Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2FECD046FC7911EBBB5C451DD8A014CE.roa
File: 2FECD046FC7911EBBB5C451DD8A014CE.roa (raw, json)
Hash identifier: Zo+eHVZObj7jhWbJGt3tbPZYsPDXsN/OzqE/MYEkMWE=
Subject key identifier: EC:35:0A:B4:97:21:7C:4D:43:69:A0:FB:3F:40:80:68:9F:EE:00:01
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 061D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2FECD046FC7911EBBB5C451DD8A014CE.roa
Signing time: Fri 13 Aug 2021 20:59:03 +0000
ROA not before: Fri 13 Aug 2021 20:58:57 +0000
ROA not after: Sat 13 Aug 2022 20:58:57 +0000
asID: 397423
IP address blocks: 154.16.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1565 (0x61d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 13 20:58:57 2021 GMT
Not After : Aug 13 20:58:57 2022 GMT
Subject: CN=6116dd17-af38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:f8:43:5e:c8:da:f5:54:c8:54:75:65:93:
1c:13:ce:de:ab:a2:44:58:53:da:59:e4:51:2e:c1:
56:42:36:15:86:e6:25:42:9a:80:1b:1a:5f:6c:db:
0a:4f:82:8b:5d:95:50:11:f1:53:11:c8:40:c8:7f:
4d:c5:ea:14:83:4e:ee:78:5b:ae:93:16:53:4f:d5:
80:13:d8:e4:44:29:84:bb:b0:e9:bf:a8:39:6e:87:
4a:f8:9a:ae:ff:8a:be:58:e6:e2:e9:ea:ce:a2:d3:
93:ea:73:81:fb:16:54:8b:e0:7b:16:d1:95:43:86:
d8:b3:35:53:0e:49:c1:09:fd:37:7a:14:06:c9:02:
f2:83:41:e3:df:96:9b:76:86:6f:ba:f7:7a:2c:fe:
2a:c3:8b:1e:06:70:0d:b0:fc:ef:0e:c3:bc:21:5f:
02:9b:75:6f:7b:99:5c:72:d9:dd:6f:47:e9:7b:76:
ca:8b:cf:0b:47:66:50:37:b4:ee:8a:c8:c4:da:8a:
1a:d2:9e:14:b4:e9:72:fe:a6:8f:84:5b:2e:95:84:
fd:c2:f4:a3:4e:95:9b:9b:43:c0:6c:b2:58:ca:63:
49:0c:5c:e8:a3:36:97:99:c0:a5:60:d8:0b:a1:d5:
f2:cd:cb:f9:27:f6:13:58:b6:91:02:74:ac:4b:92:
fe:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:35:0A:B4:97:21:7C:4D:43:69:A0:FB:3F:40:80:68:9F:EE:00:01
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2FECD046FC7911EBBB5C451DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.171.0/24
Signature Algorithm: sha256WithRSAEncryption
34:a7:11:b1:31:8f:d0:b3:0d:a2:cb:9d:2a:6a:de:07:06:7c:
90:eb:90:3a:9a:5c:81:19:51:7d:84:71:93:7e:ea:89:b0:f9:
b8:ca:00:00:dd:b5:67:8b:e8:3b:c2:7f:6b:56:0e:ff:15:9c:
12:6b:54:b7:20:28:f7:5f:a6:6f:42:02:77:3f:db:0d:78:c4:
55:5a:4c:96:51:96:53:b8:97:31:9a:eb:d7:04:9a:97:99:39:
21:5d:4b:7f:b4:35:d6:f7:e6:7c:b5:02:01:e7:93:3c:27:4d:
0d:d2:8e:c3:fe:1f:7c:49:c6:10:63:36:6a:44:b1:17:8d:7a:
79:66:08:0c:9d:80:b7:8b:49:99:a4:5f:2a:ce:b2:56:db:e8:
0b:67:17:91:0b:fd:ce:9e:90:65:4f:2b:62:c5:e5:7d:54:33:
3e:2e:6b:4f:6b:2f:22:0d:3b:25:67:f6:75:4f:d6:02:81:88:
2d:89:1f:26:b6:1d:37:47:4e:2a:d5:d3:14:79:b5:21:6b:2f:
83:dd:3b:7b:3e:c4:40:5d:90:ad:e7:a3:82:36:59:7e:70:1e:
72:d0:29:25:16:e1:1e:84:4a:2b:94:fd:a7:ff:71:76:08:4d:
3d:1f:d8:6f:b9:a0:2d:57:36:75:26:18:12:cb:01:94:76:c6:
fd:65:23:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org