Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/08E6F0DE7FA911E99EA87072F8AEA228.roa
File: 08E6F0DE7FA911E99EA87072F8AEA228.roa (raw, json)
Hash identifier: z3NnW4f0r1NAoDahJ3overj/O+SviNRyM6SwZPbKaag=
Subject key identifier: 07:45:3E:43:67:83:5F:9F:4F:86:BD:B0:DD:25:60:E5:56:27:A1:A0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0125
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/08E6F0DE7FA911E99EA87072F8AEA228.roa
Signing time: Sun 26 May 2019 11:25:59 +0000
ROA not before: Sun 26 May 2019 11:25:54 +0000
ROA not after: Wed 25 May 2022 11:25:54 +0000
asID: 40676
IP address blocks: 154.16.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: May 26 11:25:54 2019 GMT
Not After : May 25 11:25:54 2022 GMT
Subject: CN=5cea77c7-4b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:6e:2e:6e:ce:d1:df:26:73:ca:3b:42:ad:
5d:42:8b:68:fe:92:13:e4:cf:96:f2:ab:98:af:cd:
b1:da:93:ac:7f:9c:6c:15:4c:5f:86:8f:c6:50:ef:
6f:36:56:2e:34:ec:a5:62:91:52:81:2b:18:e8:4f:
a1:ea:4d:c6:b7:5e:3a:7a:65:bd:ed:5d:ea:2b:ba:
c9:c0:55:72:00:c8:20:98:17:71:83:72:8a:3f:d4:
29:8e:68:a2:68:2b:3c:21:1d:6c:94:54:af:6f:7b:
c3:13:1c:a8:20:1a:ac:66:6a:8b:0b:4a:5d:de:76:
a2:44:a9:0e:5f:a5:3f:4f:b2:e2:28:35:d1:64:7e:
70:88:bc:e1:1a:19:d9:ed:18:f8:e6:f9:7f:3f:a3:
db:1b:d1:2f:b6:2b:37:85:81:54:66:7e:1a:15:b1:
23:91:02:a9:6c:f9:6a:ce:3f:12:fe:3e:e1:46:8d:
9f:63:3e:f4:d4:07:6b:ef:7d:3a:ad:b2:1a:65:4c:
55:44:90:ee:82:3d:96:51:46:68:09:55:ae:a3:9a:
3b:03:e9:13:9e:e0:e2:70:8f:46:c1:4c:9f:66:51:
f6:ee:e6:0c:7c:ef:33:b6:a8:7a:b1:7c:e4:e1:83:
5e:73:a4:1d:d0:17:43:9f:c8:b7:03:38:85:39:a6:
51:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:45:3E:43:67:83:5F:9F:4F:86:BD:B0:DD:25:60:E5:56:27:A1:A0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/08E6F0DE7FA911E99EA87072F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
154.16.137.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:98:92:60:9e:a8:9a:39:e4:c2:93:a6:8a:02:5c:5a:65:22:
46:47:4f:e2:0c:49:83:e2:81:21:2e:5b:ac:23:70:b4:e8:70:
d6:32:d5:f5:6c:2c:4e:5d:0b:cd:ca:90:5e:de:24:ec:2f:d0:
d4:e8:0d:1a:d1:d3:40:e7:2b:3e:59:af:80:ea:b8:4e:b7:14:
ef:0f:1f:26:cf:c9:3f:5b:48:b2:52:41:ed:a7:1b:7f:cb:63:
21:59:58:f6:78:36:91:4c:2a:0a:ef:15:9b:89:19:16:db:7b:
3d:e0:06:5a:02:ef:8b:d9:48:6b:36:5e:6c:d8:6d:ec:89:f8:
ca:4b:cb:12:71:f9:a8:ae:33:51:9b:46:ec:9b:00:b9:60:0b:
ae:ba:40:c7:4f:94:b9:ca:0d:82:6a:86:7d:bc:ac:85:c2:48:
32:59:21:99:3c:e9:9c:7e:6e:d5:30:cd:77:59:f3:61:e0:38:
e2:0a:10:17:35:03:66:02:5c:c5:bd:29:3e:e0:38:ac:3b:44:
61:84:55:16:e2:7d:eb:3a:2e:e8:d1:ee:c7:e1:ce:1f:8f:38:
0c:f2:26:15:7b:f3:b1:c6:c6:a6:e7:4c:04:0d:ce:9e:ec:de:
6a:3c:49:0c:1c:c4:15:d7:d4:41:37:c7:aa:b6:4a:85:50:e0:
7d:0b:e3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 15:03:25 2025 by rpki-client