Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/025193DCFD5711EABDB4F039F8AEA228.roa
File: 025193DCFD5711EABDB4F039F8AEA228.roa (raw, json)
Hash identifier: 5CbMb6JzgcGrnDi52xbeGJTfJ3tINgQKFcXJZTxuPnM=
Subject key identifier: FF:F1:B0:26:DF:E2:AD:1A:4B:D8:6F:21:3E:1A:F6:1C:A2:27:DE:C8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 03BB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/025193DCFD5711EABDB4F039F8AEA228.roa
Signing time: Wed 23 Sep 2020 04:41:14 +0000
ROA not before: Wed 23 Sep 2020 04:41:07 +0000
ROA not after: Fri 02 Sep 2022 04:41:07 +0000
asID: 174
IP address blocks: 154.16.188.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 955 (0x3bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 23 04:41:07 2020 GMT
Not After : Sep 2 04:41:07 2022 GMT
Subject: CN=5f6ad1e9-ac11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:8d:3f:2a:61:36:1b:e1:d0:51:43:1c:bc:
3e:dd:91:84:84:6e:8e:37:be:66:4a:cd:32:d3:3c:
aa:4a:75:60:4f:8f:fc:b1:32:4a:e4:c7:00:e5:88:
8d:b2:82:86:8e:54:5f:c4:35:c8:9c:34:97:19:1d:
82:47:a0:13:b5:c5:f5:d7:d8:27:2b:80:69:16:ba:
3c:77:62:6e:56:a9:07:dc:45:b7:3d:58:17:e0:e9:
8d:1d:16:b1:a0:5f:e5:ec:c0:3a:e8:59:af:aa:c2:
82:18:fd:1a:54:4e:dd:c0:9f:b0:fd:86:1a:58:41:
a6:3c:b5:f4:51:30:e5:a3:7c:7e:b9:15:ea:7c:ec:
d9:5a:5a:97:2a:1c:bf:d5:ba:13:78:be:ac:6d:e5:
7a:c3:17:0e:5d:fe:f3:19:32:10:b6:4c:d8:55:11:
5a:06:fc:b1:70:36:49:3f:8a:07:3a:df:e7:6e:a9:
cd:a8:00:ab:03:c7:9d:ec:9c:c7:e2:66:bc:fe:7c:
df:25:1b:97:a7:3b:89:28:41:99:fa:5c:83:33:43:
5f:38:00:40:15:be:eb:8b:8a:da:96:9f:ba:ee:0f:
a7:d3:64:58:79:37:b1:ec:5f:60:37:58:72:d1:f8:
1f:63:ab:6d:aa:53:62:f3:fe:12:46:bd:30:40:e7:
ea:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F1:B0:26:DF:E2:AD:1A:4B:D8:6F:21:3E:1A:F6:1C:A2:27:DE:C8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/025193DCFD5711EABDB4F039F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.188.0/22
Signature Algorithm: sha256WithRSAEncryption
33:f2:ef:c5:77:3e:db:2e:65:bb:0b:bd:35:aa:74:d3:8d:90:
53:39:d2:80:db:c6:9c:b3:74:38:ba:27:78:35:e9:62:57:4d:
d2:74:c6:4e:8d:3d:93:25:57:bf:d7:09:9f:f4:da:d7:95:0e:
df:dd:c1:b0:87:4b:f1:92:97:85:2c:78:52:bb:e4:72:f1:de:
7a:0d:c0:90:26:d8:9f:49:94:93:8f:67:52:44:4d:96:26:fe:
3f:6a:bb:cb:9b:af:3d:46:f3:65:a8:8c:90:02:e0:fb:47:5b:
e7:7f:30:38:0b:48:6a:e4:ff:0a:a9:32:e4:55:ad:40:88:38:
c3:f8:ce:cd:37:53:1e:5e:83:a9:80:81:8f:da:05:fe:24:57:
b7:f8:80:d4:9c:19:b2:c1:fa:c8:82:b2:b7:3b:8d:7a:41:68:
a7:53:8c:53:9c:79:e7:0f:60:2d:fb:17:5f:69:d9:41:46:c6:
51:4e:83:09:00:ba:47:6c:c6:0b:3a:8e:4a:2f:6e:07:c2:de:
63:24:73:a3:30:ff:38:a4:d8:21:3b:02:3b:94:6b:d0:77:ea:
12:2a:ac:db:8d:df:91:56:d0:a8:33:ea:3a:81:9d:9f:77:18:
6b:25:47:64:19:71:b0:d8:11:70:7a:20:d4:c1:7d:8a:bf:36:
5f:6e:2b:a4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA7swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMDA5MjMwNDQxMDdaFw0yMjA5MDIwNDQxMDdaMBgxFjAU
BgNVBAMTDTVmNmFkMWU5LWFjMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC62Y0/KmE2G+HQUUMcvD7dkYSEbo43vmZKzTLTPKpKdWBPj/yxMkrkxwDl
iI2ygoaOVF/ENcicNJcZHYJHoBO1xfXX2CcrgGkWujx3Ym5WqQfcRbc9WBfg6Y0d
FrGgX+XswDroWa+qwoIY/RpUTt3An7D9hhpYQaY8tfRRMOWjfH65Fep87NlaWpcq
HL/VuhN4vqxt5XrDFw5d/vMZMhC2TNhVEVoG/LFwNkk/igc63+duqc2oAKsDx53s
nMfiZrz+fN8lG5enO4koQZn6XIMzQ184AEAVvuuLitqWn7ruD6fTZFh5N7HsX2A3
WHLR+B9jq22qU2Lz/hJGvTBA5+pVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU//Gw
Jt/irRpL2G8hPhr2HKIn3sgwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzAyNTE5M0RDRkQ1NzExRUFCREI0RjAzOUY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKaELwwDQYJKoZIhvcNAQEL
BQADggEBADPy78V3PtsuZbsLvTWqdNONkFM50oDbxpyzdDi6J3g16WJXTdJ0xk6N
PZMlV7/XCZ/02teVDt/dwbCHS/GSl4UseFK75HLx3noNwJAm2J9JlJOPZ1JETZYm
/j9qu8ubrz1G82WojJAC4PtHW+d/MDgLSGrk/wqpMuRVrUCIOMP4zs03Ux5eg6mA
gY/aBf4kV7f4gNScGbLB+siCsrc7jXpBaKdTjFOceecPYC37F19p2UFGxlFOgwkA
ukdsxgs6jkovbgfC3mMkc6Mw/zik2CE7AjuUa9B36hIqrNuN35FW0Kgz6jqBnZ93
GGslR2QZcbDYEXB6INTBfYq/Nl9uK6Q=
-----END CERTIFICATE-----
Generated at Wed May 14 00:52:49 2025 by rpki-client