Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1937BF3074F211EDB94EF27DF1222468.roa
File: 1937BF3074F211EDB94EF27DF1222468.roa (raw, json)
Hash identifier: 8z/QeuIQD085i4JIQD2/UIXTVnfQEYg0FAtMgfFdhMI=
Subject key identifier: 43:0B:6B:0C:28:13:30:B0:F0:76:FF:40:FC:E7:36:38:50:0C:35:4A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0AF0
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1937BF3074F211EDB94EF27DF1222468.roa
Signing time: Mon 05 Dec 2022 23:11:07 +0000
ROA not before: Tue 06 Dec 2022 23:11:02 +0000
ROA not after: Sat 07 Dec 2024 23:11:02 +0000
asID: 207279
IP address blocks: 154.16.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2800 (0xaf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 6 23:11:02 2022 GMT
Not After : Dec 7 23:11:02 2024 GMT
Subject: CN=638e7a8b-694b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:80:97:16:b2:54:dc:16:0f:af:53:42:ba:
67:1f:48:69:76:96:9f:23:0a:23:0c:47:47:45:6e:
70:05:76:fc:7e:47:75:ac:01:52:84:e9:dc:b4:7b:
37:f3:a8:77:59:39:9e:ab:d0:7b:fd:15:08:9d:d4:
61:f8:98:8f:fd:58:01:7d:57:25:2f:a6:18:55:cc:
85:fa:2f:53:82:8c:85:b7:20:ac:60:f8:82:fe:b6:
b0:9c:48:f4:90:df:49:b1:1f:ef:29:a4:41:93:9e:
e1:03:4d:21:96:37:46:4a:26:d2:49:c0:2b:fa:a8:
df:e7:4a:96:41:2c:3f:c4:38:93:4e:93:8f:6b:66:
61:5c:a8:ee:14:b2:24:85:16:b8:c4:5c:19:fb:19:
0f:0c:dd:1b:dd:90:9e:47:f2:2a:d6:89:c5:16:d3:
77:a7:77:55:08:04:24:57:e2:e4:7e:3f:7a:39:ff:
5f:04:fa:ac:9d:ea:ed:9a:d2:e5:7f:bf:61:f5:c8:
5b:17:6e:e5:49:4c:aa:d2:8a:13:f8:65:ea:e3:07:
b8:86:db:4d:d0:3c:fd:cc:db:0c:50:a4:dc:b2:ef:
a9:20:97:08:3c:fb:3d:13:fe:c2:5f:c8:8e:ed:00:
4d:2b:90:fe:d3:e0:3c:c7:51:5e:ed:ba:11:2c:46:
df:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0B:6B:0C:28:13:30:B0:F0:76:FF:40:FC:E7:36:38:50:0C:35:4A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1937BF3074F211EDB94EF27DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.183.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e8:b1:5f:0d:c0:87:4e:17:88:63:e5:88:dc:8d:4d:b4:10:
a6:c0:34:7c:ee:6e:46:a1:75:3e:7e:d7:f7:23:77:96:a8:51:
7c:06:78:2e:ac:17:88:2f:b8:56:e8:09:89:7e:55:b9:a1:a1:
f3:9b:60:ed:8f:08:a3:d4:b9:75:9a:93:7f:81:d6:4e:20:e9:
e0:fe:8b:0a:65:fb:d1:3b:04:ee:93:0c:cf:df:ad:83:cf:0f:
47:53:1b:97:8c:fb:7a:37:c0:bb:08:83:bf:9e:3c:12:d5:91:
69:92:3a:04:96:2d:91:26:7c:84:ad:10:22:20:c3:00:77:c0:
d5:c4:cc:8b:dd:94:2d:b4:6a:39:55:fa:87:ee:d3:ec:e9:f6:
35:12:7e:c4:dd:d6:35:07:a2:67:34:e4:98:50:18:c7:4b:a9:
96:b2:cd:d1:73:d0:75:9b:9c:76:6b:60:55:50:c1:cc:2c:3f:
9b:42:9f:7e:97:78:67:63:56:fe:76:b2:00:6c:1e:a2:b7:fa:
e0:4e:65:90:73:c8:8a:e2:89:c0:ef:1f:4b:54:75:50:c0:31:
23:22:e1:ff:99:8c:86:e5:75:fe:a3:77:11:41:97:51:af:99:
6c:0c:45:3f:0b:ed:b4:31:b0:e7:fe:2d:74:11:fc:bc:bd:5d:
84:77:9a:b3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCvAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjEyMDYyMzExMDJaFw0yNDEyMDcyMzExMDJaMBgxFjAU
BgNVBAMMDTYzOGU3YThiLTY5NGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+y4CXFrJU3BYPr1NCumcfSGl2lp8jCiMMR0dFbnAFdvx+R3WsAVKE6dy0
ezfzqHdZOZ6r0Hv9FQid1GH4mI/9WAF9VyUvphhVzIX6L1OCjIW3IKxg+IL+trCc
SPSQ30mxH+8ppEGTnuEDTSGWN0ZKJtJJwCv6qN/nSpZBLD/EOJNOk49rZmFcqO4U
siSFFrjEXBn7GQ8M3RvdkJ5H8irWicUW03end1UIBCRX4uR+P3o5/18E+qyd6u2a
0uV/v2H1yFsXbuVJTKrSihP4ZerjB7iG203QPP3M2wxQpNyy76kglwg8+z0T/sJf
yI7tAE0rkP7T4DzHUV7tuhEsRt/hAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUQwtr
DCgTMLDwdv9A/Oc2OFAMNUowHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzE5MzdCRjMwNzRGMjExRURCOTRFRjI3REYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaELcwDQYJKoZIhvcNAQEL
BQADggEBABzosV8NwIdOF4hj5YjcjU20EKbANHzubkahdT5+1/cjd5aoUXwGeC6s
F4gvuFboCYl+VbmhofObYO2PCKPUuXWak3+B1k4g6eD+iwpl+9E7BO6TDM/frYPP
D0dTG5eM+3o3wLsIg7+ePBLVkWmSOgSWLZEmfIStECIgwwB3wNXEzIvdlC20ajlV
+ofu0+zp9jUSfsTd1jUHomc05JhQGMdLqZayzdFz0HWbnHZrYFVQwcwsP5tCn36X
eGdjVv52sgBsHqK3+uBOZZBzyIriicDvH0tUdVDAMSMi4f+ZjIbldf6jdxFBl1Gv
mWwMRT8L7bQxsOf+LXQR/Ly9XYR3mrM=
-----END CERTIFICATE-----
Generated at Sun May 4 02:32:59 2025 by rpki-client