Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/CEB40104D1DF11ECA2E00BA5F1222468.roa
File: CEB40104D1DF11ECA2E00BA5F1222468.roa (raw, json)
Hash identifier: 7AmJo2lzslIqoTUge1grlp1VULMDo5aaToa/BglUaII=
Subject key identifier: 75:4F:B4:B8:04:DA:72:8D:54:32:FF:30:69:6F:40:11:02:30:22:CB
Certificate issuer: /CN=F36FA15DAF/serialNumber=D8B6E18C65DD1F96F2A544CACFC98086AEF9296F
Certificate serial: 020B
Authority key identifier: D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/CEB40104D1DF11ECA2E00BA5F1222468.roa
Signing time: Thu 12 May 2022 10:39:32 +0000
ROA not before: Thu 12 May 2022 10:39:27 +0000
ROA not after: Fri 12 Aug 2022 10:39:27 +0000
asID: 327790
IP address blocks: 154.73.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAF
Validity
Not Before: May 12 10:39:27 2022 GMT
Not After : Aug 12 10:39:27 2022 GMT
Subject: CN=627ce3e4-2ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ac:94:ff:50:6a:f0:2f:23:aa:00:d0:fd:3e:
11:e5:8b:c8:7e:04:33:c4:26:c3:a3:16:ed:7a:1d:
ae:4d:1c:ff:89:23:69:01:2b:5b:3d:c4:94:1a:90:
35:a5:2f:f8:f6:45:da:24:be:f6:60:69:24:53:62:
b4:db:8f:bb:ba:3b:65:bc:93:b1:eb:49:b1:fa:c6:
a3:d4:23:0f:b0:23:65:4a:22:32:e7:14:c9:8b:32:
60:db:42:9f:76:f9:b7:35:0b:0e:29:72:26:c7:40:
19:09:c5:81:a5:7e:d1:3c:75:ae:76:14:72:21:2c:
19:4d:a6:e4:7e:4e:01:c4:09:7b:85:c4:c1:b7:a8:
f3:ad:ab:2f:b2:b4:4c:14:91:e5:20:f2:1a:11:36:
6f:fa:4f:14:34:d7:2d:79:e0:76:07:14:b9:03:55:
c9:6e:46:7d:5f:82:49:95:ab:57:ae:aa:74:47:ba:
7c:a9:cb:34:bb:10:15:1a:ef:f0:68:7c:fb:c7:4a:
72:8c:c0:5c:cf:ed:b1:88:fc:08:34:30:f7:ba:09:
c9:d1:73:f4:fe:3d:be:a9:57:d0:0f:45:86:ca:3f:
4b:6b:9d:f2:ce:d5:96:59:e8:8b:43:e9:8e:aa:9b:
dd:1b:95:22:71:6a:eb:6b:95:13:5b:6b:35:63:36:
18:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4F:B4:B8:04:DA:72:8D:54:32:FF:30:69:6F:40:11:02:30:22:CB
X509v3 Authority Key Identifier:
keyid:D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/CEB40104D1DF11ECA2E00BA5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.73.248.0/24
Signature Algorithm: sha256WithRSAEncryption
01:72:f4:31:54:d4:5f:df:69:38:3c:bb:10:52:f9:e7:8d:d4:
8c:fa:6f:f2:c8:33:a5:88:03:ee:f4:fd:95:79:e4:78:4b:3e:
5d:b1:6f:b6:f8:f2:23:87:ed:21:b5:1d:c4:6c:c0:8c:16:6d:
0d:dd:38:31:d6:3e:8e:b2:42:a5:03:27:7d:16:ca:a3:35:dd:
f0:d5:9e:93:15:8b:3c:56:50:6d:fe:ec:46:e6:2c:b9:53:14:
c8:6b:c3:f5:0b:2e:8c:80:7e:1e:2f:57:db:88:6e:f5:20:06:
a8:46:8a:85:4e:b8:0d:23:ab:ed:f7:84:b0:c1:c4:cd:38:2c:
cb:5f:3b:8c:8f:c2:a9:db:42:73:3a:77:b6:d7:7d:da:d9:c9:
bd:26:5f:db:f2:8f:83:1a:c5:78:e7:d9:ec:ac:68:56:de:df:
0c:5b:44:92:77:86:6f:ac:2b:ff:78:99:e0:30:dc:f5:f9:12:
2c:de:16:dd:a2:c7:76:4f:f8:68:78:fd:91:b9:18:d5:cf:43:
a8:26:71:50:77:73:bb:e1:1a:4a:6c:e9:15:16:bb:aa:44:22:
33:f3:c0:a4:d0:9d:d2:aa:7a:c1:e5:62:5b:c2:57:86:27:b6:
22:91:75:79:43:d3:68:43:ab:f9:e8:66:0c:48:61:a8:0f:6b:
d6:8f:d2:68
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAgswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBRjExMC8GA1UEBRMoRDhCNkUxOEM2NUREMUY5NkYyQTU0NENBQ0ZDOTgw
ODZBRUY5Mjk2RjAeFw0yMjA1MTIxMDM5MjdaFw0yMjA4MTIxMDM5MjdaMBgxFjAU
BgNVBAMMDTYyN2NlM2U0LTJjY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDarJT/UGrwLyOqAND9PhHli8h+BDPEJsOjFu16Ha5NHP+JI2kBK1s9xJQa
kDWlL/j2RdokvvZgaSRTYrTbj7u6O2W8k7HrSbH6xqPUIw+wI2VKIjLnFMmLMmDb
Qp92+bc1Cw4pcibHQBkJxYGlftE8da52FHIhLBlNpuR+TgHECXuFxMG3qPOtqy+y
tEwUkeUg8hoRNm/6TxQ01y154HYHFLkDVcluRn1fgkmVq1euqnRHunypyzS7EBUa
7/BofPvHSnKMwFzP7bGI/Ag0MPe6CcnRc/T+Pb6pV9APRYbKP0trnfLO1ZZZ6ItD
6Y6qm90blSJxautrlRNbazVjNhhBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUdU+0
uATaco1UMv8waW9AEQIwIsswHwYDVR0jBBgwFoAU2LbhjGXdH5bypUTKz8mAhq75
KW8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzg4NEYyNTRBNjIzNzExRUJCNzkxQTY1OUY4QUVBMjI4LzJMYmhq
R1hkSDVieXBVVEt6OG1BaHE3NUtXOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJMYmhqR1hkSDVieXBVVEt6OG1BaHE3NUtXOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkZBMTVELzg4NEYyNTRBNjIzNzExRUJCNzkxQTY1OUY4
QUVBMjI4L0NFQjQwMTA0RDFERjExRUNBMkUwMEJBNUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaSfgwDQYJKoZIhvcNAQEL
BQADggEBAAFy9DFU1F/faTg8uxBS+eeN1Iz6b/LIM6WIA+70/ZV55HhLPl2xb7b4
8iOH7SG1HcRswIwWbQ3dODHWPo6yQqUDJ30WyqM13fDVnpMVizxWUG3+7EbmLLlT
FMhrw/ULLoyAfh4vV9uIbvUgBqhGioVOuA0jq+33hLDBxM04LMtfO4yPwqnbQnM6
d7bXfdrZyb0mX9vyj4MaxXjn2eysaFbe3wxbRJJ3hm+sK/94meAw3PX5EizeFt2i
x3ZP+Gh4/ZG5GNXPQ6gmcVB3c7vhGkps6RUWu6pEIjPzwKTQndKqesHlYlvCV4Yn
tiKRdXlD02hDq/noZgxIYagPa9aP0mg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:50 2025 by rpki-client