Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6673E9508C8B11EB8F6A0E7AF8AEA228.roa
File: 6673E9508C8B11EB8F6A0E7AF8AEA228.roa (raw, json)
Hash identifier: 4vWTezHolFm2PlinCGK1iGZgHDIoQN5VPQ43r4tx6NI=
Subject key identifier: F7:2D:CB:29:EA:54:FA:38:99:C4:68:6B:0D:B7:CD:74:AC:DC:4D:7E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 04ED
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6673E9508C8B11EB8F6A0E7AF8AEA228.roa
Signing time: Wed 24 Mar 2021 10:26:31 +0000
ROA not before: Wed 24 Mar 2021 10:26:25 +0000
ROA not after: Thu 24 Mar 2022 10:26:25 +0000
asID: 3356
IP address blocks: 154.16.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1261 (0x4ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 24 10:26:25 2021 GMT
Not After : Mar 24 10:26:25 2022 GMT
Subject: CN=605b13d7-87d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:fc:08:eb:13:84:45:e4:ce:12:9a:26:56:
ad:07:f2:f2:38:4e:be:90:32:30:d4:1d:f8:d1:14:
f4:8c:22:22:34:37:75:74:f5:b8:70:1a:66:a9:46:
ec:a7:71:af:a1:f6:48:7f:32:66:79:f0:cb:cb:92:
8f:17:ab:5b:d1:93:6a:08:d1:4c:32:b0:9a:13:42:
47:a9:10:c8:12:ba:c8:06:84:d7:ef:34:aa:70:74:
e0:fb:28:dc:c3:88:9b:50:94:cc:ee:5d:0c:1a:fd:
e0:78:b5:cd:7e:1c:02:bc:6e:ff:4a:e0:60:ac:0b:
7f:c4:a8:6d:1f:a4:bf:4d:65:f1:27:05:0e:40:33:
3c:38:e0:5d:63:86:2a:2d:4b:da:5c:b4:42:ea:c7:
03:21:24:ca:15:75:c4:29:38:e3:1c:e7:c7:f1:ba:
76:dc:56:60:b8:7f:dc:4f:5d:40:1d:3b:b9:2f:7a:
f1:00:3e:b6:7e:0d:5f:1e:60:91:8e:07:da:74:88:
4f:e8:09:80:f9:af:65:ef:40:5c:9b:e2:33:e9:8f:
96:0b:d4:ad:bf:9a:ee:53:c0:92:f8:c8:4b:60:d5:
98:85:ee:da:b3:4f:5b:1f:1f:fa:28:5b:bc:93:e5:
de:a5:4e:79:b8:30:10:b9:33:74:29:c7:b5:5c:b9:
ef:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2D:CB:29:EA:54:FA:38:99:C4:68:6B:0D:B7:CD:74:AC:DC:4D:7E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6673E9508C8B11EB8F6A0E7AF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.37.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:ee:b9:05:ac:9b:7c:a0:09:db:0a:48:77:fa:73:8d:be:b5:
1c:dc:1c:8b:78:97:eb:28:99:4d:7d:bb:68:ef:82:66:f3:39:
88:2a:ef:48:6b:91:fb:6a:26:90:42:b8:59:cb:b4:ae:f0:cd:
72:a2:3e:05:55:b9:b6:cd:69:84:fc:fb:54:57:c0:fe:ef:bc:
a7:77:09:9b:c9:32:7e:3e:20:88:71:42:40:f8:0b:3e:30:2e:
27:84:42:cd:76:30:ca:62:d3:3a:79:c5:3d:8c:cd:e6:22:7d:
3b:fa:d1:df:d9:97:3e:d9:0d:06:aa:8c:8f:fe:73:39:89:f1:
f0:5f:64:5b:d3:a6:39:af:d7:b4:60:1e:25:db:e5:26:67:0f:
a1:10:d4:84:fd:d2:1f:cb:ca:35:25:fd:4a:2c:70:84:18:e8:
bc:d7:ba:f5:e3:2d:cf:14:8d:eb:4c:e0:12:d5:84:63:8a:c7:
0f:59:4f:e7:e0:1a:c7:c3:38:77:a2:d3:c4:72:26:ef:4b:3d:
25:7b:a7:41:fb:eb:4e:3b:5f:42:3e:93:ce:ae:a7:bb:03:73:
58:2f:25:64:cf:8d:75:af:03:5d:a6:4b:0c:57:04:f0:d1:35:
8b:83:9f:d6:c1:f5:2e:4e:2d:7c:ac:4b:3f:08:ea:76:cb:d8:
fe:9f:d4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org