Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/511BBBF017F911ED818E0AD8F1222468.roa
File: 511BBBF017F911ED818E0AD8F1222468.roa (raw, json)
Hash identifier: JlVHjfBu/7/EvrWTstaynCTJ7hXu+4dSVYgBLM/yo4Y=
Subject key identifier: 67:9E:04:98:F0:F4:81:8E:55:D8:51:30:C1:F0:FA:D2:6B:97:35:9C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0929
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/511BBBF017F911ED818E0AD8F1222468.roa
Signing time: Tue 09 Aug 2022 15:38:29 +0000
ROA not before: Tue 09 Aug 2022 15:38:26 +0000
ROA not after: Fri 09 Aug 2024 15:38:26 +0000
asID: 49999
IP address blocks: 154.16.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2345 (0x929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Aug 9 15:38:26 2022 GMT
Not After : Aug 9 15:38:26 2024 GMT
Subject: CN=62f27f75-8898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:ae:34:74:72:ee:f1:c0:1f:e9:2d:32:99:
88:25:e0:fe:17:77:ff:75:43:f6:3f:1f:b2:b9:67:
04:ad:79:2e:51:62:f2:25:68:3f:15:85:4a:7d:72:
53:e1:3d:47:ee:c2:bc:e7:86:58:12:35:1e:40:66:
9a:d0:90:2a:2b:5a:16:99:2e:61:0e:f1:0e:2f:12:
db:f3:a7:66:cf:26:04:74:85:d8:5a:04:8d:a3:6d:
a6:b6:42:f9:00:b9:d8:cd:6c:28:5b:be:96:01:2d:
98:54:de:0c:ba:e6:9a:46:2a:92:fc:6b:13:0b:27:
fb:42:1f:85:8a:79:c0:28:6d:7f:c0:e2:f8:94:df:
8b:ad:8d:a5:2e:f6:f9:f8:c3:67:32:ba:ed:ff:37:
ff:96:a3:51:b9:eb:60:96:93:1a:a1:20:ae:63:1d:
bf:55:e8:dd:fe:46:05:50:a8:5e:fb:30:0f:cc:08:
f2:9e:38:32:e1:50:52:a0:34:20:c0:76:ed:f1:ee:
14:85:a1:76:bf:2e:0f:91:f7:77:39:22:5a:aa:29:
22:72:58:03:c0:02:8e:e3:7e:4f:44:f5:ee:12:29:
36:4a:31:29:29:d6:c6:a9:93:42:18:65:b4:e5:e3:
2a:fe:2f:aa:91:67:bf:32:6a:24:ce:4e:13:f0:2c:
cc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9E:04:98:F0:F4:81:8E:55:D8:51:30:C1:F0:FA:D2:6B:97:35:9C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/511BBBF017F911ED818E0AD8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.21.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:b2:5f:cf:c8:2b:ba:8f:a9:12:a7:c8:3b:a9:5f:5c:e5:f4:
49:2b:6a:38:e2:a8:cc:96:ad:86:21:61:ca:48:bc:52:08:4b:
af:0a:d2:88:18:74:f7:b1:af:fa:70:03:5b:e6:11:df:98:eb:
42:58:1c:1d:bc:d7:b6:8c:4a:cf:a3:76:8c:ae:eb:d5:9a:1c:
dc:e4:16:e1:31:30:32:fd:c7:41:d3:a7:aa:42:16:96:e4:66:
f4:27:8c:b2:c3:b7:04:fd:85:ed:c7:d9:c2:1c:b6:44:62:7c:
c8:9f:4d:a6:aa:d8:5f:8f:db:53:fa:59:b8:56:3d:1a:9f:54:
ba:85:6a:62:57:47:8e:f3:00:84:bd:a4:ae:30:cf:30:79:f6:
35:ab:74:41:8f:58:fb:ae:0a:dd:60:09:3c:7f:f7:36:55:23:
4f:f9:96:f9:95:ba:81:9a:55:4a:63:8b:33:64:91:48:bc:3b:
28:93:09:1c:4c:07:43:0b:d4:05:d1:4c:7d:e4:aa:c1:fc:d4:
8e:0c:66:51:bf:4b:aa:cf:9b:32:11:7d:c4:0c:46:21:0a:35:
b4:73:92:bf:cc:34:f5:4d:35:b4:77:26:bb:f4:13:54:56:ae:
24:33:f2:2d:21:28:03:89:e4:3c:89:7b:f8:67:a8:e2:86:81:
bb:63:07:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:51:43 2025 by rpki-client