Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/081A2944B7F811EBADE93033F8AEA228.roa
File: 081A2944B7F811EBADE93033F8AEA228.roa (raw, json)
Hash identifier: 4POW33vfBFZYe+1V9uRR6pUQ5FfiV6e9AIfO9SHRC4Q=
Subject key identifier: 7F:67:E3:1D:D4:BD:7A:84:D4:47:87:8D:07:6E:85:A8:88:62:36:D4
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 058B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/081A2944B7F811EBADE93033F8AEA228.roa
Signing time: Tue 18 May 2021 16:42:28 +0000
ROA not before: Tue 18 May 2021 16:42:22 +0000
ROA not after: Wed 18 May 2022 16:42:22 +0000
asID: 13876
IP address blocks: 154.16.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1419 (0x58b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: May 18 16:42:22 2021 GMT
Not After : May 18 16:42:22 2022 GMT
Subject: CN=60a3ee74-e7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2b:fc:bf:9b:b7:6e:cf:b1:2a:20:01:2b:cf:
b8:e6:7a:0e:6e:9b:ae:a6:d5:49:fa:05:ef:f0:24:
08:1c:64:68:1a:0f:fc:61:a4:14:51:a1:5b:6f:a9:
86:01:bd:fc:cf:05:b1:4d:96:42:26:e7:5b:e8:4c:
e4:d4:04:81:00:1b:1e:4a:29:e5:27:15:89:be:28:
a2:db:42:e5:95:27:28:a6:3b:34:85:e9:99:7f:72:
31:c5:02:18:dc:eb:56:ba:c1:a2:5c:4b:52:85:d9:
cc:9e:57:e2:d9:ad:61:78:f6:fe:02:53:d1:cd:74:
89:13:c3:72:05:7a:1d:5b:c5:5b:5f:f1:92:26:57:
fd:cc:19:ae:83:d1:57:5a:d4:9b:8a:84:ac:ae:64:
d4:5f:b6:5a:28:4c:d1:27:f1:27:5b:a0:ef:b1:c3:
00:cd:be:83:4b:dd:fb:73:1c:68:74:d5:15:2e:4d:
1f:20:10:e6:69:61:a4:27:43:5d:5a:16:9b:07:1c:
39:e2:7a:d5:74:4a:0b:d2:79:f2:14:7f:3c:bc:58:
74:65:20:79:fa:09:ed:73:d7:7b:f9:36:3f:ee:f7:
ae:d3:9d:cc:1f:8e:2f:e0:31:30:ec:5b:f1:a1:ee:
5f:af:0e:f2:7a:42:ab:f9:cd:7e:c1:35:78:26:e6:
03:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:67:E3:1D:D4:BD:7A:84:D4:47:87:8D:07:6E:85:A8:88:62:36:D4
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/081A2944B7F811EBADE93033F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.13.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:7a:81:bb:b0:58:5f:64:b4:58:bb:06:79:0d:b9:b8:47:86:
c8:91:85:68:2b:ce:30:6c:7d:51:20:c3:54:11:29:0b:a2:ad:
2b:82:77:be:0c:81:c0:95:67:df:26:9f:96:10:b2:77:16:c4:
9c:c6:64:66:f6:46:fb:0a:33:f9:98:fc:77:49:5f:49:5b:cd:
0e:62:ad:50:48:ff:d3:59:8c:f6:57:21:72:b4:76:6c:7b:eb:
90:a8:e2:43:4d:ed:ab:3f:e1:b3:0b:19:aa:f8:92:e3:92:93:
e3:a1:b0:29:5a:7f:d0:db:44:d3:c5:ea:3d:e0:79:b6:1e:b4:
1b:ed:f3:b1:3f:37:b3:c6:ee:52:7f:f6:c6:9c:70:28:aa:09:
fa:dd:2d:ef:a1:b1:c4:87:59:8c:d2:f6:02:fd:d9:72:6d:63:
ab:8e:34:e8:3e:82:30:95:3a:8c:50:ba:2d:9b:75:e3:fd:36:
24:27:0c:17:36:86:5f:0b:f3:8e:6e:50:69:d7:b0:52:cf:35:
84:6d:fa:9d:a3:f6:4a:12:d5:a9:3b:97:4e:c1:4a:b9:4f:d1:
33:51:6c:a3:09:a8:c8:c6:37:09:b2:6e:c4:f7:9f:0a:4c:06:
6a:5b:f1:5f:4e:bb:c6:2b:47:6e:f2:a2:7a:da:30:08:74:90:
ac:6b:83:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:51:04 2025 by rpki-client