Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3C4143262B8711ECBC9E5C05D8A014CE.roa
File: 3C4143262B8711ECBC9E5C05D8A014CE.roa (raw, json)
Hash identifier: rThzkiVFY0fvaDx7jy76Tx4Ihr1DpKBn2fi6BEwdRoY=
Subject key identifier: 88:37:9C:20:E9:FB:D9:97:F5:4D:0A:F0:E7:E6:16:69:B2:95:AA:19
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 06BD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3C4143262B8711ECBC9E5C05D8A014CE.roa
Signing time: Tue 12 Oct 2021 18:07:18 +0000
ROA not before: Tue 12 Oct 2021 18:07:12 +0000
ROA not after: Wed 12 Oct 2022 18:07:12 +0000
asID: 174
IP address blocks: 154.16.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1725 (0x6bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 12 18:07:12 2021 GMT
Not After : Oct 12 18:07:12 2022 GMT
Subject: CN=6165ced5-05e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:d0:68:8a:9b:6d:37:33:e5:8d:a8:c3:93:
0f:10:da:e8:03:3c:03:3f:ce:b3:c3:e4:27:43:20:
27:13:15:22:ff:18:5b:40:c8:68:ad:c1:ce:88:ac:
06:94:12:f8:5a:dc:55:3d:47:ff:d9:e6:6e:1c:60:
62:2c:3c:89:50:db:c0:20:70:a4:b8:ae:93:3d:71:
49:b1:8c:c2:17:25:93:6c:3b:ee:b6:27:4b:34:25:
fb:db:89:78:a2:cb:a8:07:a9:36:b2:74:86:2b:18:
21:72:f7:d6:6d:c7:a3:a8:40:82:19:c8:26:c4:9b:
aa:c4:73:48:77:02:1f:a1:ce:74:6a:37:ac:64:b4:
90:48:36:a5:0f:fb:3e:56:05:14:e5:fc:be:16:b2:
22:33:86:31:13:76:13:9d:84:5d:a5:71:4d:1e:5f:
4e:69:4d:63:ce:7c:32:f6:ce:ea:af:d4:fb:7d:38:
14:ce:77:de:29:f0:80:3d:81:4c:63:17:13:32:07:
23:dd:49:2d:5a:3b:0a:3e:ab:8d:8c:0a:53:74:6d:
a6:58:82:47:36:10:86:c3:3e:12:77:1b:ec:38:df:
6c:05:30:50:50:98:d5:53:3f:55:19:9b:d1:07:5a:
c3:69:0b:7a:c9:28:30:5c:ab:a8:25:a9:91:f9:9f:
ca:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:37:9C:20:E9:FB:D9:97:F5:4D:0A:F0:E7:E6:16:69:B2:95:AA:19
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3C4143262B8711ECBC9E5C05D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.105.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ea:a2:00:fe:42:63:c7:05:2a:25:f1:7f:5f:34:d5:ba:e7:
b5:37:b5:6a:00:d0:63:85:c8:28:85:1d:00:60:7b:88:16:4f:
47:22:96:40:bd:1f:c6:99:0c:ed:1a:bc:87:28:a1:e9:d3:e6:
26:55:bf:23:7e:88:25:e6:82:bd:be:6f:01:82:55:a5:6f:90:
54:1c:51:18:87:9c:83:56:68:58:04:ee:94:ad:38:0c:8b:fc:
4d:21:49:af:22:8f:7e:3d:f1:0b:f2:c1:18:49:a7:cb:21:63:
4b:15:3f:46:96:68:ae:ef:d9:2b:54:f1:66:be:4d:38:ab:c1:
f7:8a:9f:71:a3:2d:2b:cc:76:fb:07:9a:b4:8f:09:3b:2c:b2:
73:01:f9:7d:5c:0c:27:2c:84:3a:d3:ff:55:df:7b:6d:ff:76:
10:b5:93:cb:e6:89:a5:ec:c3:c1:b5:63:a6:57:77:02:cf:6e:
ad:69:f1:96:03:c7:d7:cc:cb:34:98:ea:84:bf:e4:2c:21:c0:
f2:a3:db:ef:52:81:b4:27:19:79:fc:30:41:aa:93:84:cb:65:
e9:fd:92:c4:a9:38:f3:77:01:fa:dc:73:6a:da:72:26:3b:e6:
e3:e9:31:fa:23:c6:83:1f:c8:09:13:ed:7f:5e:27:6e:37:2a:
c8:d8:dc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org