Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6E2B6A4222DB11EC883F1869D8A014CE.roa
File: 6E2B6A4222DB11EC883F1869D8A014CE.roa (raw, json)
Hash identifier: XzxA0lMZ5Ctf+ChfjSK+EXF1ZYVU2IKeeo7GhxDv+zU=
Subject key identifier: E8:EB:5C:1A:1E:D8:86:11:8C:3B:0E:12:6E:BE:3F:22:EE:B8:D5:3F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 06A4
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6E2B6A4222DB11EC883F1869D8A014CE.roa
Signing time: Fri 01 Oct 2021 17:17:18 +0000
ROA not before: Fri 01 Oct 2021 17:17:13 +0000
ROA not after: Sat 01 Oct 2022 17:17:13 +0000
asID: 35913
IP address blocks: 154.16.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1700 (0x6a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 1 17:17:13 2021 GMT
Not After : Oct 1 17:17:13 2022 GMT
Subject: CN=6157429e-787b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:bd:ba:05:e9:ab:ab:76:c0:ad:2d:a8:e5:
79:c3:15:47:cf:49:60:0c:51:1f:48:2e:ae:9f:f9:
17:ab:ba:c6:b5:9d:33:ad:36:2b:9a:60:49:b9:a2:
8b:60:30:a8:2a:1a:fc:a5:a1:b0:13:5d:02:af:e4:
47:7e:bf:07:97:89:47:9d:e1:6d:95:b9:1c:2b:e3:
df:53:b1:06:f5:0d:34:d8:76:43:60:73:57:7e:aa:
dd:c7:d4:ab:a0:82:a3:12:0a:2c:12:e6:6d:45:b6:
f9:dc:0a:cb:0f:58:c3:d3:38:b6:f2:de:c1:dc:49:
81:f5:5b:99:fd:d3:3b:e5:a9:71:a2:40:17:e9:2f:
f1:10:89:96:c2:67:d0:e1:7c:32:ba:e6:fd:06:84:
e8:05:c2:06:e0:d4:b8:29:b6:5b:f4:2f:f3:40:34:
20:be:ef:90:86:4a:10:d7:0d:ee:5a:c7:e0:4d:81:
75:72:cf:43:5a:b7:59:4f:84:05:94:da:7d:8a:55:
b5:c9:7f:66:c6:24:c7:af:b1:31:57:f2:f3:11:da:
03:c7:51:41:97:f5:4b:8d:38:e6:3d:e2:a6:00:29:
aa:04:4d:db:49:3d:88:05:2f:a3:83:77:44:56:b5:
44:9c:d3:e4:34:dd:d0:4d:3c:9d:be:97:68:2f:4b:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EB:5C:1A:1E:D8:86:11:8C:3B:0E:12:6E:BE:3F:22:EE:B8:D5:3F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6E2B6A4222DB11EC883F1869D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.106.0/24
Signature Algorithm: sha256WithRSAEncryption
18:8d:1b:e8:ff:bb:dc:10:6d:9d:ee:c3:b0:45:e5:78:95:7f:
ec:eb:4d:ae:cf:40:f4:fe:52:ec:79:ae:2b:9b:1e:27:ad:b6:
f4:9c:06:13:fd:c7:95:b1:4e:61:57:dd:de:48:c7:fe:e0:c5:
51:b2:70:71:6c:86:b0:e2:73:c1:dc:2b:dc:7a:94:80:5a:30:
79:08:61:66:42:0e:65:3a:bd:dc:c5:84:5e:a2:d5:1c:f2:5e:
d4:19:58:05:4e:73:0d:ab:7d:eb:fe:30:53:3a:38:a3:a9:f3:
91:d3:57:66:b9:88:0e:d4:ca:33:fa:1e:31:55:95:3f:7f:3d:
08:22:f7:34:cb:fd:51:81:4c:95:60:e6:82:98:a4:c0:00:bd:
80:6d:43:a1:9c:82:06:ad:9f:4a:9d:26:14:33:cf:f5:f1:0e:
65:4e:cb:1e:e7:c3:da:fe:6a:90:a0:21:ef:66:96:d8:d6:be:
02:fa:6e:43:e1:8b:7c:47:18:9a:17:24:12:a0:98:29:44:5f:
e6:44:c3:59:92:f7:a9:58:29:6d:87:8c:1d:aa:a8:7b:d3:72:
50:a1:20:61:96:48:98:16:f5:87:cb:04:ad:61:f0:a6:c7:74:
31:c2:b5:40:2f:89:75:3f:91:89:9b:33:38:98:4d:8d:d3:d7:
69:9f:d3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org