Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/97073CCCEA4311EC8382CC99F1222468.roa
File: 97073CCCEA4311EC8382CC99F1222468.roa (raw, json)
Hash identifier: ct7rTOhqtUk4c+ApYMyruofP7T0Gg5FH6sGC1mrj5MI=
Subject key identifier: 33:DA:AF:53:2E:08:12:86:CA:30:6F:BE:14:17:07:C7:2E:AA:8F:B2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0893
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/97073CCCEA4311EC8382CC99F1222468.roa
Signing time: Sun 12 Jun 2022 11:34:16 +0000
ROA not before: Sun 12 Jun 2022 11:34:12 +0000
ROA not after: Mon 12 Jun 2023 11:34:12 +0000
asID: 398464
IP address blocks: 154.16.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2195 (0x893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 12 11:34:12 2022 GMT
Not After : Jun 12 11:34:12 2023 GMT
Subject: CN=62a5cf38-74dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:70:21:5d:89:8f:74:2b:c6:2e:39:96:43:7e:
b1:e0:6c:d7:f6:8f:b7:17:b8:c4:4d:9a:ad:d8:f8:
b3:fd:de:66:04:fd:39:ed:7d:8e:57:84:75:87:46:
9b:53:d5:9f:db:47:ff:10:05:b3:b1:f1:f2:78:e6:
2d:73:72:6f:fc:ed:52:5d:fe:bd:e1:41:75:9b:88:
32:cd:42:43:e7:e7:51:a2:22:ad:ea:f1:76:5b:c5:
d7:43:6c:64:08:4a:b4:e0:a1:9e:5a:02:ab:68:d2:
8a:a4:6d:69:17:a3:cf:e3:de:7a:d6:d8:10:53:36:
76:15:37:65:dc:e1:d4:90:ba:69:0b:ed:d9:c3:65:
2d:a4:34:f7:63:48:a7:e3:07:fd:2d:c2:92:97:ae:
53:29:38:a9:10:10:a1:06:5c:5d:b4:ce:db:17:02:
7b:78:9b:e5:9f:11:33:32:a2:77:15:61:5c:f4:bd:
46:f6:5d:88:23:55:93:60:9d:70:9c:54:e4:b6:01:
41:c2:6a:0e:c2:ea:16:9e:d4:54:68:ec:26:b8:25:
af:bd:5e:a2:60:d7:ae:6a:c8:b5:23:41:9a:f6:ac:
62:f2:a1:d6:19:73:8e:53:39:c0:fc:c9:a8:c7:1b:
84:d2:df:a6:8f:45:99:a2:65:9a:0d:3a:e2:81:eb:
28:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DA:AF:53:2E:08:12:86:CA:30:6F:BE:14:17:07:C7:2E:AA:8F:B2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/97073CCCEA4311EC8382CC99F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.212.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c6:e6:9b:13:03:0d:19:5c:be:c1:4a:8f:04:55:f7:0c:b2:
c0:df:0e:91:7b:1d:1b:44:59:ce:b6:52:c6:37:0e:62:a5:a3:
ed:6b:7b:a7:3c:f0:b5:52:33:03:6a:8f:0d:18:af:93:8b:56:
ea:62:db:73:05:bb:fa:c8:93:d8:5e:c0:63:86:13:f9:2a:04:
f3:65:45:3f:4c:45:33:c6:4b:e7:6f:0c:06:da:18:99:47:d5:
83:25:5f:ab:f4:f9:cd:37:e9:c0:6a:6d:0f:61:d4:c0:40:74:
bc:ae:39:be:a3:ac:58:84:48:be:52:fb:d9:b9:2d:5b:87:43:
f0:04:43:23:a2:a8:fa:56:f0:83:b1:57:00:a1:92:05:a2:77:
68:b4:cf:bb:a3:ce:10:2f:29:29:5b:c1:b3:f3:08:ca:c3:d3:
22:74:22:76:e5:66:1c:47:6c:c5:3e:ec:72:d7:15:70:5a:cf:
26:10:26:1f:c1:48:d3:bd:98:f7:8c:91:01:6a:a2:e5:16:59:
cf:c9:78:78:b6:f9:98:9b:a2:0f:4b:8b:f1:cb:ec:86:91:2f:
f8:1b:cb:11:d8:be:cc:ff:f8:9f:55:84:bb:fb:f9:27:9d:46:
54:ea:06:59:2f:56:f0:c1:12:54:43:01:ed:45:ce:2a:da:a7:
db:01:c5:fd
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCJMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjA2MTIxMTM0MTJaFw0yMzA2MTIxMTM0MTJaMBgxFjAU
BgNVBAMMDTYyYTVjZjM4LTc0ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDwcCFdiY90K8YuOZZDfrHgbNf2j7cXuMRNmq3Y+LP93mYE/TntfY5XhHWH
RptT1Z/bR/8QBbOx8fJ45i1zcm/87VJd/r3hQXWbiDLNQkPn51GiIq3q8XZbxddD
bGQISrTgoZ5aAqto0oqkbWkXo8/j3nrW2BBTNnYVN2Xc4dSQumkL7dnDZS2kNPdj
SKfjB/0twpKXrlMpOKkQEKEGXF20ztsXAnt4m+WfETMyoncVYVz0vUb2XYgjVZNg
nXCcVOS2AUHCag7C6hae1FRo7Ca4Ja+9XqJg165qyLUjQZr2rGLyodYZc45TOcD8
yajHG4TS36aPRZmiZZoNOuKB6yi9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUM9qv
Uy4IEobKMG++FBcHxy6qj7IwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4Lzk3MDczQ0NDRUE0MzExRUM4MzgyQ0M5OUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaENQwDQYJKoZIhvcNAQEL
BQADggEBADLG5psTAw0ZXL7BSo8EVfcMssDfDpF7HRtEWc62UsY3DmKlo+1re6c8
8LVSMwNqjw0Yr5OLVupi23MFu/rIk9hewGOGE/kqBPNlRT9MRTPGS+dvDAbaGJlH
1YMlX6v0+c036cBqbQ9h1MBAdLyuOb6jrFiESL5S+9m5LVuHQ/AEQyOiqPpW8IOx
VwChkgWid2i0z7ujzhAvKSlbwbPzCMrD0yJ0InblZhxHbMU+7HLXFXBazyYQJh/B
SNO9mPeMkQFqouUWWc/JeHi2+Zibog9Li/HL7IaRL/gbyxHYvsz/+J9VhLv7+Sed
RlTqBlkvVvDBElRDAe1Fzirap9sBxf0=
-----END CERTIFICATE-----
Generated at Wed May 14 04:35:10 2025 by rpki-client