Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/96CAAB9CAF7211ECA1A29EA55A40D577.roa
File: 96CAAB9CAF7211ECA1A29EA55A40D577.roa (raw, json)
Hash identifier: 22bvaNwRE8e4TUZApcrArDfcGjCtQLAdiW/oW7NgIhI=
Subject key identifier: AC:5D:B1:49:79:6F:C3:E4:24:B8:15:64:A7:32:68:2D:49:67:6B:9C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 080B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/96CAAB9CAF7211ECA1A29EA55A40D577.roa
Signing time: Tue 29 Mar 2022 15:12:03 +0000
ROA not before: Tue 29 Mar 2022 15:11:59 +0000
ROA not after: Wed 29 Mar 2023 15:11:59 +0000
asID: 30058
IP address blocks: 154.16.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2059 (0x80b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Mar 29 15:11:59 2022 GMT
Not After : Mar 29 15:11:59 2023 GMT
Subject: CN=624321c3-fc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:20:a0:02:1d:79:9c:3e:6f:91:6f:83:53:83:
cd:c3:00:9d:73:0b:98:10:c5:35:e9:18:4b:ac:a4:
bf:26:d4:d3:59:f3:da:f9:56:00:e4:c0:99:c0:ee:
12:ce:18:d1:59:02:9d:32:0c:07:32:21:21:87:9f:
36:57:8c:f7:0f:52:b7:78:8e:21:84:54:5d:d1:18:
1e:78:6c:26:83:c4:2a:ee:15:3c:c6:80:66:1c:bd:
4e:f3:7a:3f:0c:29:68:8f:ed:cd:16:06:52:d3:da:
bc:dc:15:25:36:92:76:50:d5:ff:09:a1:fc:a9:dc:
c3:a5:1f:3d:87:9b:b6:2f:51:29:26:81:f8:07:f4:
45:74:bd:d2:02:92:85:48:2a:ba:c3:5b:12:33:23:
66:fb:f2:29:22:a8:1d:5e:fb:33:f4:1c:61:f8:96:
27:33:a8:4e:57:1a:a2:0a:b4:94:53:e8:9b:73:23:
3f:3c:de:24:96:e2:6c:46:06:65:84:70:15:9f:2d:
4d:d5:15:aa:d9:ee:cd:d8:a4:ba:25:ac:71:a4:d4:
d9:41:e7:4e:15:9a:5f:f3:ad:24:72:e0:90:1a:c1:
bf:ee:b1:a3:7c:34:bf:bb:df:66:20:42:c8:ff:f4:
63:96:25:e1:47:ce:da:a0:bd:9b:6f:e2:7e:cc:0d:
df:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5D:B1:49:79:6F:C3:E4:24:B8:15:64:A7:32:68:2D:49:67:6B:9C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/96CAAB9CAF7211ECA1A29EA55A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.7.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e2:8d:0c:39:03:43:9b:d1:3e:33:a7:13:93:ac:e4:a7:01:
79:e9:3a:b1:44:e8:1e:3e:e7:fa:7a:07:3f:69:1e:24:41:61:
1b:e5:16:48:53:3d:25:a4:da:2d:1c:dd:11:9d:09:f0:8c:dc:
80:b5:43:21:0d:27:a0:03:62:f1:73:61:63:1a:0e:b8:63:e8:
6d:e8:ec:27:2d:03:57:6a:d1:1d:9b:cf:16:45:c1:1e:d2:95:
74:97:b1:5f:ab:43:f6:12:a7:f6:45:6b:da:01:cd:57:8a:c8:
60:a0:be:a2:3d:92:39:8f:46:8e:cf:83:16:5a:fd:aa:a0:30:
5b:03:28:70:ab:7a:99:35:51:df:ce:11:00:fc:b0:e7:42:e2:
79:b4:df:67:46:c8:1e:b5:fe:28:51:11:4f:f8:7f:42:52:4e:
f2:4e:6e:71:5a:e8:fd:d2:f5:f5:89:a6:8f:e9:88:be:ba:fb:
5d:06:cc:39:d4:0a:fd:ec:cc:85:92:e3:36:09:2a:b7:08:88:
27:1e:3d:1d:af:b5:90:b0:bf:21:6e:10:fd:8d:c7:1d:f5:16:
22:a1:56:ea:1a:bb:5b:f4:55:aa:60:7e:2d:3a:bd:f4:dc:f8:
dc:95:26:93:37:79:12:5b:53:b6:15:00:36:5b:9a:82:39:af:
82:de:1a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:44:26 2025 by rpki-client