Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/640708BC2B7A11ECB69E9070D8A014CE.roa
File: 640708BC2B7A11ECB69E9070D8A014CE.roa (raw, json)
Hash identifier: 6RJuSZ7QhNZiyzNaQ/sGp9ovWL/K8eYfVhI5Su5Dl/U=
Subject key identifier: D6:5E:06:40:8F:3F:A0:D3:8A:F2:A6:AE:23:29:83:12:5C:A6:FB:42
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 06BB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/640708BC2B7A11ECB69E9070D8A014CE.roa
Signing time: Tue 12 Oct 2021 16:35:21 +0000
ROA not before: Tue 12 Oct 2021 16:35:15 +0000
ROA not after: Wed 12 Oct 2022 16:35:15 +0000
asID: 18345
IP address blocks: 154.16.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1723 (0x6bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 12 16:35:15 2021 GMT
Not After : Oct 12 16:35:15 2022 GMT
Subject: CN=6165b949-a317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:dd:1b:4f:5b:4d:9d:70:52:ba:66:57:72:73:
fa:7e:1b:42:98:8a:07:36:8b:cc:18:94:48:bb:e9:
ca:fd:a7:b0:99:6c:a4:20:c1:eb:8e:b6:13:00:2f:
ba:e7:13:d5:29:3e:54:9d:e6:69:6b:7c:ad:aa:93:
ca:17:c3:3a:bd:86:bc:5b:96:03:54:1d:cb:96:f1:
33:f0:24:e6:57:b8:05:2b:9b:93:1d:7b:b6:06:65:
7a:81:b6:da:9f:39:cb:b1:e6:99:fe:14:4c:8a:cb:
36:a2:5f:f8:96:a8:43:7c:12:73:19:41:50:8a:b9:
ad:12:33:60:74:db:cd:1b:a3:85:5d:50:d4:cb:3e:
2c:d0:8a:b0:66:8c:d6:87:d0:87:f0:e4:b7:36:e7:
89:e0:68:59:19:bf:01:6a:4d:a9:51:77:69:a6:55:
c9:a6:69:38:be:db:21:d0:49:a4:c1:d1:7b:fe:ca:
77:a6:57:a9:1b:bc:77:72:fd:e2:c2:b9:4d:a1:7f:
8f:64:9c:5f:48:74:a5:26:9b:e7:c3:f9:62:16:63:
03:99:cc:cd:22:a6:e8:ed:1c:fa:21:82:fd:55:72:
01:ce:8c:0b:cc:99:0a:d4:4f:a6:8c:bc:3b:8b:6b:
a8:7e:32:c2:23:6b:3f:24:ff:4d:26:25:b4:8e:dc:
94:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5E:06:40:8F:3F:A0:D3:8A:F2:A6:AE:23:29:83:12:5C:A6:FB:42
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/640708BC2B7A11ECB69E9070D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.81.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:34:69:51:de:a0:58:1b:c9:d9:8d:8c:4b:73:0e:2f:10:ce:
de:e8:b2:73:8c:67:21:9f:d5:66:32:04:05:01:56:57:01:d2:
2e:93:6c:ed:2a:40:5b:ba:c0:36:a6:2a:24:7e:c8:43:a9:f0:
db:cd:74:c4:80:a2:ff:a4:47:e6:27:9d:b6:86:b3:04:85:2a:
9d:e8:e3:22:95:0f:4a:14:1d:b5:60:61:db:30:08:e4:c9:fc:
54:78:d4:18:ea:bb:69:cc:f5:69:20:f8:30:64:db:5c:22:1e:
91:d6:a7:24:e6:62:30:40:c5:de:6a:e3:d2:01:76:5e:6f:47:
94:8b:cb:19:c4:d2:51:f3:47:b5:e2:f9:a6:4c:05:87:ef:01:
f5:ad:4f:03:6f:ea:a5:a2:43:2c:24:8e:4a:e5:f1:2a:90:a1:
c6:32:17:93:19:28:75:31:dc:fc:2f:be:16:07:5f:a5:2e:69:
f2:3f:87:08:84:70:3d:45:23:ae:07:8a:61:c6:b6:3a:65:ab:
8a:4d:4f:0d:18:57:c7:6c:70:8d:09:41:c7:24:64:91:ec:e4:
5e:89:ee:e9:c0:c2:d9:08:30:61:10:cb:3d:34:b3:57:6d:88:
dd:e7:13:52:5b:75:fd:dd:39:62:18:75:c9:4e:48:e1:f6:7e:
91:b7:26:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org