Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/48F211CA0C1C11ECA2043C2CD8A014CE.roa
File: 48F211CA0C1C11ECA2043C2CD8A014CE.roa (raw, json)
Hash identifier: 7m0qx2A0VRglDO1Lh9bzyUMveaIsl2WlaC/rxgPlWNA=
Subject key identifier: 57:8F:D7:DA:2B:94:13:4C:15:3F:90:C1:9F:E6:F0:4A:7E:F9:CF:5F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0651
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/48F211CA0C1C11ECA2043C2CD8A014CE.roa
Signing time: Thu 02 Sep 2021 18:33:37 +0000
ROA not before: Thu 02 Sep 2021 18:33:32 +0000
ROA not after: Fri 02 Sep 2022 18:33:32 +0000
asID: 25369
IP address blocks: 154.16.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1617 (0x651)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 2 18:33:32 2021 GMT
Not After : Sep 2 18:33:32 2022 GMT
Subject: CN=61311900-9abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:20:cd:ae:94:dc:24:5a:2f:f2:e0:08:93:
da:c1:d8:a4:a7:df:56:af:60:27:e0:ed:2c:c5:37:
1a:6f:1e:ea:60:25:16:5a:9e:88:a6:41:56:f7:78:
78:88:8f:e1:1b:a1:34:9f:5d:5d:78:ca:f5:81:55:
51:e8:56:6b:b7:9b:eb:3b:77:98:33:0c:72:d8:f0:
be:c2:66:73:0e:e7:2a:18:28:2e:41:b7:e8:60:20:
f7:88:8a:80:f1:42:fb:5d:d8:88:e5:c2:86:5d:ec:
ac:42:5d:bb:67:b9:fd:57:09:24:03:41:b7:d0:c3:
82:91:f7:da:a8:53:9e:83:98:ea:7b:19:90:6e:d7:
4c:83:d5:11:86:38:6a:f3:03:a4:09:5d:7d:7a:4b:
f6:96:d3:21:38:27:e8:62:12:c8:a6:aa:62:6c:c5:
99:fa:4f:50:23:8d:0a:b7:ae:30:7c:f1:dd:81:16:
be:15:cd:4f:11:03:22:e1:4f:38:a0:46:92:8a:6c:
ce:64:9d:36:d2:97:8f:4d:78:0b:be:2c:f1:5e:9d:
84:e8:d6:3f:95:aa:0b:41:24:2a:95:67:61:5c:42:
4e:04:65:0a:6f:8f:ce:48:53:fa:14:5b:33:ea:a8:
bc:e6:cf:3b:0c:66:e2:23:15:66:62:17:92:e9:71:
5a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8F:D7:DA:2B:94:13:4C:15:3F:90:C1:9F:E6:F0:4A:7E:F9:CF:5F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/48F211CA0C1C11ECA2043C2CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.131.0/24
Signature Algorithm: sha256WithRSAEncryption
73:59:88:06:07:90:cf:17:2b:07:1e:6b:43:d7:ca:49:23:bf:
3c:43:18:15:5e:13:ee:5c:55:0b:ba:ee:8d:53:d8:e7:17:80:
49:06:62:53:7d:0d:85:33:b6:20:ee:17:e0:6f:93:25:19:3a:
48:96:2a:26:48:5b:19:97:f8:8e:f4:fd:69:bb:2f:ab:d2:2e:
4e:6f:3b:12:f3:1a:91:a8:a1:85:4e:d3:16:d7:b1:19:92:dd:
a4:9d:be:25:eb:40:96:5f:18:d7:22:24:1b:30:43:1c:9c:f4:
f4:53:5b:15:72:f9:a2:b3:4f:fc:7d:2b:de:9c:1f:bb:b8:17:
e7:35:e5:29:e2:6c:43:26:ea:a9:d0:21:d8:37:50:0b:3a:e4:
7d:25:2d:5c:8f:7c:be:c5:12:dd:31:3e:0f:88:79:61:61:f1:
ce:23:26:07:54:8f:1d:5d:e6:db:10:66:64:53:35:db:cb:79:
71:69:86:ae:3e:f7:20:ef:86:27:95:6e:d9:3a:c3:55:c7:71:
ea:a8:85:af:f1:29:fd:14:9d:f1:db:80:2d:a5:33:38:7b:93:
ea:df:e0:72:b8:65:a6:6c:cf:b0:36:69:75:29:62:74:9e:15:
b1:9a:37:b5:aa:ce:3a:35:03:42:3c:a5:3c:ea:08:62:27:71:
7f:76:e6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org