Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E39EEFA806BA11EBA2A5157BF8AEA228.roa
File: E39EEFA806BA11EBA2A5157BF8AEA228.roa (raw, json)
Hash identifier: MQ/OrGMYfvVjCnupWUKEBWzqK+C1iUfTsiA9AFI10Oo=
Subject key identifier: 0D:65:DC:25:1A:B2:51:BB:46:AB:9B:48:8E:4F:20:31:A3:3B:FE:60
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 03CF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E39EEFA806BA11EBA2A5157BF8AEA228.roa
Signing time: Mon 05 Oct 2020 03:28:52 +0000
ROA not before: Mon 05 Oct 2020 03:28:48 +0000
ROA not after: Fri 02 Sep 2022 03:28:48 +0000
asID: 209181
IP address blocks: 154.16.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 975 (0x3cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 5 03:28:48 2020 GMT
Not After : Sep 2 03:28:48 2022 GMT
Subject: CN=5f7a92f4-067e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:41:5f:a3:8d:dd:e3:0e:67:fa:e9:34:4c:2e:
14:15:78:9c:22:58:08:28:96:6c:68:fb:4c:63:4f:
7d:37:92:ab:b9:08:1c:78:23:67:78:a4:33:64:3d:
f0:18:9b:d1:1c:3d:fe:35:be:58:f0:c1:94:b6:1e:
68:1e:e3:c0:9c:f6:e9:a9:7f:08:eb:dc:de:63:b0:
80:0f:13:07:bc:04:df:18:9b:0e:83:0e:59:fc:09:
b6:d0:72:19:a4:6b:e6:8f:fe:d3:f8:fe:cc:03:2c:
59:49:74:b9:95:04:25:6a:be:84:5a:ab:4b:f6:27:
3b:56:f0:f5:57:e1:aa:56:4d:6b:70:42:cb:98:58:
f0:1b:8f:62:b0:a5:02:81:07:3c:b1:09:a1:f2:58:
8e:06:dd:e0:f3:1d:27:bb:3d:f0:09:c0:38:65:68:
59:ce:81:89:36:0e:92:a1:e5:28:79:6b:6a:96:97:
49:27:3a:d2:2a:5e:a0:7a:c5:51:0d:c7:d6:65:cd:
6f:49:6c:c3:d5:71:52:f2:35:f5:53:f7:07:8f:4e:
cc:90:c6:f1:fe:1b:81:80:91:8d:19:15:16:26:61:
f8:c1:3b:b6:29:3c:7d:07:b5:32:3f:08:a8:ac:f7:
97:1a:0c:35:d6:6f:e1:ef:1d:3f:be:e3:ed:b5:28:
c0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:65:DC:25:1A:B2:51:BB:46:AB:9B:48:8E:4F:20:31:A3:3B:FE:60
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E39EEFA806BA11EBA2A5157BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.143.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:cd:16:9c:e2:a9:c2:91:9c:40:02:8d:9d:95:9d:2a:c5:22:
e8:7d:d5:33:51:4f:05:25:68:c2:cf:7c:7a:2d:cd:25:0b:fc:
9c:5c:3e:84:f4:b2:cb:7b:f0:3f:d9:fe:21:63:47:42:be:f8:
98:c7:fc:0e:aa:5c:cd:47:22:21:94:15:b2:42:79:88:54:08:
86:13:0f:a3:ae:5d:1f:e8:69:0e:29:92:72:7f:6e:37:a5:08:
57:e6:9a:18:73:b6:fc:11:b0:76:a4:f9:0f:28:40:58:ed:83:
c3:d5:7c:2d:9b:c6:62:65:34:f4:cb:70:11:45:40:c6:6e:6c:
ea:7e:24:00:a2:b7:98:17:d1:a8:d8:f8:04:21:12:75:df:bc:
9b:9a:d0:5c:c0:a0:30:92:ff:c2:d9:a3:81:13:09:1f:50:4a:
5c:1a:e7:43:97:f0:fe:e5:19:7b:38:1e:66:08:e5:e1:1d:a2:
d0:e0:1e:bf:0b:e0:40:13:f0:44:fa:4d:82:c9:a5:38:ea:20:
2a:4d:ce:49:bb:53:6d:35:c3:9b:1f:14:d7:1f:db:84:12:ec:
7e:a8:4a:c3:29:97:98:24:05:23:36:75:fe:be:93:c2:01:94:
ad:7c:55:4a:84:2a:81:9d:b8:cd:dd:bf:a3:d5:be:33:e8:8f:
e7:31:f8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org