Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4A45EBD89AF511EC97DB55775A40D577.roa
File: 4A45EBD89AF511EC97DB55775A40D577.roa (raw, json)
Hash identifier: YtCvXpngq2h4hIVdfuEyDqAjPwpTr9JA5vNgp8KiW+s=
Subject key identifier: BE:48:F6:56:1F:2B:ED:8B:85:10:B9:EA:78:FD:77:14:9F:2E:13:33
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 07E1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4A45EBD89AF511EC97DB55775A40D577.roa
Signing time: Thu 03 Mar 2022 13:24:45 +0000
ROA not before: Thu 03 Mar 2022 13:24:41 +0000
ROA not after: Fri 03 Mar 2023 13:24:41 +0000
asID: 43350
IP address blocks: 154.16.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2017 (0x7e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 3 13:24:41 2022 GMT
Not After : Mar 3 13:24:41 2023 GMT
Subject: CN=6220c19c-70b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:24:53:2a:32:87:f5:c1:b1:43:34:70:5c:ae:
33:bb:07:04:f9:0e:f1:86:7e:e4:8c:a4:39:5b:13:
d8:2b:7e:1e:8b:1d:07:d2:28:3c:5d:b5:09:7f:65:
61:ca:9b:a0:af:57:f7:f0:ba:0c:09:7f:12:2b:2c:
4d:14:15:5e:d0:29:b9:80:8f:1e:b6:5e:f3:f0:c9:
72:08:90:bb:a8:c5:fb:1c:3e:30:95:0a:5e:0d:1f:
ba:7f:f3:7c:c2:71:4d:0e:5b:1b:fd:06:03:ef:c6:
9f:1d:7a:ae:af:de:0c:a3:90:0e:9d:75:e8:d4:9f:
b0:ca:dc:c8:5e:cd:b4:89:31:94:ec:50:09:c2:40:
d2:5e:d3:41:63:3f:21:c0:e4:8d:f5:e1:00:e8:91:
6c:c7:c4:de:c8:46:1e:b8:6e:a9:c8:57:a2:9c:26:
ea:52:e7:68:46:a6:4d:0f:5a:22:76:76:a8:2a:5b:
99:5e:4c:bf:8b:4a:bb:90:3c:eb:65:62:80:6a:6b:
65:9b:5f:a3:39:5a:b7:6b:43:59:90:a7:5f:b7:9e:
03:85:d9:5b:32:cd:3d:18:5d:e5:ec:05:2c:9e:d9:
20:48:ca:45:a3:63:7d:36:8a:8b:62:25:db:67:ae:
03:56:11:1b:57:e4:c0:af:27:f6:94:fc:42:c7:ee:
cf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:48:F6:56:1F:2B:ED:8B:85:10:B9:EA:78:FD:77:14:9F:2E:13:33
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4A45EBD89AF511EC97DB55775A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.116.0/24
Signature Algorithm: sha256WithRSAEncryption
59:3a:8f:8f:49:87:83:8b:54:f6:6f:ac:f1:5b:f0:3e:e6:b7:
e2:f2:a8:4f:af:d4:41:a9:07:dc:a6:c4:b6:ae:ba:ec:f3:d8:
99:a9:42:89:bd:c4:0c:6d:1b:8c:6c:40:8b:7e:0d:09:b8:35:
3f:0a:52:fc:15:16:e3:9c:07:69:1b:52:a6:4c:e1:f7:8d:c3:
f1:67:bb:93:de:e5:49:fd:c5:61:d7:4c:98:cd:e3:a4:91:03:
81:d8:8e:9e:02:db:7c:a2:98:2a:39:f8:73:37:83:5d:73:63:
8e:a6:55:27:a5:81:19:e6:64:b7:7b:13:cc:f2:c7:80:f5:26:
a4:0b:50:5f:dc:33:b3:95:7e:a8:a4:20:cb:4a:ab:1b:27:17:
4f:71:b6:82:40:42:e8:8a:82:bf:8b:a4:ef:f8:85:1b:de:b2:
eb:70:bc:72:77:c5:27:90:84:9d:82:9a:1f:f1:cb:0d:49:51:
c1:c4:7e:fb:48:c8:53:26:71:f7:b2:f4:fd:96:3a:36:7b:43:
a3:88:6f:99:f5:63:e8:72:e4:d5:fe:a7:61:80:f2:29:70:84:
f8:c0:6c:dc:5e:b9:42:2d:2c:03:f7:a4:b1:f2:60:0b:a2:97:
bb:3e:e1:45:e0:59:05:4c:e7:de:28:dd:6d:5c:ab:d2:fb:53:
10:99:69:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org