Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0D2C13CE7D3D11ECBFDC6DA65A40D577.roa
File: 0D2C13CE7D3D11ECBFDC6DA65A40D577.roa (raw, json)
Hash identifier: F+J7zoxwEtah/qknPe9rSAe9nC/oCOebPprFPgZQ6zU=
Subject key identifier: 1A:B7:92:D7:4F:BD:75:04:78:4F:D8:E6:24:76:3C:D9:36:52:D2:0F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 078D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0D2C13CE7D3D11ECBFDC6DA65A40D577.roa
Signing time: Mon 24 Jan 2022 17:42:51 +0000
ROA not before: Mon 24 Jan 2022 17:42:47 +0000
ROA not after: Tue 24 Jan 2023 17:42:47 +0000
asID: 43260
IP address blocks: 154.16.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1933 (0x78d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Jan 24 17:42:47 2022 GMT
Not After : Jan 24 17:42:47 2023 GMT
Subject: CN=61eee51b-5568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:02:e6:36:7d:52:e2:a3:e7:5a:cf:37:75:6f:
ac:01:ca:ad:5f:0d:2b:5d:88:68:20:3d:e7:be:29:
c9:95:59:b8:2f:73:70:ba:ac:b3:5a:07:f9:c0:51:
2b:c4:4b:33:b9:e8:e7:6a:2f:03:7d:a4:44:f5:07:
2f:9f:e1:ed:9e:b8:e4:f2:38:a2:f8:e6:c9:77:4d:
68:98:8c:99:2b:cf:67:4d:50:ad:89:84:f0:7f:be:
ba:3f:b5:3b:2a:a2:3d:20:ba:77:ad:98:9d:4a:e9:
14:c0:3b:47:b2:4c:0e:5a:7f:f7:f2:ae:e9:12:31:
6e:aa:ce:8b:93:f4:a0:50:1e:8b:6b:88:a4:ee:b0:
3e:d8:03:61:f9:cf:8f:95:fd:70:e8:a4:e4:83:aa:
2b:cd:0a:fa:c1:ec:f0:24:7f:7e:48:56:93:93:b6:
10:a9:8c:21:75:7f:7e:f4:9e:6e:42:3e:03:ac:e2:
70:b6:e3:04:9d:3c:0e:20:ec:62:fa:a0:b5:6c:38:
81:c5:40:cd:60:df:48:3c:10:d9:51:e9:9b:af:f6:
58:80:4b:c5:e5:39:5f:7a:12:79:dc:e5:e5:b0:5c:
7c:ca:c6:55:fc:0c:7c:06:ab:04:a1:fd:39:b5:89:
e3:e9:35:50:d3:7f:74:cd:db:3b:08:ef:21:a1:04:
98:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B7:92:D7:4F:BD:75:04:78:4F:D8:E6:24:76:3C:D9:36:52:D2:0F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0D2C13CE7D3D11ECBFDC6DA65A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.123.0/24
Signature Algorithm: sha256WithRSAEncryption
52:b2:33:aa:11:9c:1d:12:23:07:c8:34:e0:1d:2f:66:bd:64:
ba:74:a7:a2:47:52:0f:b2:1f:5f:dd:dc:52:ae:12:19:47:3d:
34:05:10:e6:b2:da:b0:f8:cb:ea:fa:8c:7d:2f:fa:bc:3b:1d:
89:e5:8e:e1:ac:7a:f9:e3:6b:df:67:dc:6c:62:e1:d8:5e:99:
37:94:1a:d5:69:d0:6e:dc:21:3e:03:3b:2a:c5:33:96:49:e4:
33:c0:93:27:ee:1b:f2:43:c8:39:fa:59:85:a3:4d:c1:ea:07:
8a:f5:47:94:1b:b0:a9:dc:d8:84:5a:16:ae:ea:83:0b:86:ac:
c6:03:0d:94:80:aa:24:dc:5b:c0:0b:1b:94:06:f0:65:08:a4:
3a:03:ee:00:98:e3:fe:08:16:57:03:d2:23:2a:ed:b2:22:e9:
87:67:1d:cf:fc:77:df:69:f8:5f:d8:73:79:6e:7e:14:ef:64:
cf:4e:71:b4:f7:13:ac:63:98:16:89:57:ac:aa:0e:0d:5c:eb:
ad:b0:70:77:97:75:3a:51:15:5c:a7:1a:be:80:30:9b:a5:f1:
49:99:eb:0a:1d:39:ea:da:98:b6:f7:6e:f7:5c:d4:eb:55:24:
70:fa:f6:36:12:87:ef:7d:75:aa:fb:da:42:70:51:62:f0:cf:
a2:6c:09:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:54:49 2025 by rpki-client