Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/C34C2EA2E5D711EC88234285F1222468.roa
File: C34C2EA2E5D711EC88234285F1222468.roa (raw, json)
Hash identifier: iICX7RCXISAR45DG10G618RwPcdWr/lYx0PtByBQUW0=
Subject key identifier: 06:EF:79:52:DC:BB:2B:01:6E:6D:F0:F5:E8:F6:25:62:49:A9:4C:58
Certificate issuer: /CN=F36FA15DAF/serialNumber=D8B6E18C65DD1F96F2A544CACFC98086AEF9296F
Certificate serial: 0227
Authority key identifier: D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/C34C2EA2E5D711EC88234285F1222468.roa
Signing time: Mon 06 Jun 2022 20:32:20 +0000
ROA not before: Mon 06 Jun 2022 20:32:15 +0000
ROA not after: Fri 30 Dec 2022 20:32:15 +0000
asID: 327790
IP address blocks: 154.73.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAF
Validity
Not Before: Jun 6 20:32:15 2022 GMT
Not After : Dec 30 20:32:15 2022 GMT
Subject: CN=629e6454-ad32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:6c:1e:20:6e:08:f5:bc:b8:23:38:3a:59:
c8:7f:4b:97:61:af:4e:5c:36:64:c0:21:6e:5f:90:
4a:4d:c7:ae:ac:40:b2:07:9a:f0:df:f2:0a:36:5c:
77:5f:9b:d5:9a:48:59:a7:6c:02:03:6e:87:77:ed:
b3:65:8e:61:2c:e8:99:bb:d1:1d:46:ea:3d:08:c9:
3e:2b:8d:12:bd:8b:9b:85:ec:65:09:07:e7:31:f5:
a3:94:70:cf:8d:5e:9d:93:25:5d:6d:4d:56:b0:f1:
f7:a2:8f:03:93:7a:ab:e3:d7:fc:ef:5f:68:37:7b:
2d:55:33:92:b8:95:d1:7a:54:e0:83:aa:da:2c:a9:
70:ce:14:6c:47:36:c4:66:c4:68:80:81:39:62:ae:
59:78:5a:97:bf:e7:7b:ba:5d:e4:fd:1d:bc:10:20:
a1:69:0a:d9:e8:36:cf:95:ef:d7:6a:d9:bd:ee:8a:
7a:9e:d5:a8:ea:46:66:18:0c:0b:ce:bb:ff:dd:f4:
ef:ae:0f:cb:9b:6f:0d:8d:3b:05:b5:76:a8:b8:ca:
7a:12:97:d6:45:c3:b7:a1:23:fb:be:de:d6:e2:33:
48:f4:76:e4:c9:c5:c0:8a:6f:b6:83:5a:3f:30:df:
12:8e:57:40:de:b1:f4:47:fe:3b:23:5d:69:a2:44:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EF:79:52:DC:BB:2B:01:6E:6D:F0:F5:E8:F6:25:62:49:A9:4C:58
X509v3 Authority Key Identifier:
keyid:D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/C34C2EA2E5D711EC88234285F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.73.248.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:2c:d7:d3:e6:ef:4b:4e:49:f8:54:e3:88:a1:26:61:2e:a6:
64:d6:7c:db:3d:dd:c4:ef:fa:e8:7b:b3:a8:cd:34:ef:75:d1:
15:96:d6:9e:b9:37:78:fd:68:c8:f0:ff:30:49:c1:2c:e8:04:
0a:9c:2b:18:43:53:4e:77:64:b8:7f:8c:5d:1f:03:75:3a:d7:
c6:cb:0e:37:f4:30:54:d0:c3:66:78:83:fc:8b:d1:0d:5c:50:
36:42:a8:3c:dd:ca:ac:e1:1b:83:61:e1:e6:e2:f8:3d:07:4f:
e3:a6:7f:8d:2f:1c:29:f5:5a:ac:13:e9:6c:5d:7b:2b:fd:b3:
b6:66:bd:b3:f3:90:d6:b7:a7:9c:80:0a:8e:83:29:1c:39:df:
32:e3:e6:e4:49:43:54:d9:5b:82:5b:c9:c4:58:ad:92:40:81:
60:eb:dd:af:b6:08:28:63:9c:d5:a7:0b:a8:c5:21:b7:4e:40:
88:4d:3d:ac:8b:a2:7e:40:90:6e:e5:a7:e6:00:e2:c9:d3:f6:
b1:07:41:9c:4b:b4:b7:89:43:04:96:e2:e9:14:37:5a:78:d3:
9f:d2:c7:3f:79:38:a3:8a:e1:dd:6f:54:8a:d7:bb:78:d7:84:
9d:f3:d4:34:a6:58:42:de:20:d9:9e:5b:a1:2f:cb:20:d4:9b:
44:6a:19:e9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAicwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBRjExMC8GA1UEBRMoRDhCNkUxOEM2NUREMUY5NkYyQTU0NENBQ0ZDOTgw
ODZBRUY5Mjk2RjAeFw0yMjA2MDYyMDMyMTVaFw0yMjEyMzAyMDMyMTVaMBgxFjAU
BgNVBAMMDTYyOWU2NDU0LWFkMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC51WweIG4I9by4Izg6Wch/S5dhr05cNmTAIW5fkEpNx66sQLIHmvDf8go2
XHdfm9WaSFmnbAIDbod37bNljmEs6Jm70R1G6j0IyT4rjRK9i5uF7GUJB+cx9aOU
cM+NXp2TJV1tTVaw8feijwOTeqvj1/zvX2g3ey1VM5K4ldF6VOCDqtosqXDOFGxH
NsRmxGiAgTlirll4Wpe/53u6XeT9HbwQIKFpCtnoNs+V79dq2b3uinqe1ajqRmYY
DAvOu//d9O+uD8ubbw2NOwW1dqi4ynoSl9ZFw7ehI/u+3tbiM0j0duTJxcCKb7aD
Wj8w3xKOV0DesfRH/jsjXWmiRHePAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUBu95
Uty7KwFubfD16PYlYkmpTFgwHwYDVR0jBBgwFoAU2LbhjGXdH5bypUTKz8mAhq75
KW8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzg4NEYyNTRBNjIzNzExRUJCNzkxQTY1OUY4QUVBMjI4LzJMYmhq
R1hkSDVieXBVVEt6OG1BaHE3NUtXOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJMYmhqR1hkSDVieXBVVEt6OG1BaHE3NUtXOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkZBMTVELzg4NEYyNTRBNjIzNzExRUJCNzkxQTY1OUY4
QUVBMjI4L0MzNEMyRUEyRTVENzExRUM4ODIzNDI4NUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaSfgwDQYJKoZIhvcNAQEL
BQADggEBAFws19Pm70tOSfhU44ihJmEupmTWfNs93cTv+uh7s6jNNO910RWW1p65
N3j9aMjw/zBJwSzoBAqcKxhDU053ZLh/jF0fA3U618bLDjf0MFTQw2Z4g/yL0Q1c
UDZCqDzdyqzhG4Nh4ebi+D0HT+Omf40vHCn1WqwT6Wxdeyv9s7ZmvbPzkNa3p5yA
Co6DKRw53zLj5uRJQ1TZW4JbycRYrZJAgWDr3a+2CChjnNWnC6jFIbdOQIhNPayL
on5AkG7lp+YA4snT9rEHQZxLtLeJQwSW4ukUN1p405/Sxz95OKOK4d1vVIrXu3jX
hJ3z1DSmWELeINmeW6EvyyDUm0RqGek=
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:06:52 2025 by rpki-client