Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2841600E2CF911EC81D0A34DD8A014CE.roa
File: 2841600E2CF911EC81D0A34DD8A014CE.roa (raw, json)
Hash identifier: 5TSc4gjX+cgPI9kRReVV3TxK2ih/kN5sLoYY53VtIVA=
Subject key identifier: B6:65:6F:CE:C4:8D:5A:5F:F3:9C:03:C4:09:09:BC:3E:49:12:95:69
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 06C3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2841600E2CF911EC81D0A34DD8A014CE.roa
Signing time: Thu 14 Oct 2021 14:15:18 +0000
ROA not before: Thu 14 Oct 2021 14:15:13 +0000
ROA not after: Fri 21 Oct 2022 14:15:13 +0000
asID: 139660
IP address blocks: 154.16.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1731 (0x6c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 14 14:15:13 2021 GMT
Not After : Oct 21 14:15:13 2022 GMT
Subject: CN=61683b75-3a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2c:4d:10:c5:ec:8d:a5:00:42:90:e6:61:1e:
88:29:50:74:5d:8e:98:1b:65:9f:1b:aa:48:bf:1c:
8e:1a:9d:57:e0:9f:0b:ac:29:c9:03:dc:52:1a:4c:
01:d2:f9:6a:5a:42:82:2f:b5:a3:df:e1:70:15:4e:
ac:1c:d5:83:13:32:a2:a7:8a:6d:5f:de:34:0c:5e:
bb:f5:15:7e:e1:ea:aa:0a:8a:18:59:00:fb:b7:4f:
01:13:4f:9f:c5:17:56:15:54:ec:6a:f5:a5:28:ee:
c1:54:fa:13:58:b6:6b:41:f0:17:65:9b:a5:f3:c9:
e1:28:46:fd:92:b8:8c:2a:04:f4:bb:dc:80:f1:11:
0a:6b:98:1b:e1:27:b7:83:ab:0c:e0:4f:cc:52:c6:
be:c6:87:0e:07:51:7c:13:c2:89:c1:43:a1:ef:f0:
f7:b5:ee:ab:64:7f:45:a8:23:52:25:6a:7f:aa:f9:
f3:4b:97:33:9d:78:fe:61:26:55:c8:f8:b7:45:97:
5d:e0:3d:4f:e9:41:b5:f0:22:d8:ee:95:b4:53:07:
7b:fd:fd:2d:16:30:24:20:b7:26:f7:6f:15:49:4b:
08:94:a7:3a:68:8f:bf:01:dd:a2:af:89:9f:f5:80:
d8:26:00:65:7e:1f:39:ba:e6:bb:1f:be:2d:8d:b0:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:65:6F:CE:C4:8D:5A:5F:F3:9C:03:C4:09:09:BC:3E:49:12:95:69
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2841600E2CF911EC81D0A34DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.195.0/24
Signature Algorithm: sha256WithRSAEncryption
96:88:72:13:de:fa:70:47:53:37:ed:cb:f6:91:20:5b:b9:b3:
55:36:0d:80:5f:3b:e9:c6:6c:75:61:3b:50:c6:7c:40:4d:af:
23:8c:99:f8:cf:44:60:2c:39:43:b3:2a:6a:85:e7:02:c5:e5:
95:7e:fd:42:64:b7:4c:ef:c1:81:3f:6b:6f:85:f6:2e:5f:fd:
0e:22:7e:a0:f5:85:6b:6d:1d:27:8e:57:15:b2:82:6e:2b:9f:
c7:92:9f:40:7d:ba:57:00:87:b7:b4:96:f9:15:b6:be:31:96:
3e:4f:e2:03:0d:c6:1a:03:ea:85:92:99:d0:8e:b6:5d:c6:ff:
01:3e:a0:f2:50:b9:c4:fd:2c:f5:3b:1f:47:1b:67:b3:70:ff:
1f:69:fe:91:40:6a:9f:4d:04:c2:8b:09:d4:65:64:be:fc:a9:
bc:e0:01:77:8b:0c:5a:b6:b8:8a:73:bc:72:d9:da:f5:71:ca:
c0:c8:b8:0b:86:2f:cb:9f:1b:4f:6e:c1:90:d0:d3:b2:01:95:
94:1f:67:e4:75:c4:28:95:e9:a9:0c:81:8e:74:1a:b1:ef:bb:
6c:1c:f8:69:25:0e:0b:c9:c7:47:9d:9e:f3:d6:af:6d:fa:4f:
6f:3f:d8:8c:0f:ce:bb:72:23:02:28:60:03:11:90:b3:d4:c8:
b6:a3:28:ff
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBsMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMTEwMTQxNDE1MTNaFw0yMjEwMjExNDE1MTNaMBgxFjAU
BgNVBAMMDTYxNjgzYjc1LTNhNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVLE0QxeyNpQBCkOZhHogpUHRdjpgbZZ8bqki/HI4anVfgnwusKckD3FIa
TAHS+WpaQoIvtaPf4XAVTqwc1YMTMqKnim1f3jQMXrv1FX7h6qoKihhZAPu3TwET
T5/FF1YVVOxq9aUo7sFU+hNYtmtB8Bdlm6XzyeEoRv2SuIwqBPS73IDxEQprmBvh
J7eDqwzgT8xSxr7Ghw4HUXwTwonBQ6Hv8Pe17qtkf0WoI1Ilan+q+fNLlzOdeP5h
JlXI+LdFl13gPU/pQbXwItjulbRTB3v9/S0WMCQgtyb3bxVJSwiUpzpoj78B3aKv
iZ/1gNgmAGV+Hzm65rsfvi2NsLFzAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUtmVv
zsSNWl/znAPECQm8PkkSlWkwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzI4NDE2MDBFMkNGOTExRUM4MUQwQTM0REQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEMMwDQYJKoZIhvcNAQEL
BQADggEBAJaIchPe+nBHUzfty/aRIFu5s1U2DYBfO+nGbHVhO1DGfEBNryOMmfjP
RGAsOUOzKmqF5wLF5ZV+/UJkt0zvwYE/a2+F9i5f/Q4ifqD1hWttHSeOVxWygm4r
n8eSn0B9ulcAh7e0lvkVtr4xlj5P4gMNxhoD6oWSmdCOtl3G/wE+oPJQucT9LPU7
H0cbZ7Nw/x9p/pFAap9NBMKLCdRlZL78qbzgAXeLDFq2uIpzvHLZ2vVxysDIuAuG
L8ufG09uwZDQ07IBlZQfZ+R1xCiV6akMgY50GrHvu2wc+GklDgvJx0ednvPWr236
T28/2IwPzrtyIwIoYAMRkLPUyLajKP8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org