Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4406920C966011EC90337D7E5A40D577.roa
File: 4406920C966011EC90337D7E5A40D577.roa (raw, json)
Hash identifier: ZnnEpfo+utYnD1oQ/DXZeyA+ZFqE9DcH/TGbirSUULE=
Subject key identifier: DC:EB:92:4A:64:A4:3B:2F:36:AC:47:27:07:72:AD:EB:BA:27:4C:E9
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 07D4
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4406920C966011EC90337D7E5A40D577.roa
Signing time: Fri 25 Feb 2022 17:27:54 +0000
ROA not before: Fri 25 Feb 2022 17:27:50 +0000
ROA not after: Sat 25 Feb 2023 17:27:50 +0000
asID: 272524
IP address blocks: 154.16.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2004 (0x7d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 25 17:27:50 2022 GMT
Not After : Feb 25 17:27:50 2023 GMT
Subject: CN=6219119a-c1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:5f:a9:1f:14:a3:6c:76:17:37:20:d6:92:
1a:ec:5e:50:d4:72:7a:7e:9e:e0:cc:b5:04:53:47:
57:7f:37:a2:be:a0:a5:56:3c:1d:47:21:e9:ed:b7:
00:32:4d:ec:90:f4:45:0f:9a:4c:f5:0c:05:f1:12:
c6:a7:62:46:b0:9d:69:50:39:ac:87:4c:7e:e5:06:
2d:ce:37:e8:88:15:d9:f1:ab:78:56:c2:4d:8b:8f:
0e:50:55:be:d4:dc:d0:c7:a6:c3:1e:fd:22:0a:99:
0b:90:89:12:e5:25:a7:d9:45:df:50:02:0f:d0:ca:
6f:c7:8b:d4:87:1c:fa:ac:76:bb:08:35:c2:51:d2:
82:ed:e6:d7:d1:3a:a3:27:e7:29:de:90:c9:0c:93:
cd:89:e0:b5:6e:7c:65:65:f5:e5:a1:21:cf:23:a7:
ba:98:23:64:52:6a:9e:d2:80:0f:c0:4e:e8:4e:b2:
0b:f1:c8:b9:bd:94:b3:a7:2d:85:e1:a5:f1:19:30:
78:12:9b:58:fb:71:7e:c0:8f:38:f1:c1:57:da:d7:
a3:1b:82:dc:68:4f:8d:14:51:04:0c:a9:b3:8a:da:
0b:a6:dd:6c:27:2e:ee:53:a0:6e:4a:7f:1d:11:71:
06:b0:bf:96:33:2a:a9:26:c0:0e:cf:43:7a:bf:e6:
ed:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EB:92:4A:64:A4:3B:2F:36:AC:47:27:07:72:AD:EB:BA:27:4C:E9
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4406920C966011EC90337D7E5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.7.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a8:45:43:19:52:e1:0b:fb:6e:05:ea:d6:3e:04:24:a7:f9:
c8:db:26:90:d6:2d:e5:e9:e8:3b:e0:96:c1:05:c8:c5:9c:28:
68:7f:87:e8:55:c1:06:a2:7e:ac:8b:15:a0:6b:3b:39:87:61:
94:ac:35:04:de:b8:c2:1f:7e:38:b8:6c:89:d2:b3:70:cd:54:
6e:66:1b:92:0e:56:62:25:f6:d3:17:19:01:8d:b1:aa:df:d0:
b5:33:c6:00:4f:0c:15:84:17:cc:90:64:32:46:5d:c4:ee:c9:
46:28:f1:2c:97:6f:02:c9:66:7c:d6:fe:63:fd:3d:36:a3:2c:
8e:18:dc:15:95:15:05:2c:73:b3:21:87:99:1a:75:dd:f1:b6:
7a:f5:cd:37:f1:cc:d2:e2:1a:f2:39:c3:02:3b:56:10:f4:35:
2c:80:dd:39:f2:60:38:41:d5:c3:36:79:16:84:8c:ff:a7:74:
c8:11:bd:ee:92:0f:8a:e0:e2:74:ed:2c:a6:0a:42:9c:35:9b:
57:99:a3:87:ec:fb:83:6f:02:39:8c:de:7e:b9:ea:8a:db:4a:
6b:9c:0a:6d:da:e7:61:5f:56:b0:ef:b7:69:68:d3:f2:90:60:
00:9d:3e:8b:a6:2d:ee:68:bc:d8:71:ed:27:79:6d:82:83:a5:
bf:42:62:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:51:42 2025 by rpki-client