Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4278AC82C29211EC9284B3F8F1222468.roa
File: 4278AC82C29211EC9284B3F8F1222468.roa (raw, json)
Hash identifier: s8ibg9gSRI1TtUsg1YSjhQmCmO3ZEMXyKGm6vm3i5eY=
Subject key identifier: 3B:01:AF:CA:AA:8B:05:4A:30:E2:CF:5F:14:A4:19:B4:2E:2E:E4:11
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0836
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4278AC82C29211EC9284B3F8F1222468.roa
Signing time: Fri 22 Apr 2022 23:16:38 +0000
ROA not before: Sat 23 Apr 2022 23:16:33 +0000
ROA not after: Mon 23 May 2022 23:16:33 +0000
asID: 26548
IP address blocks: 154.16.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2102 (0x836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Apr 23 23:16:33 2022 GMT
Not After : May 23 23:16:33 2022 GMT
Subject: CN=62633756-2738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:8d:97:bd:f1:c3:1c:97:0e:6d:f8:44:d3:
30:e3:2b:19:dc:37:f4:8b:c8:d2:00:4d:e0:38:61:
c8:b1:33:f8:e2:55:b3:3e:1a:86:ac:4d:7d:26:35:
30:42:25:6c:8f:72:0c:c6:6f:3a:b6:94:c7:57:cf:
67:d7:fb:ea:9c:c8:7b:41:43:4c:7b:af:55:8f:e2:
8e:cd:2a:c6:7d:6c:7a:f5:52:1d:43:f2:55:e0:a4:
09:f8:1e:89:fc:5e:99:d0:ce:95:2e:2b:c8:c6:51:
ac:82:12:ce:6f:96:85:5c:1e:b3:7f:e6:1c:f8:28:
2d:6b:5d:d5:33:62:38:51:c2:5b:a2:69:59:dc:bc:
0e:0a:99:03:99:d8:fe:33:5d:df:28:d2:dd:c5:4c:
ee:d8:5f:73:25:a9:5b:a5:ee:54:86:d6:33:01:2d:
63:65:fe:45:c2:fc:d3:f7:7c:95:1c:2a:e6:9d:66:
db:9f:f8:87:7b:bb:e7:c0:00:da:7e:91:dc:0e:62:
5c:ab:d7:03:cb:7f:d3:aa:2f:1b:bf:b0:ed:4d:7c:
3c:eb:54:e8:21:be:0b:ca:7b:b5:c7:62:9e:cd:4e:
fc:1c:26:d9:80:39:36:b9:54:71:83:ec:c1:3c:a6:
ec:11:77:95:dc:44:f9:3b:10:3f:a4:ad:49:b4:ec:
1a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:01:AF:CA:AA:8B:05:4A:30:E2:CF:5F:14:A4:19:B4:2E:2E:E4:11
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4278AC82C29211EC9284B3F8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.7.0/24
Signature Algorithm: sha256WithRSAEncryption
64:cd:d0:e8:0c:0f:dc:92:0b:3a:da:3f:a0:18:24:eb:1d:96:
66:9e:68:a2:b2:23:bd:8a:28:08:48:63:1d:c0:24:12:2e:64:
9a:01:3a:b3:70:1a:a8:40:ac:ea:d7:17:21:63:0c:79:85:29:
9c:02:b0:15:2d:b3:53:80:9e:8b:53:33:ae:3d:de:8b:39:97:
58:7c:06:f4:ab:08:e0:5d:18:72:c1:3e:1c:ed:0e:51:00:59:
f3:27:2e:14:bd:d1:a9:86:14:ae:c6:d1:e3:ea:33:1f:b9:bd:
8a:f7:4c:d2:1d:2a:0b:49:21:f7:df:69:4a:6b:16:8d:64:e1:
31:58:75:4c:a2:35:d4:cb:a1:9e:0f:5f:76:0f:f1:79:c2:5a:
75:0f:fa:dd:da:16:6c:fc:2e:23:0c:e0:42:1e:32:64:59:6a:
7e:aa:ac:4c:f9:91:cd:52:a2:91:e7:a6:54:5f:0e:1c:63:d6:
b1:94:e3:c4:ca:53:aa:4f:43:f6:ac:74:b0:1e:a7:ec:90:3f:
48:fa:57:f1:5e:ce:b7:fd:22:7e:2d:38:c0:ca:56:76:7a:a6:
e1:6b:74:0f:a7:8c:83:17:50:d2:1c:90:ae:46:5f:43:84:67:
a8:ac:1a:b8:84:cf:31:6c:36:a1:e8:1c:17:6b:a6:7b:ce:ac:
6d:3f:e0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:53:38 2025 by rpki-client