Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C092B66229AF11EBB8906225F8AEA228.roa
File: C092B66229AF11EBB8906225F8AEA228.roa (raw, json)
Hash identifier: LwasR2RTnO+4J9nVhGOztX8xS+5RWgfwjcDeDbOKn0I=
Subject key identifier: 16:58:3E:AB:41:1C:0C:BB:2D:67:BF:96:CD:AA:2D:D2:C7:A9:8D:81
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0419
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C092B66229AF11EBB8906225F8AEA228.roa
Signing time: Wed 18 Nov 2020 15:07:19 +0000
ROA not before: Wed 18 Nov 2020 15:07:14 +0000
ROA not after: Fri 18 Nov 2022 15:07:14 +0000
asID: 46562
IP address blocks: 154.16.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1049 (0x419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 18 15:07:14 2020 GMT
Not After : Nov 18 15:07:14 2022 GMT
Subject: CN=5fb538a7-f00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3f:c8:37:25:d4:5f:b9:97:8e:04:f4:6a:7b:
03:eb:b6:4b:1a:89:a8:cc:82:07:5a:ba:17:c9:6d:
a4:6d:da:f7:4d:96:48:86:47:71:73:a7:9f:3e:9e:
94:c9:12:e8:cf:4d:2f:03:b2:78:85:64:37:ca:7c:
f7:cc:5e:02:86:db:54:83:f1:52:7b:59:5d:f1:7d:
74:d9:6c:2e:21:22:11:87:dd:fa:73:8e:a3:e0:6b:
c0:f0:fe:3c:37:70:2d:85:9d:72:e8:33:72:1f:83:
7d:ea:4e:3a:e7:e6:28:18:8a:95:9f:fb:1c:40:2b:
97:cf:09:a6:7a:e1:ed:d1:66:3f:a7:07:68:3a:4f:
58:83:c6:e8:64:10:f2:2a:fb:d0:34:0b:32:b6:3b:
1b:06:16:11:2d:4f:da:cd:70:27:07:4a:40:3b:2f:
32:d0:19:a7:ce:96:ad:8a:d3:20:e6:74:98:8d:de:
fa:2a:ce:73:41:ac:3c:c7:19:0e:a4:78:a8:8a:55:
36:dc:92:c2:44:d9:ed:dc:ec:df:09:63:e7:ae:73:
7d:43:73:58:e3:7f:65:58:28:aa:b2:64:cd:ef:64:
a9:3e:fa:f4:9d:a1:82:58:fb:3b:a7:6e:22:a9:f7:
ae:14:8d:7c:a1:7a:a1:01:a3:da:a0:e5:9d:78:40:
f9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:58:3E:AB:41:1C:0C:BB:2D:67:BF:96:CD:AA:2D:D2:C7:A9:8D:81
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C092B66229AF11EBB8906225F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.178.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a7:1e:b1:38:74:81:5e:1a:5c:94:75:0b:0a:18:76:28:8f:
ee:9f:59:e1:b8:4b:3a:4d:14:44:d1:76:a3:ee:47:9b:c0:6f:
6e:37:a7:f3:06:95:47:e7:30:b1:24:1f:58:c0:d3:ce:26:70:
32:49:04:93:3e:26:ce:e1:c3:9a:1c:86:d6:5e:c4:52:0c:98:
86:83:14:47:04:8f:e3:1d:90:87:68:07:10:6f:10:7e:11:2b:
82:7d:f0:8c:4b:89:77:90:75:4d:c8:7b:32:56:32:86:7b:dd:
50:55:4b:49:43:32:47:f9:c7:5d:1b:32:3a:f6:20:30:1c:ec:
71:ca:6e:38:7b:5f:9a:6a:ef:df:a1:2f:f2:64:82:78:b1:8c:
3a:62:12:e3:82:30:14:09:ea:0b:d7:6d:eb:0d:22:74:ce:7d:
22:57:00:3d:a9:4c:63:cd:29:44:f3:2c:6b:c4:af:7c:c9:c1:
70:24:1f:69:ff:9c:21:3e:3a:97:0f:c6:3d:d1:0e:dd:54:fe:
e7:cb:c1:a0:6b:f5:7f:a3:db:24:20:82:1d:1c:1a:84:f6:ab:
d4:fe:4a:0e:cf:41:a7:07:38:d7:ac:76:e5:97:7f:84:89:23:
36:30:69:34:a1:a2:c8:8d:8a:bf:f8:04:b0:61:e4:7b:6e:73:
d1:47:18:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org