:fa:d0:f5:
7c:4b:e9:c1:01:e6:35:6a:f2:33:d7:a0:9a:f0:f0:
8e:8e:5f:25:ff:ca:a4:b9:a2:6e:82:69:ef:55:7d:
30:3f:cc:c4:8f:cf:ce:28:02:cf:c8:60:fe:b3:1e:
46:3b:a6:a8:f6:de:67:4d:33:f6:d5:8f:9c:b0:3d:
da:5d:c8:d1:cd:fe:00:f4:e1:88:43:03:a7:b9:d7:
b6:86:57:7b:75:e4:37:d8:55:fa:0c:a3:53:2a:da:
aa:28:ba:d7:e1:28:d9:03:08:d2:9f:45:0f:57:59:
da:a9:12:56:42:fa:dc:99:fb:cd:4d:fe:39:ee:ee:
1a:38:29:13:53:90:3d:39:57:2e:b8:e1:f5:35:3d:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1B:9E:24:91:2F:B4:43:38:B8:00:06:83:47:4C:0B:0C:2C:C7:EC
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C87D3BEC90B111E9A8A56813F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
154.127.54.0/24
Signature Algorithm: sha256WithRSAEncryption
24:dc:4d:20:24:37:c9:d9:89:98:b9:33:02:8d:73:88:9c:db:
04:43:0f:38:db:09:d9:2a:97:5d:3a:a6:23:1e:97:7e:32:a7:
c3:c1:58:94:27:ed:ff:60:cd:42:7a:ca:be:78:e6:f4:16:6d:
56:92:c5:d8:00:da:95:c9:04:7c:a8:11:5f:7a:65:37:d2:29:
fe:a9:46:59:50:99:cb:39:d5:f7:3d:d3:4a:75:7e:61:d1:1f:
cc:e4:19:0a:b9:ea:a6:54:20:dc:67:5b:3c:c7:02:b4:6b:0d:
ba:30:81:55:96:49:a4:0f:a0:20:33:6c:0b:70:49:ea:cc:41:
16:4e:2d:58:56:7a:2b:9d:2c:da:99:f6:b0:f1:05:9f:90:e2:
b4:e8:49:53:13:2e:9b:5b:be:71:31:a3:2b:43:6c:21:c6:57:
aa:cf:14:a5:74:f4:d6:d8:71:98:b1:6d:21:0d:aa:8d:06:51:
88:f1:04:ba:45:7d:7c:3b:81:00:6e:49:d7:3f:18:68:67:10:
bd:32:32:95:d6:cb:a2:5b:47:b9:b2:de:bc:bd:9b:6e:9f:04:
59:ae:21:ae:e1:32:fd:94:b2:92:cf:a6:eb:06:be:58:09:9c:
7b:c2:0d:ce:ac:0d:6e:56:16:c7:ed:ff:9b:9f:7f:4f:6c:53:
b4:22:ad:dd
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgICAUowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0xOTA2MTcwMzQxMjFaFw0yMjA2MTcwMzQxMjFaMBgxFjAU
BgNVBAMTDTVkMDcwYmU2LWFmOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCZX8P3qJVx4NovmneA3dqlPpuhClQeQDm/2p0jx48ASDEI02z2IVtvx1yn
Fp96HzUfXnuZ7ssU9xidX8vl6mR3Tk923KOMUi2L5JX/cNjyMQxggvcoTL2DQSjX
ZwdhmBTfFu8B5skUi06z+1qI+rtij3BY4frQ9XxL6cEB5jVq8jPXoJrw8I6OXyX/
yqS5om6Cae9VfTA/zMSPz84oAs/IYP6zHkY7pqj23mdNM/bVj5ywPdpdyNHN/gD0
4YhDA6e517aGV3t15DfYVfoMo1Mq2qooutfhKNkDCNKfRQ9XWdqpElZC+tyZ+81N
/jnu7ho4KRNTkD05Vy644fU1PZ+zAgMBAAGjggJuMIICajAdBgNVHQ4EFgQUMRue
JJEvtEM4uAAGg0dMCwwsx+wwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0M4N0QzQkVDOTBCMTExRTlBOEE1NjgxM0Y4QUVBMjI4LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJp/NjANBgkqhkiG9w0BAQsFAAOCAQEA
JNxNICQ3ydmJmLkzAo1ziJzbBEMPONsJ2SqXXTqmIx6XfjKnw8FYlCft/2DNQnrK
vnjm9BZtVpLF2ADalckEfKgRX3plN9Ip/qlGWVCZyznV9z3TSnV+YdEfzOQZCrnq
plQg3GdbPMcCtGsNujCBVZZJpA+gIDNsC3BJ6sxBFk4tWFZ6K50s2pn2sPEFn5Di
tOhJUxMum1u+cTGjK0NsIcZXqs8UpXT01thxmLFtIQ2qjQZRiPEEukV9fDuBAG5J
1z8YaGcQvTIyldbLoltHubLevL2bbp8EWa4hruEy/ZSyks+m6wa+WAmce8INzqwN
blYWx+3/m59/T2xTtCKt3Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org