Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/13CF95E2F48511EC8E9BBCABF1222468.roa
File: 13CF95E2F48511EC8E9BBCABF1222468.roa (raw, json)
Hash identifier: 0kuRwygYInAjbkW5P0Q1gFxCeLZNxmafQncTtlJzuMc=
Subject key identifier: 30:DD:60:DE:BF:64:6A:B4:70:B4:52:56:ED:44:DB:C7:3E:13:D3:21
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 08BE
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/13CF95E2F48511EC8E9BBCABF1222468.roa
Signing time: Sat 25 Jun 2022 12:48:14 +0000
ROA not before: Sat 25 Jun 2022 12:48:10 +0000
ROA not after: Tue 25 Jun 2024 12:48:10 +0000
asID: 60721
IP address blocks: 154.127.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2238 (0x8be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Jun 25 12:48:10 2022 GMT
Not After : Jun 25 12:48:10 2024 GMT
Subject: CN=62b7040e-ba3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:42:f0:8e:f0:bd:46:74:2a:c0:07:81:ff:
af:89:a7:fb:b6:2f:12:32:23:7c:77:66:95:3f:6f:
9a:3f:02:24:ef:4e:a5:e1:09:f9:80:ae:2e:a9:4a:
92:92:09:d9:40:8a:f9:a7:f7:9a:71:6b:09:1a:42:
f5:92:58:1f:84:a8:85:25:35:42:a9:80:df:26:ab:
7e:24:5e:80:92:37:3c:c0:67:11:b4:9c:3f:14:92:
3a:f4:e1:ed:e7:a8:1c:86:09:3a:1a:7d:95:85:23:
db:17:c5:57:cb:f3:c3:49:ea:b7:29:84:b6:fd:34:
78:f5:3f:f7:13:7f:a9:d3:23:7f:a6:b9:54:24:56:
c3:76:3e:be:82:20:7f:ab:ae:37:55:dd:a5:f0:af:
30:1b:38:05:bb:78:7c:73:73:6d:98:26:be:0c:98:
9f:9f:79:e5:ea:0f:e7:d7:5b:4b:8a:38:71:1a:28:
09:9a:4c:af:f5:d6:04:37:94:d5:89:c3:54:5b:6e:
e2:23:c2:9e:a2:41:47:79:f5:12:93:07:6e:73:ad:
79:e3:90:b2:7b:27:fb:2b:95:33:9f:1b:40:bc:3b:
ef:44:f4:8d:b5:bc:fe:7e:bf:89:96:80:f7:fe:ea:
85:9d:cf:1b:9c:49:a4:ae:3f:2d:91:8e:39:c0:ad:
8a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DD:60:DE:BF:64:6A:B4:70:B4:52:56:ED:44:DB:C7:3E:13:D3:21
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/13CF95E2F48511EC8E9BBCABF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.62.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b7:0d:85:de:2b:2f:7d:01:0e:d9:1e:51:b8:de:40:a6:30:
02:06:0f:b4:7d:09:f1:76:ab:5c:c2:24:f2:fa:17:15:56:c5:
1b:06:7e:f2:d5:71:74:11:9b:72:fd:ba:99:54:24:8a:dc:2b:
90:76:7c:62:07:28:9b:53:c2:5c:72:48:a1:3d:05:53:c4:da:
c0:63:fa:14:e8:d8:80:77:61:68:b9:1c:65:3e:80:0e:30:0a:
39:eb:bc:1b:93:3b:71:ce:8a:a2:6b:32:03:b8:76:6c:62:d0:
89:2e:5f:49:75:47:bd:48:a2:35:73:78:4a:c4:b3:6d:b0:17:
71:cd:c9:45:b2:ff:b0:0e:66:5f:5e:dc:89:ba:78:4d:50:1e:
c6:88:1e:ce:c4:82:f1:db:af:5e:06:05:3d:bc:a9:8f:b0:85:
1a:28:f9:55:aa:dc:17:31:1f:2a:82:8e:da:27:c7:72:87:05:
ac:c9:62:4f:74:30:f6:d6:3d:01:c1:50:c0:2d:3a:5c:f2:4c:
83:82:17:e6:cd:28:ac:d7:0c:ee:9c:9b:fb:f1:a3:dc:21:8d:
b8:90:60:a8:55:04:4f:34:6a:b2:54:fa:b3:c8:47:2b:03:ac:
9c:d5:33:46:77:19:8b:55:f0:6f:f9:46:0a:cb:bb:46:c8:27:
5c:8a:4b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:47:03 2025 by rpki-client