Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32B9D4462CBC11EB9EBDA60FF8AEA228.roa
File: 32B9D4462CBC11EB9EBDA60FF8AEA228.roa (raw, json)
Hash identifier: ylXZSxlXLmWipMAaYvZAxpaUckurbhV2LqJrns5VF90=
Subject key identifier: 94:A6:34:6F:AB:BC:B5:61:B7:E2:64:BE:45:00:34:93:26:28:27:EE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 041F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32B9D4462CBC11EB9EBDA60FF8AEA228.roa
Signing time: Sun 22 Nov 2020 12:13:59 +0000
ROA not before: Sun 22 Nov 2020 12:13:53 +0000
ROA not after: Tue 22 Nov 2022 12:13:53 +0000
asID: 212336
IP address blocks: 154.16.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1055 (0x41f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Nov 22 12:13:53 2020 GMT
Not After : Nov 22 12:13:53 2022 GMT
Subject: CN=5fba5606-f1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0d:93:f5:4a:d3:1f:17:45:01:dc:02:d4:b6:
c0:56:e3:71:e1:14:f5:b4:4c:60:ae:b3:e4:15:ac:
ec:b3:84:b8:e3:9b:eb:0b:1c:73:a0:c6:b0:24:40:
20:25:f7:d3:59:ae:0f:ea:70:12:d2:06:a8:b7:6a:
a3:11:71:07:47:28:04:d0:e8:d5:6c:8c:53:ef:fb:
5e:0c:20:1a:58:3d:63:f5:04:8e:4f:e1:d1:24:93:
c0:87:44:e5:69:84:dc:c9:c6:fd:e7:e6:56:b6:c6:
56:ee:80:75:45:33:7f:04:0b:d2:df:88:84:5c:67:
2b:ad:e6:48:b9:05:65:6f:3d:1d:15:a6:f0:b8:e3:
7b:30:db:3f:ad:ce:b6:7f:28:54:f9:4a:ee:23:e8:
15:81:44:7b:85:16:8e:2d:ce:ba:47:01:fc:65:b4:
ea:71:8d:e0:2f:de:16:35:b5:d9:09:4f:3e:4d:2d:
9b:3a:84:ce:38:9b:8e:5e:05:4e:53:ba:96:cb:d0:
55:5f:e5:16:c3:2d:05:cb:c6:97:11:c2:b4:41:f7:
f2:ec:77:ec:a3:45:e2:fa:85:41:57:4b:2e:bb:5a:
64:81:44:54:8c:19:37:0b:ed:b8:58:19:54:a7:63:
5a:0e:13:d3:76:1d:53:bb:69:75:81:4f:14:f7:c5:
31:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A6:34:6F:AB:BC:B5:61:B7:E2:64:BE:45:00:34:93:26:28:27:EE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32B9D4462CBC11EB9EBDA60FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.83.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:6d:90:33:ae:f3:b4:61:8b:2a:16:8e:65:7e:45:41:1c:84:
1a:3a:a8:c6:7a:80:55:25:43:10:69:4a:35:ca:f9:ce:09:a8:
62:ab:be:22:a2:98:a1:a7:8d:29:5f:87:17:8b:f7:74:df:7d:
3f:8a:d9:2d:48:e8:a7:b6:8c:ef:e1:09:71:78:3a:f5:f8:77:
05:1e:27:0b:c4:b4:4e:a0:15:15:98:61:9c:1b:32:6d:97:d5:
cf:14:10:06:e2:ef:dd:05:91:e8:95:ee:d4:5e:c3:f6:de:6f:
92:77:83:52:47:19:02:9b:37:bd:a5:33:3a:ec:e0:fe:27:c9:
9d:8e:e6:c2:33:de:6b:6f:d6:a7:b8:90:86:42:ef:d2:d1:d3:
a7:88:12:e2:03:82:a8:3b:97:c9:61:ec:c8:06:36:c3:36:7d:
f1:b9:fd:32:4d:64:24:41:ca:1e:0d:5a:e1:f8:dc:e3:50:2a:
3b:47:93:64:65:ea:d1:97:27:5a:52:29:ae:6c:63:d9:ba:0e:
5f:cf:05:e7:c9:35:8e:14:c3:c3:ea:81:25:ad:33:71:1c:f2:
10:0a:55:26:c2:55:6b:0b:28:e1:43:01:6b:0a:e0:27:84:56:
e7:cb:30:e6:21:25:2e:b0:20:93:17:ac:43:3d:14:ed:55:44:
d4:bf:01:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:52:51 2025 by rpki-client