Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7C2A8FD2957D11ECB2207AE35A40D577.roa
File: 7C2A8FD2957D11ECB2207AE35A40D577.roa (raw, json)
Hash identifier: 5BmK6sS4wgFtUUPKNU6+z0+R5E+X9BmolNK2XJXdQYw=
Subject key identifier: C7:29:E2:AC:2E:70:0A:08:8C:CF:51:DF:27:69:8E:0B:A9:25:A0:7D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 07D1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7C2A8FD2957D11ECB2207AE35A40D577.roa
Signing time: Thu 24 Feb 2022 14:24:33 +0000
ROA not before: Thu 24 Feb 2022 14:24:28 +0000
ROA not after: Fri 24 Feb 2023 14:24:28 +0000
asID: 209466
IP address blocks: 154.16.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2001 (0x7d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 24 14:24:28 2022 GMT
Not After : Feb 24 14:24:28 2023 GMT
Subject: CN=62179521-9f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:e2:2c:8f:a2:1a:6f:6c:61:36:28:ab:e2:
d9:df:e5:7f:ba:f6:c3:6c:77:99:9d:5d:79:24:f0:
3f:6e:81:31:6c:f6:0f:97:42:3a:2e:e5:82:3b:e5:
4e:a7:e4:f9:ad:16:08:fc:0d:ff:0f:5b:a1:c2:57:
1a:48:70:1b:be:e7:98:be:5b:c6:26:2c:87:aa:4e:
1a:5c:0f:92:89:e2:48:c1:60:25:2a:fa:da:25:61:
ee:c2:b7:24:8f:3c:9d:1d:7e:e1:de:f6:ab:2b:a4:
c3:d5:48:81:0d:a4:ad:c3:a9:f7:3c:34:82:a7:ef:
80:bc:f7:4c:39:07:69:53:34:4a:e9:16:1c:1a:ae:
8a:dd:d9:1e:8d:75:d2:09:a5:ae:4f:00:5d:73:26:
f4:70:cd:63:e2:cc:eb:0e:64:8c:04:b1:c3:99:41:
c6:fd:3b:9f:89:e8:cd:ad:05:9a:8a:6a:68:c5:d8:
ac:95:ec:34:79:38:d7:fe:e9:73:68:ff:9b:21:c4:
27:a9:62:48:8a:85:f2:b5:aa:fc:41:0a:de:ad:79:
47:6b:d2:2d:54:29:fd:1b:af:15:91:8a:34:ba:1c:
b3:97:6f:4f:c0:d9:3a:f6:1b:8b:fe:bc:83:6f:97:
10:10:67:ed:a8:8c:35:c6:6b:ec:11:01:81:61:68:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:29:E2:AC:2E:70:0A:08:8C:CF:51:DF:27:69:8E:0B:A9:25:A0:7D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7C2A8FD2957D11ECB2207AE35A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.7.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:fb:7c:de:98:3d:34:f8:19:69:d4:6e:22:79:65:3b:89:60:
50:2d:68:37:bf:c8:b5:03:f3:d8:f6:62:a5:76:73:92:22:58:
c5:6b:e1:b3:ea:d3:f3:3f:8c:98:d5:4d:42:9c:2e:9f:e7:46:
8e:93:e2:e4:e9:5f:e6:8e:77:df:31:6a:c7:ad:9e:1a:af:bb:
0c:ba:18:50:cf:39:7d:ac:a8:b8:7a:4a:26:db:ff:65:2f:47:
a4:ee:74:66:4b:33:82:6a:06:bb:7b:19:65:0b:5c:ae:40:b3:
a3:63:af:2f:aa:1c:73:6c:15:bc:5d:c1:01:37:dd:66:c7:9d:
ac:50:96:05:3f:1b:2d:69:73:1c:4b:31:96:a1:2d:88:c2:55:
59:2e:23:76:5e:25:81:5d:70:8c:c4:75:78:59:05:1f:b8:58:
0b:15:e3:76:ad:a5:ea:11:67:2e:b1:3f:41:08:1b:2c:ec:a2:
33:59:ea:d1:16:ef:04:37:5d:16:56:2b:4a:9d:ba:ba:8d:93:
27:b3:27:7a:41:19:9e:ba:5c:ca:9c:c0:57:2c:e5:b0:d8:57:
05:c3:4d:36:be:cd:ea:4a:17:97:4b:3a:c5:2d:90:28:24:6e:
94:9f:ff:00:98:fb:6b:82:23:3c:e8:22:e0:68:14:17:ed:1e:
cd:7f:cb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org