Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/24BED1742B2C11ECB1F08779D8A014CE.roa
File: 24BED1742B2C11ECB1F08779D8A014CE.roa (raw, json)
Hash identifier: QJ3U/9PP9lb7oq/uWMwHDwhz96Y2nQzx+A3BjD7cPqg=
Subject key identifier: C0:35:12:F1:D9:70:E1:62:5B:29:A9:B1:9C:05:9F:8C:D0:96:A9:C4
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 06B9
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/24BED1742B2C11ECB1F08779D8A014CE.roa
Signing time: Tue 12 Oct 2021 07:15:14 +0000
ROA not before: Tue 12 Oct 2021 07:15:10 +0000
ROA not after: Wed 12 Oct 2022 07:15:10 +0000
asID: 44486
IP address blocks: 154.16.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1721 (0x6b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 12 07:15:10 2021 GMT
Not After : Oct 12 07:15:10 2022 GMT
Subject: CN=61653602-33e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:d4:6f:46:a3:1b:02:42:93:8d:77:5e:dc:
63:0a:6c:14:9b:ad:87:00:76:8f:46:fe:fd:fc:5e:
af:21:03:7f:c5:fa:c0:54:0c:35:91:4a:c3:bf:17:
f4:19:16:3d:44:27:64:d3:95:98:72:06:34:13:1b:
a8:50:f9:55:4c:73:f1:21:22:a5:83:dd:16:0e:47:
ac:21:d7:48:90:c1:e6:6e:2c:f8:1c:c8:21:91:8c:
20:c2:93:da:0a:37:fa:12:53:7f:f8:2c:4a:7c:d2:
90:ec:79:1b:bf:bf:78:ae:ab:96:93:da:e6:dc:6b:
0c:c6:59:e5:c9:02:ec:6f:3c:4b:89:c0:7c:d8:1d:
c3:50:97:b9:90:67:cc:94:61:f7:cb:92:ca:a5:01:
0b:5f:63:c0:36:d1:33:ad:41:8b:26:a8:fd:b1:3b:
67:30:3a:7a:0c:2a:ba:4e:fe:bd:03:8a:6b:8d:a5:
8f:74:41:ab:6d:bd:b3:9e:3f:5c:18:10:29:32:86:
30:fc:59:bd:b1:a2:bb:d3:84:7e:4c:d3:2c:4f:9b:
b1:b7:fc:25:87:65:18:b8:85:74:38:97:81:40:90:
24:5d:a5:e7:98:49:ea:5a:80:13:fe:78:a4:38:2c:
83:40:4d:da:70:79:87:26:6a:e2:8c:21:bd:49:33:
c1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:35:12:F1:D9:70:E1:62:5B:29:A9:B1:9C:05:9F:8C:D0:96:A9:C4
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/24BED1742B2C11ECB1F08779D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.111.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b2:ea:22:0b:76:21:63:eb:7b:48:cf:35:bc:28:26:11:29:
b7:1a:34:3e:19:f8:e0:8c:ac:ab:c8:c3:93:22:11:91:99:6e:
ae:3f:b4:d7:f8:de:c8:32:f3:80:28:6d:e3:59:a0:0b:92:10:
97:ba:1f:75:97:bc:90:5f:eb:ed:67:b7:1f:0c:07:8a:b9:0b:
11:4e:e5:c1:31:88:44:6a:ff:81:43:77:bc:8d:97:55:01:a0:
59:b7:76:bd:53:69:f3:8f:86:f9:8f:b0:fb:a0:b4:59:2d:71:
7b:98:54:c8:55:59:f3:f1:e3:c5:f4:42:ec:aa:a2:da:eb:f4:
38:e8:d4:05:66:fc:72:da:fc:15:a2:81:56:94:95:2a:df:b6:
b0:e4:e6:f7:76:0e:9f:2f:70:97:c0:4a:84:a0:3b:84:b8:02:
6b:09:ec:fc:e5:80:36:fa:8e:55:b6:dd:94:68:40:81:4b:7e:
ac:e2:37:e8:4f:18:91:ec:0d:05:82:25:74:d4:9d:51:50:d1:
3d:df:2b:a9:03:0b:07:bb:a9:3f:dc:af:3b:77:b3:bf:cf:9a:
ef:2a:d8:54:39:ed:5d:bb:06:a7:a7:56:90:f3:2c:8c:e5:11:
cb:dc:26:60:b7:7c:c9:9e:dd:ee:4a:47:11:53:72:be:7d:5d:
d3:c1:5d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org