Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/37EDD646539A11EC99BA4E51D8A014CE.roa
File: 37EDD646539A11EC99BA4E51D8A014CE.roa (raw, json)
Hash identifier: ma39lAVfzieuHqje8RQ2xP3X/sK0CXBSZmgCq0+Cca4=
Subject key identifier: 9F:B7:6D:34:7D:06:80:3B:62:5A:BD:DA:E0:4C:AF:A3:DA:59:B7:82
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 071B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/37EDD646539A11EC99BA4E51D8A014CE.roa
Signing time: Thu 02 Dec 2021 18:03:57 +0000
ROA not before: Thu 02 Dec 2021 18:03:52 +0000
ROA not after: Fri 02 Dec 2022 18:03:52 +0000
asID: 139660
IP address blocks: 154.16.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1819 (0x71b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 2 18:03:52 2021 GMT
Not After : Dec 2 18:03:52 2022 GMT
Subject: CN=61a90a8d-fbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:15:38:61:fc:90:6d:25:3d:88:9f:dd:36:79:
23:70:d8:ca:21:a0:d5:4e:02:dc:dc:09:7a:67:f7:
1a:59:7f:6e:4c:ef:8a:e3:68:5d:76:37:f1:93:95:
34:2f:c2:13:56:df:da:88:20:15:1e:6e:b8:c1:63:
2a:34:82:91:76:da:94:1b:fc:7b:4b:4b:7a:94:46:
28:c9:a0:36:18:a6:10:f5:89:1f:9b:38:cb:17:c8:
b0:3e:ac:03:7c:68:99:90:86:b4:e0:4a:a4:6e:4b:
c5:f6:3c:77:a5:cb:83:58:45:68:63:8b:e7:e8:4f:
58:24:3d:2b:ea:1c:11:6c:86:5d:04:b1:11:8a:15:
73:41:f3:f7:2c:6c:53:13:d2:06:14:fc:97:6c:ac:
41:ce:29:c3:ab:1e:ec:85:89:3f:44:20:97:76:c5:
3b:4d:d1:58:04:3e:ea:db:48:69:88:89:67:09:a3:
b0:ee:85:6d:fd:50:5e:4b:46:9a:01:bd:a4:f2:33:
0a:22:2c:d3:73:59:e0:fc:81:dc:1b:b8:df:5c:0d:
40:9c:75:f2:a2:a5:e4:31:fd:0b:0e:d5:14:e2:6e:
51:01:22:a5:69:63:ff:ad:fa:a8:c2:e9:67:17:43:
08:74:dc:bf:a9:e4:1a:96:3e:ed:b0:39:cf:4d:00:
cb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B7:6D:34:7D:06:80:3B:62:5A:BD:DA:E0:4C:AF:A3:DA:59:B7:82
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/37EDD646539A11EC99BA4E51D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.209.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:54:8b:36:09:f5:96:df:aa:b4:cc:8d:b7:d9:e7:9f:2e:21:
1c:fe:62:89:eb:96:3e:87:fc:42:c3:7b:84:f6:6e:78:91:95:
57:ed:4a:ab:1c:ec:ad:0d:ee:a8:38:2e:1a:7a:91:70:4f:db:
de:db:2d:16:50:a5:3c:9d:d5:0a:1e:32:37:7a:1d:17:a8:7d:
d7:d9:3a:e5:eb:ad:c4:c9:5f:37:3f:77:9a:c2:4e:6e:d4:9f:
6b:de:15:e3:88:5a:8e:dc:32:d8:80:3a:ee:15:57:75:2c:fa:
f7:16:be:d0:78:9f:9c:2c:12:32:a9:0c:e1:54:c0:e7:9f:8c:
15:1d:b1:b5:f4:53:c7:42:3c:b1:56:99:75:c4:cd:6d:5e:7b:
01:9e:ce:d0:78:0e:b4:56:1d:ba:4c:74:99:98:03:4b:62:c0:
22:7e:29:b1:10:64:ca:e0:cb:0b:48:db:c7:b3:86:dd:cd:11:
83:2b:6b:5d:b5:81:e1:f5:42:e3:87:e2:bf:44:de:a7:47:22:
e0:0b:4d:51:7e:1a:b5:1d:9c:7f:14:51:76:19:25:76:d8:b3:
a9:57:d2:09:fd:0c:25:d2:19:d4:cf:95:c5:df:69:26:25:a0:
5b:8f:68:9f:f7:77:b8:ce:57:62:aa:ec:ad:62:c4:1c:4f:ad:
31:1e:b2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org