Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4B91658E16C111ECAADA806BD8A014CE.roa
File: 4B91658E16C111ECAADA806BD8A014CE.roa (raw, json)
Hash identifier: sOzq1SrFzHgNj/utpC/rbDlqp6PmNmUB8jyrlh5tT/c=
Subject key identifier: 1B:52:F8:28:FE:32:B4:B8:C9:E5:FB:C3:C5:89:E1:B5:7D:53:EA:12
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 067A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4B91658E16C111ECAADA806BD8A014CE.roa
Signing time: Thu 16 Sep 2021 07:39:59 +0000
ROA not before: Thu 16 Sep 2021 07:39:56 +0000
ROA not after: Fri 16 Sep 2022 07:39:56 +0000
asID: 1239
IP address blocks: 154.16.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1658 (0x67a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Sep 16 07:39:56 2021 GMT
Not After : Sep 16 07:39:56 2022 GMT
Subject: CN=6142f4cf-ecaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:c5:85:cc:26:a0:56:c1:19:2a:1e:64:b5:
f7:93:72:1d:02:92:be:1c:03:8e:d6:3d:e8:be:ba:
3b:65:2b:99:6b:16:85:a0:b6:0f:bb:0c:b2:7d:5d:
83:5a:48:c5:00:00:9f:df:c8:ba:84:d0:bc:1c:39:
51:17:54:e0:7a:a0:04:5a:67:7e:8c:50:c8:28:23:
57:99:08:b5:41:78:8c:14:6c:32:24:db:6c:44:d8:
5d:e7:18:e5:ca:5d:27:56:b4:32:ef:fb:a0:ce:98:
3e:be:c8:da:1e:09:eb:67:84:fc:7f:23:78:d4:c3:
0f:61:00:ec:af:c5:62:14:15:3f:49:dd:54:8d:84:
a7:8c:0d:26:89:74:c8:82:b4:e7:0c:2d:b2:b7:73:
8c:6e:a1:39:24:d6:8f:ce:bd:e3:4e:d1:0d:8b:01:
54:cd:31:b0:13:ca:05:a9:57:b8:db:7b:07:8e:6e:
a2:9b:67:c9:92:ba:e0:81:52:ac:83:5d:f6:ab:fa:
c4:e1:f1:0f:50:1c:bf:94:cf:79:81:fe:7d:ba:b3:
2b:90:3b:28:ac:e0:34:09:78:df:26:42:01:95:7e:
c8:53:d5:f7:5b:d7:35:cc:3d:4b:c7:0a:c6:d2:7a:
bc:fe:2c:a4:8c:78:09:87:c8:0a:88:6c:2c:19:64:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:52:F8:28:FE:32:B4:B8:C9:E5:FB:C3:C5:89:E1:B5:7D:53:EA:12
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4B91658E16C111ECAADA806BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.37.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:84:2b:50:56:2f:67:93:56:5f:c8:9f:8e:c5:f6:bd:b0:82:
d3:68:58:dd:7b:92:d8:2d:26:c1:8f:41:fe:d5:f8:0f:48:40:
c5:5e:a4:0d:b9:75:81:1c:1b:0d:09:9b:be:54:cf:74:cb:ca:
4b:33:1b:79:3a:2d:57:ba:3d:07:59:d0:d2:d0:4b:3a:b0:5f:
05:62:83:d4:6e:bb:ef:1d:c3:ba:7a:6d:53:76:48:06:84:30:
d3:ca:5c:7f:45:c6:1c:55:43:57:9e:52:6d:85:e0:6e:9c:db:
4e:bb:9a:9a:56:65:e8:39:de:85:5b:f4:68:58:f4:91:ac:b4:
53:2b:36:bb:60:09:21:78:df:d5:6a:9b:05:e9:d1:06:5e:c2:
65:b2:3a:9b:a4:07:28:eb:f4:d2:7a:57:78:9d:ef:80:9a:4e:
30:e9:4b:64:54:4f:54:4e:ed:88:f3:97:48:dc:07:ad:04:b3:
2f:c2:a0:fe:1b:d5:3c:25:cb:78:a4:e1:72:8d:c1:86:08:1d:
eb:9a:56:b6:fb:42:7c:93:25:93:99:54:70:5e:a0:73:ab:52:
ad:fc:d7:a9:14:6e:7c:f3:c2:82:49:a2:74:85:4c:0e:dc:18:
3a:ce:a1:fd:94:9a:8d:1f:eb:61:5d:dc:c0:37:44:88:3b:f5:
74:0a:af:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:59:14 2025 by rpki-client