Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/864AC9C4552011EDA1B0F085F1222468.roa
File: 864AC9C4552011EDA1B0F085F1222468.roa (raw, json)
Hash identifier: q6Q8DnU+cKl37BuOKAMojjPZ77mOqAgTNST1kYn/fWE=
Subject key identifier: D9:EA:C3:D9:6D:90:A3:50:1F:AF:4B:25:A2:68:16:B2:39:5E:98:B4
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0A5C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/864AC9C4552011EDA1B0F085F1222468.roa
Signing time: Wed 26 Oct 2022 11:22:50 +0000
ROA not before: Wed 26 Oct 2022 11:22:46 +0000
ROA not after: Sun 27 Oct 2024 11:22:46 +0000
asID: 212238
IP address blocks: 154.16.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2652 (0xa5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Oct 26 11:22:46 2022 GMT
Not After : Oct 27 11:22:46 2024 GMT
Subject: CN=6359188a-8202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:4a:51:2f:55:a6:96:e2:ef:fb:ad:78:de:
e0:7a:98:2c:cd:7b:30:83:0f:f7:4e:ea:80:81:65:
3a:32:77:7e:78:7c:ba:da:60:62:eb:32:eb:c2:4d:
09:de:d0:3f:77:c5:cb:ac:3a:10:4d:e4:a3:63:63:
b1:df:81:6d:98:2f:d1:33:f6:b6:da:60:e0:7c:52:
61:ba:1c:6b:1e:db:60:95:4a:92:2f:6d:f8:06:a6:
48:a9:6a:96:a3:1b:67:c0:d5:d9:b1:d8:7f:69:0d:
b2:e7:2d:8b:c6:b6:19:44:03:34:b7:24:38:32:0a:
18:4b:81:86:fa:a3:ec:0e:85:9f:f2:ef:2a:79:96:
76:b8:1e:a9:09:9b:39:26:34:26:a1:e5:7f:a2:e2:
48:17:43:c4:8a:e1:a8:a8:33:b6:40:b4:9f:5b:d2:
84:9e:27:f2:d5:d5:8c:ac:9f:4d:e9:e9:cb:d5:6d:
3a:de:16:05:46:f7:b5:52:eb:dd:1e:32:30:5e:7e:
8b:93:fb:26:b8:31:ed:17:65:96:f2:b4:81:db:2b:
e7:cf:b4:5d:6f:c1:f6:92:98:e9:8a:1f:d2:14:91:
42:88:7c:0c:9d:d6:c7:bf:97:8e:71:5f:d9:0a:72:
4d:a2:ea:df:2f:7a:58:28:bd:9b:95:83:9c:9e:37:
6c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EA:C3:D9:6D:90:A3:50:1F:AF:4B:25:A2:68:16:B2:39:5E:98:B4
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/864AC9C4552011EDA1B0F085F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.172.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:4e:43:db:b2:b7:6a:ff:02:f6:d8:f3:8b:3b:12:60:6c:5c:
8c:6b:1e:9d:3e:c0:14:e6:7f:31:ec:51:31:14:9a:07:16:b6:
79:d2:bf:01:26:e6:b9:95:69:01:b2:ff:6a:46:9a:50:11:22:
95:38:40:ce:83:ad:25:d7:0a:cc:a6:2b:48:63:04:ba:3b:61:
11:d2:b0:90:5e:f8:c4:62:93:a5:09:73:d8:4d:c3:9a:6e:da:
7b:7f:0d:af:62:73:7d:9c:b1:34:12:2a:6c:cc:26:d9:6f:78:
8e:5b:87:9e:41:e2:79:ab:07:c9:47:7f:83:a3:97:d5:fb:e1:
b9:93:20:80:37:79:17:0b:29:aa:2b:c1:1b:8d:5f:9b:3b:b3:
52:04:56:99:78:4d:ea:f0:19:36:f4:6a:60:41:7d:d9:d7:60:
fa:be:4b:8b:62:b8:6a:e9:80:73:85:3c:b6:ae:82:4f:07:b7:
f7:e9:ef:e3:2c:6f:c5:8d:d3:91:84:ce:71:ec:9f:52:ba:e8:
63:4c:97:63:72:72:f8:74:cb:2b:12:89:4e:1c:5e:05:cf:b6:
9c:19:af:e0:7e:13:a2:38:7c:c9:3b:44:8e:1d:e2:50:9b:6d:
bc:5d:31:e9:aa:ad:8c:e8:3f:a7:dc:56:06:a3:5f:72:c7:2e:
71:5d:19:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:51:43 2025 by rpki-client