Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/EBB4E53CA8B911ED892B29E4F1222468.roa
File: EBB4E53CA8B911ED892B29E4F1222468.roa (raw, json)
Hash identifier: 9TkyQbLLskXRG/VpwcXBt0N3U3WyXw2bNwLeW9SWsEw=
Subject key identifier: 71:8C:EA:B1:74:97:1C:90:B9:C3:CD:C9:F0:46:56:EE:BB:24:BC:40
Certificate issuer: /CN=F36FA15DAF/serialNumber=D8B6E18C65DD1F96F2A544CACFC98086AEF9296F
Certificate serial: 0330
Authority key identifier: D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/EBB4E53CA8B911ED892B29E4F1222468.roa
Signing time: Thu 09 Feb 2023 20:40:00 +0000
ROA not before: Thu 09 Feb 2023 20:39:56 +0000
ROA not after: Fri 09 Feb 2024 20:39:56 +0000
asID: 207990
IP address blocks: 154.73.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 816 (0x330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAF
Validity
Not Before: Feb 9 20:39:56 2023 GMT
Not After : Feb 9 20:39:56 2024 GMT
Subject: CN=63e55a1f-2ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:51:ed:2f:17:56:21:06:79:ad:23:9c:9a:37:
cb:61:b9:24:2a:64:ff:55:ed:79:c4:29:96:f5:05:
3e:1f:3f:40:00:64:90:3f:ef:a5:a5:88:01:37:3c:
10:2e:0e:45:10:e5:e9:8b:3b:3d:17:2d:59:00:f5:
36:d1:6c:9e:c6:1b:63:46:0e:b4:cf:8d:1b:14:7f:
c0:95:df:af:df:ea:ba:32:28:90:eb:7f:1b:fc:d3:
14:27:5e:36:cb:68:3d:e3:8d:9a:8a:6f:93:2e:31:
05:b3:4b:dd:e5:0d:84:24:8a:68:b3:74:38:cf:90:
07:a1:53:dc:f4:5e:0f:60:2f:8c:90:9b:f9:5a:19:
3d:a1:c9:3e:69:e5:17:12:42:b4:1d:93:db:0a:a2:
76:95:27:dc:15:ec:21:b4:1f:9b:a8:8c:1a:20:4a:
35:f2:e9:4e:8a:7d:79:d0:4f:fe:a4:e9:a0:72:48:
d3:8a:53:58:54:1c:46:0b:c6:75:df:8e:e0:1f:3a:
34:2f:bf:a4:28:fd:2e:1d:f2:86:3c:27:25:0d:8a:
9a:ac:21:07:42:0b:2c:2b:0e:e9:91:b0:52:0b:b4:
38:54:30:72:7d:32:45:56:96:c6:70:a5:37:bc:ac:
5e:8d:14:66:80:5b:23:c6:0d:6b:9f:a8:25:3c:0a:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8C:EA:B1:74:97:1C:90:B9:C3:CD:C9:F0:46:56:EE:BB:24:BC:40
X509v3 Authority Key Identifier:
keyid:D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/EBB4E53CA8B911ED892B29E4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.73.248.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c7:57:a8:db:b8:e4:48:d0:fe:a4:d1:fa:ac:69:cb:0d:7d:
da:cc:77:8c:66:07:55:0c:94:90:a1:e1:b9:cf:63:6b:b3:87:
c3:44:6e:08:c7:c8:86:b5:e0:e0:64:8a:d7:22:76:3e:5e:54:
ca:a3:72:9b:b2:83:e7:c6:22:34:6d:a0:8b:77:73:6f:9a:c3:
bf:6c:b6:cd:98:63:f5:16:3a:3e:bc:0e:0f:11:eb:dc:f1:cc:
6b:dc:78:f2:43:c7:da:30:73:13:b3:53:56:71:00:8c:94:59:
89:47:9d:a3:c9:4c:43:f7:01:ae:fc:0e:df:f9:74:ad:ca:67:
c4:c4:06:be:5d:fd:45:77:ed:7c:bc:0d:91:8b:7a:5e:2e:4c:
37:0e:d9:dc:95:54:5d:24:e6:26:32:42:08:7e:fc:36:4a:ff:
fe:21:c0:8f:bc:43:14:07:38:9f:2d:4e:f0:19:f1:19:0e:f3:
a2:66:7a:08:75:72:c5:1f:20:3f:20:1c:ab:d6:fd:e9:8d:bd:
66:26:8e:bc:7e:16:0b:b4:b9:58:b1:35:0e:8b:78:63:2d:55:
a4:22:f3:5d:8f:51:4c:65:aa:69:12:11:d2:e2:2d:8d:83:f5:
7b:a1:12:b2:10:63:f9:fe:c0:c6:c9:cc:3e:6f:96:0e:ee:8e:
1b:f3:af:93
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAzAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBRjExMC8GA1UEBRMoRDhCNkUxOEM2NUREMUY5NkYyQTU0NENBQ0ZDOTgw
ODZBRUY5Mjk2RjAeFw0yMzAyMDkyMDM5NTZaFw0yNDAyMDkyMDM5NTZaMBgxFjAU
BgNVBAMMDTYzZTU1YTFmLTJjY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUUe0vF1YhBnmtI5yaN8thuSQqZP9V7XnEKZb1BT4fP0AAZJA/76WliAE3
PBAuDkUQ5emLOz0XLVkA9TbRbJ7GG2NGDrTPjRsUf8CV36/f6royKJDrfxv80xQn
XjbLaD3jjZqKb5MuMQWzS93lDYQkimizdDjPkAehU9z0Xg9gL4yQm/laGT2hyT5p
5RcSQrQdk9sKonaVJ9wV7CG0H5uojBogSjXy6U6KfXnQT/6k6aBySNOKU1hUHEYL
xnXfjuAfOjQvv6Qo/S4d8oY8JyUNipqsIQdCCywrDumRsFILtDhUMHJ9MkVWlsZw
pTe8rF6NFGaAWyPGDWufqCU8Co5/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUcYzq
sXSXHJC5w83J8EZW7rskvEAwHwYDVR0jBBgwFoAU2LbhjGXdH5bypUTKz8mAhq75
KW8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzg4NEYyNTRBNjIzNzExRUJCNzkxQTY1OUY4QUVBMjI4LzJMYmhq
R1hkSDVieXBVVEt6OG1BaHE3NUtXOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJMYmhqR1hkSDVieXBVVEt6OG1BaHE3NUtXOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkZBMTVELzg4NEYyNTRBNjIzNzExRUJCNzkxQTY1OUY4
QUVBMjI4L0VCQjRFNTNDQThCOTExRUQ4OTJCMjlFNEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaSfgwDQYJKoZIhvcNAQEL
BQADggEBABHHV6jbuORI0P6k0fqsacsNfdrMd4xmB1UMlJCh4bnPY2uzh8NEbgjH
yIa14OBkitcidj5eVMqjcpuyg+fGIjRtoIt3c2+aw79sts2YY/UWOj68Dg8R69zx
zGvcePJDx9owcxOzU1ZxAIyUWYlHnaPJTEP3Aa78Dt/5dK3KZ8TEBr5d/UV37Xy8
DZGLel4uTDcO2dyVVF0k5iYyQgh+/DZK//4hwI+8QxQHOJ8tTvAZ8RkO86Jmegh1
csUfID8gHKvW/emNvWYmjrx+Fgu0uVixNQ6LeGMtVaQi812PUUxlqmkSEdLiLY2D
9XuhErIQY/n+wMbJzD5vlg7ujhvzr5M=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:53 2025 by rpki-client