Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/532AA6B2447411EC95DABA4BD8A014CE.roa
File: 532AA6B2447411EC95DABA4BD8A014CE.roa (raw, json)
Hash identifier: UR4z0WKFeDihNDiwT9tOQ8krTKZwQKJHnVCr4JZaSKQ=
Subject key identifier: 02:F3:38:B7:C5:E0:E2:6D:7D:EA:74:4A:16:E5:62:B9:37:B2:8F:C0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 06FB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/532AA6B2447411EC95DABA4BD8A014CE.roa
Signing time: Sat 13 Nov 2021 11:24:55 +0000
ROA not before: Sat 13 Nov 2021 11:24:50 +0000
ROA not after: Sun 13 Nov 2022 11:24:50 +0000
asID: 142030
IP address blocks: 154.16.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1787 (0x6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 13 11:24:50 2021 GMT
Not After : Nov 13 11:24:50 2022 GMT
Subject: CN=618fa086-fdad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4f:b2:ad:6f:17:dc:b5:07:fc:6d:f6:09:fe:
11:59:43:25:2d:73:e2:15:81:26:2c:3c:23:71:e6:
ac:c0:9a:85:f2:b7:f6:e9:6e:f2:ea:15:2b:6d:7c:
bb:c9:40:5b:10:fc:eb:a5:b1:7c:21:f7:02:53:33:
93:a4:40:96:14:eb:a9:f4:63:bb:51:33:46:19:e6:
24:60:7e:f2:c4:c5:af:fe:50:30:bf:4e:c0:31:97:
d6:33:70:16:20:4e:1a:2b:72:26:9c:84:b4:af:0e:
f8:63:7a:a9:67:6d:38:71:c6:b4:60:2a:58:11:72:
3d:e0:fe:6e:d8:1a:89:10:98:cf:50:8d:6f:51:60:
67:9c:56:39:36:91:03:ff:23:36:b2:48:81:0d:d3:
43:91:1a:ce:34:e4:24:58:d9:eb:c0:9a:f1:83:dc:
f2:5b:11:10:b2:4e:6f:de:2e:c9:df:12:ed:51:2e:
0a:6a:b4:9c:e2:25:ed:7f:d8:1b:58:de:22:ad:8e:
6c:61:38:d6:71:fb:3b:c6:78:dd:c3:fa:f9:13:64:
19:99:06:36:de:b1:dc:9b:36:13:5a:29:bd:da:c5:
89:9e:fc:37:bb:0b:88:0d:b6:fb:74:0e:5d:05:74:
dd:d5:4c:64:ff:d7:4c:a5:ef:3b:d9:b5:2c:20:e7:
27:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F3:38:B7:C5:E0:E2:6D:7D:EA:74:4A:16:E5:62:B9:37:B2:8F:C0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/532AA6B2447411EC95DABA4BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.17.0/24
Signature Algorithm: sha256WithRSAEncryption
39:28:15:97:bb:7c:8b:ee:99:6b:0f:a9:59:b6:04:1d:49:83:
03:de:1c:7f:99:ae:11:39:17:5f:af:d7:f1:48:82:5a:f6:5b:
94:9d:4a:8c:72:f0:c1:3d:21:4d:76:0e:b6:bb:a7:f1:bd:8a:
f3:5e:cf:cd:fc:6a:e5:7c:bc:d8:30:c0:0f:9f:3b:18:73:a1:
0e:0c:4a:a5:af:e9:7d:59:89:1a:4f:f8:0d:3d:6c:87:c6:6c:
06:7d:09:a2:9c:21:4f:a1:7c:8c:41:1c:72:7d:bc:a5:75:f5:
a7:1b:39:1c:ce:63:7a:1b:63:be:c2:fc:c4:21:a9:3c:2f:ae:
7d:23:7c:0d:94:14:d2:a6:d4:c7:c6:90:6e:0f:a3:dc:63:af:
17:5b:61:c8:96:9b:52:d9:74:aa:2e:15:3c:fc:98:d8:c7:a4:
11:49:71:61:36:7f:3f:e8:a1:bb:e0:07:2a:81:73:08:c2:a8:
0c:88:c8:20:d7:1e:3d:9a:3d:5a:dd:4d:6e:72:bd:8a:5e:a1:
e2:01:0c:65:af:a7:ef:44:68:40:44:02:a1:1f:0c:45:31:be:
72:5a:64:2f:c2:7e:26:9e:82:cd:a3:f3:ed:05:2a:48:2b:d5:
3a:cb:4b:5f:69:00:c9:45:16:5b:1b:10:d1:e7:39:30:86:a2:
1a:c9:73:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org