Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7BB4CFF621F411ECB0F2837ED8A014CE.roa
File: 7BB4CFF621F411ECB0F2837ED8A014CE.roa (raw, json)
Hash identifier: vAdKahn8/FejssZ5TbEb65MI7bEnWXwnJZPN1A1eXgk=
Subject key identifier: 4D:22:C4:5B:48:65:6E:EF:80:0E:F2:AD:D1:A2:A8:3E:DF:A8:CE:0D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 06A1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7BB4CFF621F411ECB0F2837ED8A014CE.roa
Signing time: Thu 30 Sep 2021 13:44:07 +0000
ROA not before: Thu 30 Sep 2021 13:44:02 +0000
ROA not after: Fri 30 Sep 2022 13:44:02 +0000
asID: 60781
IP address blocks: 154.16.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1697 (0x6a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Sep 30 13:44:02 2021 GMT
Not After : Sep 30 13:44:02 2022 GMT
Subject: CN=6155bf27-c4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:16:3d:b3:2c:97:c5:4c:e1:ab:80:77:c2:
99:ef:54:b4:37:27:d3:eb:6e:2b:d5:3e:82:eb:37:
9f:b2:06:99:7b:74:11:36:fc:3b:f6:db:b9:f7:e7:
0e:14:07:e0:ec:3b:ad:71:96:44:ba:76:bd:c6:d4:
1f:f5:8c:ce:46:00:38:5b:f2:9c:f3:44:8b:da:34:
be:28:de:67:79:01:37:c0:05:9e:14:6d:c8:3f:10:
97:af:4e:54:73:94:73:68:cc:c1:f6:f4:ab:31:c9:
91:57:83:65:f7:25:2e:8c:14:fa:fc:82:67:18:ac:
3c:54:47:c0:ff:15:15:b6:de:0c:30:e4:8c:2b:8a:
a2:b4:04:96:11:d8:af:ae:9c:8a:68:fd:ef:bb:11:
45:af:86:b7:c9:52:ea:e8:6c:34:69:11:7a:57:26:
6a:3a:b2:c1:b5:a3:68:b5:67:1d:23:30:18:bf:35:
5c:cd:4f:84:c2:c4:73:e8:1c:c4:72:3d:cb:1b:f2:
2a:6d:be:09:a8:ce:f6:db:c8:3f:89:c8:bd:8f:44:
81:88:1c:95:69:d3:ce:b9:75:bd:98:7a:f5:28:21:
24:40:87:29:3a:b4:3c:48:56:d3:5d:dc:69:29:22:
67:9d:29:c9:3d:4b:03:2a:23:3c:ab:22:3c:e1:81:
5c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:22:C4:5B:48:65:6E:EF:80:0E:F2:AD:D1:A2:A8:3E:DF:A8:CE:0D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7BB4CFF621F411ECB0F2837ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.160.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:21:3d:c7:91:cb:23:8a:bf:6a:2a:c5:f2:35:42:25:f2:3d:
40:d2:88:96:63:f5:bc:87:7d:bc:ae:59:35:04:0e:b2:af:70:
b3:cf:31:74:20:6d:53:2f:a8:25:76:8c:21:6e:4e:45:0e:5b:
91:80:eb:d2:a7:64:80:a5:44:17:34:c2:b1:05:5c:aa:0a:43:
08:af:12:ce:1e:0b:89:67:b8:50:41:ef:2f:df:6f:c4:d9:50:
25:63:4f:57:13:ff:ab:b7:dc:a3:2d:4a:70:81:4d:d9:a4:43:
1a:11:3b:9a:08:d1:7c:b4:cf:ca:f0:eb:df:29:f8:2c:25:9c:
d2:b2:34:a1:0e:91:d0:b6:66:d9:55:89:07:f8:5f:ce:03:c8:
16:8d:16:e9:8c:2b:1d:cf:a3:41:bf:ff:ba:63:e4:f7:12:2c:
bf:3f:37:24:62:c3:66:5f:c5:37:39:b5:64:ad:48:b7:42:b7:
cb:64:90:8b:b2:c9:63:12:f0:2b:46:f6:4e:14:80:fd:51:d2:
9d:1e:35:94:b8:40:f0:ab:10:92:ae:df:5a:bf:12:a7:7c:32:
5c:92:f7:a6:0e:f9:22:81:4f:65:9b:db:fd:7c:b3:0f:71:42:
aa:93:89:3b:44:1e:05:f8:04:76:0d:ff:15:b3:ad:3c:a1:4d:
af:a8:3b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:47:42 2025 by rpki-client