Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/956654A02B3B11ED80272890F1222468.roa
File: 956654A02B3B11ED80272890F1222468.roa (raw, json)
Hash identifier: 1alkLAx5H107wTpOA/6XUomG9OubnaWJ+4Cd6Ju5IA8=
Subject key identifier: 2A:3A:D4:55:A6:D9:88:93:01:9F:92:05:F1:96:B6:AB:D7:6C:D7:41
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 098B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/956654A02B3B11ED80272890F1222468.roa
Signing time: Sat 03 Sep 2022 03:50:43 +0000
ROA not before: Sat 03 Sep 2022 03:50:37 +0000
ROA not after: Sun 01 Sep 2024 03:50:37 +0000
asID: 40676
IP address blocks: 154.16.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2443 (0x98b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Sep 3 03:50:37 2022 GMT
Not After : Sep 1 03:50:37 2024 GMT
Subject: CN=6312cf13-fedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f7:c4:6c:0d:89:18:67:f5:e6:76:95:5b:76:
75:5d:da:94:4d:c9:71:26:3a:b2:71:04:ca:94:a4:
56:04:53:3f:d0:62:65:a8:ff:72:6c:4c:c4:d9:16:
e2:3f:03:62:e7:f2:7f:60:61:fd:d7:6d:1c:80:7a:
de:25:47:e3:24:0c:5b:73:e4:20:f7:e2:09:70:2f:
19:6e:c7:8f:8a:d0:f8:23:d3:be:a7:5e:28:77:fd:
b0:c1:61:a1:d9:f4:b6:7c:cb:95:2d:ca:ca:9c:df:
fe:27:8b:d8:71:30:6a:42:32:5f:06:bd:8e:98:16:
58:ef:27:70:45:af:0f:29:e9:71:5f:e6:e6:e7:60:
f8:2c:c2:41:c4:c4:9b:a1:bd:85:be:62:94:54:ca:
bb:ec:d0:9d:22:04:62:0d:eb:31:3b:ac:9d:39:8c:
f0:59:de:57:6d:98:3c:b2:b6:f7:3c:39:c2:64:12:
1c:b9:34:cb:c0:3f:1c:b2:18:12:a6:31:94:ec:ef:
0e:85:f9:6e:a0:9c:96:58:27:95:84:29:a3:31:13:
4e:d4:3b:7e:18:72:4c:48:07:01:33:0a:24:96:2d:
cd:31:76:d0:98:8b:9e:22:9a:e3:3b:34:2f:45:64:
19:5c:29:e1:21:51:2a:33:af:5a:50:49:dc:2a:de:
47:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3A:D4:55:A6:D9:88:93:01:9F:92:05:F1:96:B6:AB:D7:6C:D7:41
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/956654A02B3B11ED80272890F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.207.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:2a:9f:bd:f0:c3:ae:a2:b1:62:29:b3:87:a0:b1:7f:44:2c:
dd:e5:72:f8:88:5f:4e:fb:12:1c:98:c2:d5:32:a9:06:fe:b4:
64:f2:4a:9c:b0:bc:f4:7f:42:36:3b:96:5d:12:38:be:e6:24:
41:76:46:f8:d5:59:da:d0:d0:8e:5f:3f:c4:b7:68:e6:25:23:
60:ec:ae:b4:09:4b:7e:9d:aa:33:89:8b:c5:da:19:8c:88:7a:
4e:1c:b1:86:40:3b:58:23:b9:83:16:28:a1:78:b2:8c:fb:ba:
58:99:86:d7:4b:79:fe:f9:43:c5:fd:00:7d:1b:fc:6a:06:57:
45:7d:6e:ef:2c:1e:c9:95:3f:b8:c3:6a:b5:74:45:85:ba:9e:
4e:55:5f:1f:56:29:16:71:0f:69:1e:45:70:8a:b8:ca:4c:45:
42:31:fb:fc:23:3f:6b:5b:25:21:99:2a:6d:e7:99:e4:6a:02:
27:5b:24:9c:39:62:c2:23:a3:54:4b:cb:eb:1d:2b:97:06:97:
13:13:45:e9:bb:34:90:43:a1:87:7f:f8:71:ef:b0:5c:aa:c5:
87:b0:3e:1d:a3:74:19:1a:3a:e4:5a:ac:94:7b:f0:56:62:22:
b5:84:45:ea:67:2f:13:94:26:3f:1e:17:c1:85:de:8f:15:4b:
77:33:c6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:42:23 2025 by rpki-client