Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/466AD26EE22811ED9F0E5C13306D8C1D.roa
File: 466AD26EE22811ED9F0E5C13306D8C1D.roa (raw, json)
Hash identifier: DZPLTYVcOJ6N5BLF9KDu0gCPgF3DWESmJKtrtzIJ4WQ=
Subject key identifier: AC:A6:FA:4E:0A:9A:85:7B:75:6F:3C:D0:80:B9:7A:F5:0B:B5:A4:4C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D76
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/466AD26EE22811ED9F0E5C13306D8C1D.roa
Signing time: Sun 23 Apr 2023 22:43:33 +0000
ROA not before: Sun 23 Apr 2023 22:43:27 +0000
ROA not after: Thu 11 Apr 2024 22:43:27 +0000
asID: 834
IP address blocks: 154.16.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Apr 23 22:43:27 2023 GMT
Not After : Apr 11 22:43:27 2024 GMT
Subject: CN=6445b495-3dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:84:e1:04:f6:a4:dd:2e:c7:10:59:6d:42:
19:34:9a:04:81:20:2f:64:69:7f:83:8f:05:b0:7b:
8f:6d:d1:16:2f:2c:0b:15:f8:90:62:08:7c:ef:cd:
28:51:e1:e0:94:2e:34:55:01:11:21:04:a1:3a:25:
65:73:f8:30:2a:22:d0:38:12:0b:d7:ab:fe:62:38:
0d:a7:41:29:83:23:8e:cc:2d:9b:96:ef:c1:04:b7:
7e:4e:07:41:a0:6b:59:8a:dd:df:a2:d8:88:48:58:
fb:5c:28:ec:32:37:ef:0d:df:ca:90:ac:18:f6:29:
82:07:46:c1:bc:01:30:4f:5f:3e:0c:3a:8f:d5:78:
52:75:3c:fb:2a:ec:7f:8c:13:71:ee:2d:89:70:89:
b9:25:8f:f7:73:48:26:fa:db:55:0f:f1:4f:43:10:
07:d6:35:5b:7f:25:0e:83:d6:c6:9d:13:91:92:0c:
2a:95:d4:e8:a4:97:18:4d:fb:f3:b3:ef:f1:a4:eb:
f1:5d:37:03:36:cb:2b:03:32:69:c5:a8:37:b1:99:
4c:20:02:32:e2:eb:b9:c1:1e:48:a3:de:30:ac:a4:
43:32:7c:05:db:3b:c2:cd:54:4f:87:79:c3:45:d6:
3b:e3:7e:96:56:3d:0d:60:72:39:cc:6d:23:df:bd:
32:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A6:FA:4E:0A:9A:85:7B:75:6F:3C:D0:80:B9:7A:F5:0B:B5:A4:4C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/466AD26EE22811ED9F0E5C13306D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.194.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ab:e0:08:dc:7d:87:34:40:c0:d2:aa:85:0a:71:b6:4b:f8:
dc:92:96:12:74:4d:3e:cb:82:dc:27:a4:54:9b:e8:12:b8:b9:
f9:db:1c:f7:32:29:35:45:0b:52:0e:d4:66:7f:c0:56:95:7b:
b5:87:c1:ab:7e:bb:68:65:d8:fe:b6:93:e9:d9:df:4a:e1:7f:
0a:a0:03:45:5f:f2:6e:48:8c:dc:7c:c4:2c:66:50:ae:ef:ca:
fc:4d:05:e4:99:7b:31:28:81:16:98:a8:1f:2f:7a:39:cb:bc:
3b:0d:93:a4:e0:15:3c:45:2e:53:94:f3:7a:bd:d6:3b:74:61:
d5:a1:9f:9b:dc:bc:aa:07:9f:5b:44:a8:76:67:c7:56:af:51:
5d:e5:b0:ab:6a:92:19:4f:0e:ae:25:79:0f:92:f0:7b:5f:58:
c6:7b:c2:43:cd:95:84:62:b1:73:f6:55:f2:d2:30:62:33:12:
7e:bb:56:60:96:23:fb:dc:c2:90:97:a3:d3:f2:99:08:2d:ea:
0b:a9:0e:2f:9e:01:72:2b:aa:7a:60:43:b3:36:fc:9d:89:3c:
5b:88:bf:12:af:e1:d9:65:58:d9:09:e3:f1:b9:0c:cb:2d:6f:
b3:bd:58:30:7b:81:d6:7f:3d:89:b1:9a:69:75:7a:22:85:20:
cd:b3:8f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:49:38 2025 by rpki-client