Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/747238C00E8211ED8FB047C1F1222468.roa
File: 747238C00E8211ED8FB047C1F1222468.roa (raw, json)
Hash identifier: /BmnJxvPljZxawxWR/cI1zHIIBrCMZW/Apy+gZuJlHU=
Subject key identifier: 7D:BF:6F:E9:67:26:1C:EF:A8:82:DF:2A:1D:0B:63:52:02:BD:B9:1C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 090E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/747238C00E8211ED8FB047C1F1222468.roa
Signing time: Thu 28 Jul 2022 14:34:58 +0000
ROA not before: Thu 28 Jul 2022 14:34:54 +0000
ROA not after: Sun 28 Jul 2024 14:34:54 +0000
asID: 46337
IP address blocks: 154.16.144.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2318 (0x90e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Jul 28 14:34:54 2022 GMT
Not After : Jul 28 14:34:54 2024 GMT
Subject: CN=62e29e92-61a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8e:d2:60:9f:d1:23:a3:63:8c:2b:5f:83:fd:
06:5b:ca:0d:76:d4:3c:78:6d:7d:4b:cf:7b:dd:47:
65:e3:95:df:4f:ab:6a:30:63:26:b1:1d:3c:4a:9a:
62:96:c4:57:05:f8:e6:55:4e:fc:4d:45:c5:84:a6:
b3:90:cd:d1:62:4b:20:ca:78:be:ec:41:ec:06:3c:
42:26:27:55:27:15:28:19:77:17:79:d8:3f:77:06:
4d:c6:f4:ed:28:af:2d:ac:10:fb:c9:74:96:55:4f:
fb:a7:0f:70:b5:1a:ed:8d:c8:27:89:c3:fe:df:27:
d2:8e:f8:87:b1:32:d8:da:9d:ce:dc:78:c9:f9:6e:
aa:de:d0:14:4b:27:6c:05:2e:1a:c1:fa:44:0d:99:
90:69:b4:2b:e0:ca:1a:59:01:be:42:8a:42:84:35:
e2:ca:ad:a0:17:17:df:04:5d:02:e9:d8:8b:06:dc:
0d:bc:68:dd:01:b1:5c:ac:06:d1:50:d4:6e:9e:3f:
7b:6c:af:ac:d1:79:b1:c4:ad:f6:b6:ec:0f:5d:be:
6f:6b:4c:67:a3:6c:a3:2e:d3:aa:84:27:b2:a9:9f:
c8:24:ed:90:4b:45:00:b0:51:e0:34:2c:08:41:19:
5f:bf:6d:8f:b7:1b:99:4f:f5:83:94:47:b2:b5:0f:
4c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BF:6F:E9:67:26:1C:EF:A8:82:DF:2A:1D:0B:63:52:02:BD:B9:1C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/747238C00E8211ED8FB047C1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.144.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:bd:05:39:79:82:68:3c:e1:7b:4a:1d:35:c7:91:38:a9:b5:
b5:55:07:e0:5b:1c:ee:29:84:12:93:78:22:f5:4c:fc:8a:ae:
ac:7b:97:19:d6:bf:0f:fd:a7:fb:8c:c6:dc:2f:94:f4:52:7d:
50:b5:c2:1c:dd:cf:0b:86:ce:db:0d:e8:32:5a:ef:c2:90:a8:
1f:91:39:77:b4:ea:66:20:30:22:93:63:89:9d:a3:01:48:4a:
0c:77:b0:ff:33:2b:64:47:d0:5d:b9:d7:5d:3e:bc:0e:f5:cb:
18:92:0e:ff:89:a7:cb:48:27:d2:6d:83:21:b6:6a:80:a5:64:
48:03:a1:e4:b0:f5:f5:94:80:a9:70:52:78:b8:18:7c:ae:2b:
d6:a6:ba:38:c9:fe:a2:0e:9b:03:78:cd:f0:c2:42:ec:5a:55:
79:15:96:9e:b5:ef:8c:ed:2b:e9:2d:1e:6f:4c:54:e5:3a:cc:
1e:82:c3:05:f9:f2:c6:d9:ff:d1:bf:28:95:f3:1f:1e:e1:70:
d3:24:d1:5d:41:a0:a0:39:fa:c5:6a:97:35:40:39:76:f1:97:
81:0d:25:ee:fe:2b:6f:df:00:18:b0:8f:24:cd:7d:29:d6:cd:
6d:63:6a:b1:61:72:c4:f3:59:94:3a:7e:db:1f:d2:ce:48:db:
50:ee:d5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:50:46 2025 by rpki-client