Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8F42A79463D711ECB4322DBA5A40D577.roa
File: 8F42A79463D711ECB4322DBA5A40D577.roa (raw, json)
Hash identifier: TsVxs7uhxZPlphzEVMiLzVg51PXo3wFO7Dm7K2BiroY=
Subject key identifier: 26:6A:65:F7:D6:C8:60:33:75:96:F3:3A:C3:2D:0B:70:35:72:DB:A6
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0742
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8F42A79463D711ECB4322DBA5A40D577.roa
Signing time: Thu 23 Dec 2021 10:03:21 +0000
ROA not before: Thu 23 Dec 2021 10:03:18 +0000
ROA not after: Fri 23 Dec 2022 10:03:18 +0000
asID: 60781
IP address blocks: 154.16.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1858 (0x742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Dec 23 10:03:18 2021 GMT
Not After : Dec 23 10:03:18 2022 GMT
Subject: CN=61c44969-1651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:43:f7:c7:d4:70:ef:28:1f:84:9b:91:4d:
d3:2d:72:f8:92:95:2c:b2:91:c5:ef:91:52:2e:01:
8f:f6:ad:49:40:7a:02:c3:13:27:78:c2:bb:29:65:
a0:a9:7e:b1:d4:b3:4d:e9:5a:8c:8f:c2:d9:13:8f:
4f:fa:4b:e5:63:63:02:29:03:09:ee:36:12:4c:58:
e0:d4:51:00:08:bc:36:4e:d6:76:87:23:f1:cc:58:
3b:94:1e:e5:97:4d:2e:e8:3c:fd:da:14:11:85:65:
de:d0:cf:a4:d0:2e:bf:1c:53:69:24:26:f6:4f:e6:
43:98:d3:a4:55:2d:61:3c:90:2a:d1:2a:f9:dc:0d:
45:2e:6d:6a:51:0b:17:01:15:14:68:93:1e:92:7b:
74:a0:e8:87:08:83:de:f7:4f:17:34:70:7f:ce:21:
48:6d:cd:0b:6d:0d:2c:c2:ba:0d:42:7b:b5:0a:f0:
84:db:b1:52:e4:1d:da:4e:58:ef:5f:a3:91:d0:d1:
91:e5:8e:75:82:3f:a3:4b:3b:77:12:eb:64:9b:64:
a5:ef:37:ec:07:88:48:b7:0d:1c:d5:43:dd:ff:1e:
cd:85:a0:a3:90:1c:53:2b:6e:a8:aa:9c:d7:77:fd:
f8:4e:c1:83:a5:de:0d:84:81:29:31:31:ed:79:41:
3e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6A:65:F7:D6:C8:60:33:75:96:F3:3A:C3:2D:0B:70:35:72:DB:A6
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8F42A79463D711ECB4322DBA5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.183.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:43:25:55:4d:66:96:71:cb:82:96:1e:64:cd:e5:02:d8:07:
3d:d0:fe:d5:c7:72:a3:6b:b6:8d:10:2b:61:24:b0:94:dd:90:
74:cc:49:ae:7e:e5:75:8c:8b:af:76:cd:2f:b6:97:0a:a4:ba:
a8:cd:07:e1:ff:bb:49:cf:85:b8:9c:4e:04:87:7a:87:7d:84:
a9:41:3f:c9:c7:5b:cc:b4:16:79:12:53:78:40:9f:f1:e2:70:
a4:ed:f9:93:fa:a7:22:5a:dd:cf:2f:44:aa:0e:27:a9:ea:9b:
19:d7:98:af:40:11:19:d7:9f:cb:25:b1:8a:f5:20:b4:8f:42:
50:88:e0:66:06:b7:d3:52:73:a4:12:01:e8:dc:aa:dc:0d:a5:
80:85:96:38:2e:54:e9:c2:57:53:ea:1c:a1:d7:5f:ff:06:cc:
a1:0a:09:a4:7c:84:3b:d8:f9:4d:dd:81:f3:ae:55:1e:e4:65:
66:8b:0c:a6:ec:4a:58:ea:19:79:98:c1:e3:7a:8b:1b:d9:a8:
37:85:5c:d2:c4:b1:8e:53:0d:e9:c5:22:e6:4a:53:a1:3a:52:
24:0c:20:ff:10:a2:ee:4b:2c:db:96:d4:55:34:33:6e:34:ea:
44:27:76:fa:e4:d5:d3:08:68:35:77:f3:60:7d:ca:35:25:1f:
67:5d:c5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:51:37 2025 by rpki-client