Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/09DFC3A2381111ED81CD8CADF1222468.roa
File: 09DFC3A2381111ED81CD8CADF1222468.roa (raw, json)
Hash identifier: t1ZMJd/Cu+3PnOBJUaXLV/zPhp/ch9Iya//WnoWQXns=
Subject key identifier: 42:03:31:12:FE:EF:A1:2E:83:D7:A3:F3:D8:54:E3:11:EE:7E:2F:2E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 09AA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/09DFC3A2381111ED81CD8CADF1222468.roa
Signing time: Mon 19 Sep 2022 11:48:55 +0000
ROA not before: Mon 19 Sep 2022 11:48:50 +0000
ROA not after: Fri 20 Sep 2024 11:48:50 +0000
asID: 61317
IP address blocks: 154.16.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2474 (0x9aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Sep 19 11:48:50 2022 GMT
Not After : Sep 20 11:48:50 2024 GMT
Subject: CN=63285727-e399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:94:61:d8:ca:50:79:ca:28:19:15:ae:d3:9c:
79:c8:f3:6e:88:73:ce:e8:c8:ef:e0:ae:69:16:43:
ee:e9:6f:c6:d1:2f:7b:3c:ff:ea:19:10:45:7e:9a:
34:f7:d0:41:f9:7f:a0:96:12:ea:74:43:03:d8:60:
6e:06:89:31:ae:5e:06:98:ec:8a:00:10:ab:43:9a:
86:00:18:36:23:32:6f:ed:79:74:06:03:2f:84:b5:
de:31:0c:34:4c:56:f1:2d:75:7a:e6:3f:4e:65:07:
33:a5:cf:80:ce:15:73:cd:36:09:94:be:d3:69:00:
95:cb:3c:bd:87:10:24:46:fa:a3:74:41:dd:44:9d:
35:ee:33:3b:4f:5f:36:df:51:71:38:a8:79:c0:d0:
92:e1:db:d7:1f:52:07:49:83:db:f9:5c:51:e9:09:
25:44:03:5f:f8:3d:47:34:31:9e:ad:d2:21:43:14:
db:a1:84:bb:4e:58:07:4b:ba:bd:15:af:40:83:f6:
4a:8a:f1:a8:38:bb:c1:f3:d3:1f:ba:ad:67:9e:64:
78:33:12:77:59:50:6e:53:39:51:e2:4b:9b:04:41:
07:cd:ed:68:e7:1f:06:ce:58:5e:86:74:cf:a7:b5:
32:ee:e9:03:f8:85:89:08:7b:66:89:d1:78:d9:12:
34:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:03:31:12:FE:EF:A1:2E:83:D7:A3:F3:D8:54:E3:11:EE:7E:2F:2E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/09DFC3A2381111ED81CD8CADF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.183.0/24
Signature Algorithm: sha256WithRSAEncryption
14:cd:ba:a3:ff:a2:43:4e:d3:57:10:a5:8d:cb:5d:12:df:dc:
f3:95:57:3e:3a:04:21:b2:ce:6b:cf:59:9b:1f:dc:aa:e2:3e:
8d:8d:14:9f:c8:28:72:e4:a8:4e:5f:63:d5:9d:be:19:a5:57:
88:f7:30:ad:d9:fa:07:c1:0c:e3:fc:76:55:cc:ca:4c:58:89:
ec:31:ed:7d:3c:6d:ea:9c:eb:61:b6:05:8f:87:50:bd:45:db:
99:75:a8:c7:bf:0e:89:e1:f2:85:73:5a:8f:04:e0:4a:fc:0e:
0c:b4:f9:03:f6:e3:0e:e3:84:83:a0:5e:a4:d9:c3:c1:8c:8e:
4c:2a:8e:d0:4b:4b:59:1f:4a:9e:79:10:c9:75:45:fd:ce:36:
f3:28:73:1b:17:15:aa:40:32:ea:b2:4a:52:b6:21:64:9a:d1:
d6:a9:ff:41:ab:55:49:66:ec:3b:37:a4:5d:1f:11:08:19:25:
b3:e4:5e:2f:fb:05:95:3d:4f:86:ba:3f:65:f6:a0:24:1e:cc:
87:18:be:a0:7a:42:7d:9a:29:da:93:23:33:65:05:a2:2d:ab:
54:63:66:f0:d0:7d:e6:20:52:6c:14:30:42:42:f7:c6:9f:81:
c8:66:f4:7b:1b:56:82:3c:b2:b8:a6:46:09:7c:34:5d:aa:48:
73:a4:4b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 15:03:29 2025 by rpki-client