Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FD0816C88C8D11EB9736097DF8AEA228.roa
File: FD0816C88C8D11EB9736097DF8AEA228.roa (raw, json)
Hash identifier: 6eUujEIBvCnkISi6HvWuDA3kA9SgEVtzcCvOf70cYNM=
Subject key identifier: FD:B0:11:BD:64:A5:BD:3B:B5:C2:76:C5:13:38:DF:3B:17:40:35:A8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0500
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FD0816C88C8D11EB9736097DF8AEA228.roa
Signing time: Wed 24 Mar 2021 10:45:03 +0000
ROA not before: Wed 24 Mar 2021 10:44:59 +0000
ROA not after: Thu 24 Mar 2022 10:44:59 +0000
asID: 26636
IP address blocks: 154.16.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1280 (0x500)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 24 10:44:59 2021 GMT
Not After : Mar 24 10:44:59 2022 GMT
Subject: CN=605b182f-85dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:00:13:5b:c5:d3:04:22:5d:d0:04:f5:9b:
b1:e3:76:6c:92:7b:7d:70:6e:82:b6:ed:6d:81:0f:
71:bd:c4:b8:6d:a2:50:5f:c8:46:58:cb:f3:25:f9:
53:57:bf:e3:31:c4:8b:41:9f:8f:d6:fa:7f:93:18:
17:a2:86:50:fe:ab:e8:08:56:0f:26:02:16:ff:5d:
7e:35:a5:82:f9:ce:19:4b:ef:30:62:c5:0c:1a:76:
89:8e:14:e8:9d:e5:b3:72:9c:31:55:f4:c0:41:11:
a9:fd:3f:ef:6e:09:43:0a:5c:6f:5f:f5:8c:e1:5d:
5e:45:28:80:16:51:d7:d3:16:e3:4e:04:93:41:c4:
cc:3c:58:ce:c1:33:bc:91:1f:20:64:f4:70:d5:63:
eb:42:58:ab:4f:22:ca:8a:cc:a2:f1:cd:a0:b8:c3:
cd:4e:7f:9f:4c:51:27:d8:3f:96:61:88:01:83:bb:
6d:81:4b:15:17:13:64:c4:49:a5:27:69:54:6f:f1:
95:2d:fb:06:d2:d1:50:c3:c6:97:81:86:a5:8c:22:
05:5c:a0:cd:30:d4:66:af:c7:2d:1f:46:6d:6e:08:
1a:60:a3:5c:bd:6a:2f:44:04:01:1f:9a:d6:be:5b:
19:14:1c:75:90:26:bf:81:b8:e9:d6:37:c0:0d:e5:
98:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B0:11:BD:64:A5:BD:3B:B5:C2:76:C5:13:38:DF:3B:17:40:35:A8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FD0816C88C8D11EB9736097DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.37.0/24
Signature Algorithm: sha256WithRSAEncryption
63:99:81:7c:c1:54:86:ad:cf:1e:af:26:2d:a4:be:ac:03:02:
94:43:1d:13:a3:b8:06:e5:0d:79:ae:c9:84:33:cd:be:13:63:
80:37:22:58:08:2b:d3:d1:77:df:1f:84:d1:59:ac:00:96:f0:
80:3a:d5:b9:95:2d:3f:2c:c3:16:b1:99:d7:6e:7a:25:3b:22:
ea:9e:d5:f4:fc:af:98:3e:c7:86:30:bb:79:d4:fe:a3:98:9c:
48:c6:e9:35:98:96:ff:7e:d7:a9:3b:2d:77:26:bd:09:85:a1:
c7:8d:e5:85:7a:ae:42:4e:f3:e8:49:50:66:6f:e3:79:43:d6:
68:18:93:44:13:c1:cc:f4:9a:82:e7:c9:a5:0a:8f:45:ea:40:
30:4b:69:a3:65:14:d9:2f:f9:80:82:e8:c8:04:61:65:47:d3:
54:7d:37:d5:b9:0b:a4:0c:9f:30:ac:c0:16:9a:2a:0d:50:24:
bc:e8:16:5f:c9:04:31:1f:ef:b2:ed:15:46:ed:c1:7a:84:d9:
49:5a:54:b9:0d:ad:33:cc:49:f9:14:98:a7:d6:c9:0f:31:a6:
8c:6a:ac:e8:07:dc:27:bb:a8:3e:30:b8:73:94:49:66:d8:b1:
32:0c:42:6c:b2:51:62:04:f3:9a:1a:91:11:af:92:a5:a2:50:
46:39:30:00
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBQAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMTAzMjQxMDQ0NTlaFw0yMjAzMjQxMDQ0NTlaMBgxFjAU
BgNVBAMTDTYwNWIxODJmLTg1ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCnTgATW8XTBCJd0AT1m7HjdmySe31wboK27W2BD3G9xLhtolBfyEZYy/Ml
+VNXv+MxxItBn4/W+n+TGBeihlD+q+gIVg8mAhb/XX41pYL5zhlL7zBixQwadomO
FOid5bNynDFV9MBBEan9P+9uCUMKXG9f9YzhXV5FKIAWUdfTFuNOBJNBxMw8WM7B
M7yRHyBk9HDVY+tCWKtPIsqKzKLxzaC4w81Of59MUSfYP5ZhiAGDu22BSxUXE2TE
SaUnaVRv8ZUt+wbS0VDDxpeBhqWMIgVcoM0w1Gavxy0fRm1uCBpgo1y9ai9EBAEf
mta+WxkUHHWQJr+BuOnWN8AN5ZhDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU/bAR
vWSlvTu1wnbFEzjfOxdANagwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0ZEMDgxNkM4OEM4RDExRUI5NzM2MDk3REY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaECUwDQYJKoZIhvcNAQEL
BQADggEBAGOZgXzBVIatzx6vJi2kvqwDApRDHROjuAblDXmuyYQzzb4TY4A3IlgI
K9PRd98fhNFZrACW8IA61bmVLT8swxaxmddueiU7Iuqe1fT8r5g+x4Ywu3nU/qOY
nEjG6TWYlv9+16k7LXcmvQmFoceN5YV6rkJO8+hJUGZv43lD1mgYk0QTwcz0moLn
yaUKj0XqQDBLaaNlFNkv+YCC6MgEYWVH01R9N9W5C6QMnzCswBaaKg1QJLzoFl/J
BDEf77LtFUbtwXqE2UlaVLkNrTPMSfkUmKfWyQ8xpoxqrOgH3Ce7qD4wuHOUSWbY
sTIMQmyyUWIE85oakRGvkqWiUEY5MAA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:03 2023 by rpki-client on console-fra.rpki-client.org