Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1F5943508C8E11EBA0741B7DF8AEA228.roa
File: 1F5943508C8E11EBA0741B7DF8AEA228.roa (raw, json)
Hash identifier: 557qyGn10JKJvaeFgcgsUu6K1lYzW5fRClLbBQ2vzSE=
Subject key identifier: 99:96:EB:03:C4:C6:E0:1D:06:D8:15:81:9F:99:3F:4C:55:B7:AB:7C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0502
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1F5943508C8E11EBA0741B7DF8AEA228.roa
Signing time: Wed 24 Mar 2021 10:46:00 +0000
ROA not before: Wed 24 Mar 2021 10:45:57 +0000
ROA not after: Thu 24 Mar 2022 10:45:57 +0000
asID: 26636
IP address blocks: 154.16.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1282 (0x502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 24 10:45:57 2021 GMT
Not After : Mar 24 10:45:57 2022 GMT
Subject: CN=605b1868-d2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:b9:b4:49:ee:63:e5:11:d2:6a:3a:5d:a0:
66:11:16:df:1a:c6:c0:c2:cd:74:5d:7d:59:22:8d:
6b:fe:c8:8e:51:37:0c:bb:76:86:ef:6d:ae:e6:4b:
d6:54:a5:55:61:32:26:fb:c8:7f:f6:c2:3b:f2:86:
01:d3:08:a5:02:3e:5d:7d:85:ea:23:2b:e2:d1:7c:
0c:d4:c5:09:60:5e:a7:91:ef:33:c4:5e:56:fc:c6:
7f:2b:40:84:3d:8b:f7:71:82:5b:16:05:0c:a1:78:
4f:c0:98:b0:2b:eb:66:61:43:09:b6:06:e6:91:b3:
3a:01:19:df:62:b0:77:bb:21:37:c0:8c:20:3f:94:
c7:2b:ec:8f:94:c0:eb:cb:95:23:e0:ba:5e:4f:5d:
56:ec:93:21:c7:03:62:1e:f2:f2:62:29:7c:3d:13:
74:24:05:5c:9c:5b:62:58:65:bc:15:8c:bc:a7:df:
f6:b4:96:80:33:31:ed:c1:63:d2:79:09:92:ff:fc:
a5:06:8a:4e:f9:a1:fd:17:cf:ef:65:c1:73:a6:4a:
2d:7a:b2:20:8a:43:dc:9e:e3:a2:e7:21:03:20:75:
e1:2d:ed:21:dc:cb:3f:54:77:b9:31:6d:16:fb:2b:
63:5e:15:61:12:f8:71:6c:47:a8:2d:d1:c6:fb:86:
e6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:96:EB:03:C4:C6:E0:1D:06:D8:15:81:9F:99:3F:4C:55:B7:AB:7C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1F5943508C8E11EBA0741B7DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.77.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:55:c2:a3:1d:56:b5:9a:09:a4:ea:cf:a9:2e:8a:ff:88:c7:
0f:c4:20:a5:0b:c9:47:be:ef:40:f6:0f:4a:b4:15:81:93:88:
5c:36:d6:84:d3:fb:8a:27:14:73:1a:fe:79:5c:b8:9b:38:94:
d0:26:66:e2:0a:32:b4:d5:1d:e0:6a:aa:2b:b0:3d:7e:66:21:
e3:4a:65:d8:5c:de:5c:6a:29:c7:87:a9:5c:84:3f:4f:9a:ac:
56:1b:80:fe:87:8e:7a:59:1a:42:ea:7f:8c:50:f7:84:67:d9:
13:10:59:99:d6:5d:e8:fd:4b:bb:c0:66:df:a5:e3:69:f3:fe:
e1:c3:41:14:d1:d6:4d:a5:ed:47:dd:a0:9f:f2:24:fd:4d:a5:
43:9e:59:ea:48:38:c5:00:4b:ae:7a:61:18:b9:d8:39:34:e1:
63:02:5c:98:8a:4d:e7:e0:ad:27:11:1b:dd:3b:f8:6d:f3:78:
7c:62:fe:90:41:88:bf:7f:0c:f9:4b:23:12:1a:08:27:b7:46:
49:cd:0a:c8:0a:5d:b2:f5:bf:7e:3c:22:34:ac:70:16:fb:c1:
60:9e:3f:d7:38:fc:8d:d2:7a:1d:ba:64:96:69:7f:0c:e6:2a:
68:de:5b:00:27:5b:14:51:00:c3:2a:7c:8b:0d:a6:5c:e0:73:
02:01:a0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org