Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F621E5B0FB4E11EC824938C6F1222468.roa
File: F621E5B0FB4E11EC824938C6F1222468.roa (raw, json)
Hash identifier: J5wHqa8BXC28+YPgTzBIDmAk/m20y2+0Jgwsj3LYhHc=
Subject key identifier: 13:C2:39:CB:C0:53:64:59:85:64:7D:76:2E:64:95:46:E3:8C:16:EC
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 08D2
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F621E5B0FB4E11EC824938C6F1222468.roa
Signing time: Mon 04 Jul 2022 04:08:30 +0000
ROA not before: Mon 04 Jul 2022 04:08:26 +0000
ROA not after: Tue 04 Jul 2023 04:08:26 +0000
asID: 207459
IP address blocks: 154.16.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2258 (0x8d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 4 04:08:26 2022 GMT
Not After : Jul 4 04:08:26 2023 GMT
Subject: CN=62c267be-5bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d4:6b:69:71:ad:c1:8a:e8:10:1e:ca:63:9e:
5a:20:de:87:79:3a:a8:16:08:51:78:68:c9:06:b2:
bb:c0:38:b7:cb:45:88:6d:91:b9:95:e2:0d:cb:f2:
64:20:b2:7d:e1:02:d4:9d:d1:b3:be:a4:16:9f:fc:
22:23:25:ba:c0:2c:a6:7f:f3:ad:a1:f7:ab:2f:6c:
03:f7:67:1b:3e:54:8f:0f:f0:6f:2a:c6:e7:8e:3e:
a7:82:30:47:b8:83:11:b9:ac:40:d6:96:a9:da:48:
23:95:ec:95:8e:4a:67:7a:a5:54:65:d5:e2:31:62:
d9:43:44:6e:ec:32:33:5a:22:be:da:9e:92:a1:61:
e5:f6:c4:b0:84:17:3c:6c:fc:dc:6c:ba:26:bc:1e:
a6:60:6f:cd:88:21:9f:79:09:1b:74:85:83:26:ea:
57:df:9f:d2:c7:7b:61:c7:a2:b5:c6:0f:15:2e:e8:
15:9c:f5:09:c7:3c:ba:6e:ac:6e:fb:3b:a5:f2:88:
7a:27:f9:ed:f6:c1:70:7a:98:f4:cf:74:47:e5:77:
ea:d6:d7:08:ee:1c:b8:ce:4a:7f:88:0d:c5:7f:84:
1f:23:3f:07:19:8f:21:8f:77:b0:51:43:4f:84:9e:
12:7c:cd:cc:c3:51:44:85:28:d2:5a:3b:c8:51:a4:
74:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C2:39:CB:C0:53:64:59:85:64:7D:76:2E:64:95:46:E3:8C:16:EC
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F621E5B0FB4E11EC824938C6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.187.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:b7:bf:e6:65:7e:0c:dc:1b:61:32:ed:71:01:c7:3b:a8:c4:
d2:5e:42:a0:01:58:25:aa:4e:27:70:14:c6:c1:1c:1a:2d:5a:
3e:b2:93:f0:b2:22:41:03:c6:7b:14:3b:56:a0:42:74:e1:5c:
fc:c4:7d:3f:cb:69:a4:3b:22:7b:6d:5b:8c:24:b5:ae:2c:22:
b7:a3:a9:ed:9c:10:2a:c0:d7:56:5d:f7:1e:1c:af:f0:68:1c:
1d:af:3e:85:a8:dd:46:0b:d4:c0:9e:89:4a:6c:0d:b7:3d:e3:
0c:2f:84:ad:50:50:a0:46:d4:f0:de:2a:48:f0:19:28:8a:51:
91:86:7b:a7:2e:e0:6a:83:fe:af:02:a4:44:ba:cb:f4:b9:02:
11:c2:3d:59:c0:9c:88:ce:6b:be:c7:9f:1d:ae:19:0e:18:ff:
e2:47:d4:f5:35:1d:a7:17:39:94:11:8b:9b:e9:79:a3:9c:63:
85:a3:42:e9:06:d5:0d:46:3c:99:01:d9:c6:27:9a:d2:37:e5:
c2:05:a7:ef:cd:f9:ff:14:fe:2c:e3:67:8a:41:d8:8d:b8:ed:
b1:87:a7:57:14:aa:20:35:8e:0e:d9:c3:50:33:12:cc:35:71:
da:70:5b:2e:91:f7:b9:db:f3:ac:b4:05:4d:d9:13:ab:53:0c:
61:f6:c6:0a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCNIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjA3MDQwNDA4MjZaFw0yMzA3MDQwNDA4MjZaMBgxFjAU
BgNVBAMMDTYyYzI2N2JlLTViZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDi1Gtpca3BiugQHspjnlog3od5OqgWCFF4aMkGsrvAOLfLRYhtkbmV4g3L
8mQgsn3hAtSd0bO+pBaf/CIjJbrALKZ/862h96svbAP3Zxs+VI8P8G8qxueOPqeC
MEe4gxG5rEDWlqnaSCOV7JWOSmd6pVRl1eIxYtlDRG7sMjNaIr7anpKhYeX2xLCE
Fzxs/Nxsuia8HqZgb82IIZ95CRt0hYMm6lffn9LHe2HHorXGDxUu6BWc9QnHPLpu
rG77O6XyiHon+e32wXB6mPTPdEfld+rW1wjuHLjOSn+IDcV/hB8jPwcZjyGPd7BR
Q0+EnhJ8zczDUUSFKNJaO8hRpHSVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUE8I5
y8BTZFmFZH12LmSVRuOMFuwwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0Y2MjFFNUIwRkI0RTExRUM4MjQ5MzhDNkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaELswDQYJKoZIhvcNAQEL
BQADggEBAGq3v+ZlfgzcG2Ey7XEBxzuoxNJeQqABWCWqTidwFMbBHBotWj6yk/Cy
IkEDxnsUO1agQnThXPzEfT/LaaQ7InttW4wkta4sIrejqe2cECrA11Zd9x4cr/Bo
HB2vPoWo3UYL1MCeiUpsDbc94wwvhK1QUKBG1PDeKkjwGSiKUZGGe6cu4GqD/q8C
pES6y/S5AhHCPVnAnIjOa77Hnx2uGQ4Y/+JH1PU1HacXOZQRi5vpeaOcY4WjQukG
1Q1GPJkB2cYnmtI35cIFp+/N+f8U/izjZ4pB2I247bGHp1cUqiA1jg7Zw1AzEsw1
cdpwWy6R97nb86y0BU3ZE6tTDGH2xgo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org