Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/283DD4021AB611ECB1F3BA25D8A014CE.roa
File: 283DD4021AB611ECB1F3BA25D8A014CE.roa (raw, json)
Hash identifier: maf0Bo1ifUkdzy9Gzob7C8yiRe5tXZMibX+/oBB5VGE=
Subject key identifier: 6F:39:EA:D0:A4:A0:94:D2:81:C8:0A:9D:E4:5B:3B:C2:4D:35:80:A7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0689
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/283DD4021AB611ECB1F3BA25D8A014CE.roa
Signing time: Tue 21 Sep 2021 08:30:20 +0000
ROA not before: Tue 21 Sep 2021 08:30:17 +0000
ROA not after: Wed 21 Sep 2022 08:30:17 +0000
asID: 22773
IP address blocks: 154.16.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1673 (0x689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Sep 21 08:30:17 2021 GMT
Not After : Sep 21 08:30:17 2022 GMT
Subject: CN=6149981c-1889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:94:e8:4b:0f:00:21:50:fd:69:8c:c6:f0:
df:1c:87:54:33:ba:56:32:2a:d2:9b:27:c1:63:50:
ea:ce:dc:af:db:75:c6:95:ca:63:fa:3d:17:1b:da:
d7:2a:33:bd:26:c9:53:b4:64:5c:f8:cb:79:d3:f3:
ad:e4:e1:a7:8f:59:f1:04:64:bb:bc:5c:14:7a:f6:
f3:82:46:45:96:33:82:c7:ba:02:17:ed:a6:63:38:
ee:71:6c:d9:dc:71:63:bb:02:58:c2:a4:b8:8d:f5:
f9:f9:0e:bd:bb:48:bc:37:10:96:29:54:fa:f7:3c:
2a:b3:a1:16:3f:e0:46:63:fe:b9:18:7b:9c:bd:da:
89:8e:3b:9b:2b:2e:50:85:03:f1:45:ba:57:5f:7b:
0e:25:38:a6:26:9e:b4:cc:12:17:08:6c:6a:8a:af:
12:6c:e1:61:da:97:d8:e5:86:75:7a:1b:68:44:f9:
d0:e5:2d:e5:2b:80:aa:24:b8:5e:14:da:8f:aa:9e:
f5:c9:dc:84:7c:dd:78:71:e6:1f:50:a4:77:77:1e:
cd:16:0b:b1:fa:03:7e:de:57:60:e3:7f:45:d5:d6:
e9:3e:0e:5f:68:00:31:9c:53:d2:e0:0e:aa:fc:f9:
23:96:b6:6f:72:ea:c1:79:6a:23:5d:0c:38:d8:52:
f3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:39:EA:D0:A4:A0:94:D2:81:C8:0A:9D:E4:5B:3B:C2:4D:35:80:A7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/283DD4021AB611ECB1F3BA25D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.242.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:9a:e3:a7:e2:7a:50:f9:5e:7d:e2:a1:fb:5d:c1:ac:db:08:
c4:70:fe:f8:f7:0f:e0:2b:3e:6a:79:a2:c7:51:0b:30:6d:03:
f7:5d:5e:ec:47:5c:5f:d2:b3:55:2f:04:9b:b5:4f:a3:2e:1a:
06:0c:73:34:79:26:de:25:4b:0c:47:ca:bb:e6:08:5c:72:34:
8c:f3:86:12:9a:38:1e:2d:cd:d8:94:a7:8a:e0:88:64:e4:cd:
1c:c9:64:20:15:31:cc:44:4a:da:39:6a:ea:df:34:aa:43:bc:
a2:67:26:4c:e7:02:de:9b:57:48:81:38:b3:ee:e9:e4:0f:e4:
0d:f4:b7:40:32:8c:25:ea:c1:3e:da:be:01:cb:0e:7f:f5:5f:
0f:61:b2:aa:34:17:55:44:0b:79:58:2a:42:1d:71:ad:f9:a2:
27:d3:4c:44:4a:50:5f:7c:30:c0:14:99:f3:a9:58:37:6d:a3:
73:49:2b:06:23:fa:d9:b5:53:5e:41:f0:13:f2:93:f8:88:e7:
8b:9b:6d:03:32:04:68:b3:77:f1:23:20:36:33:d6:de:b7:86:
2a:69:38:85:5e:57:65:5f:80:d8:95:ab:83:ec:da:5f:c9:f1:
6c:d9:3b:8a:fb:d6:a7:f5:56:10:55:92:93:d7:a6:12:29:0b:
91:d2:61:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:56:14 2025 by rpki-client