Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9D6F2540FCEF11EA9B9CAD4BF8AEA228.roa
File: 9D6F2540FCEF11EA9B9CAD4BF8AEA228.roa (raw, json)
Hash identifier: +cHGLrpR8GHcs+U43Dwb4C3rShJDrA7IyGJZkiqMNE4=
Subject key identifier: 7C:2E:A5:4C:7E:82:CA:7B:50:37:93:C1:C4:5E:0B:17:87:C0:D6:09
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 03B4
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9D6F2540FCEF11EA9B9CAD4BF8AEA228.roa
Signing time: Tue 22 Sep 2020 16:21:06 +0000
ROA not before: Tue 22 Sep 2020 16:21:02 +0000
ROA not after: Thu 22 Sep 2022 16:21:02 +0000
asID: 212826
IP address blocks: 154.16.49.0/24 maxlen: 24
154.16.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948 (0x3b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 22 16:21:02 2020 GMT
Not After : Sep 22 16:21:02 2022 GMT
Subject: CN=5f6a2472-6ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:3b:7d:68:9b:63:5d:71:dc:91:2f:c0:b2:
1d:9a:2b:09:30:ac:db:7b:6c:dd:d9:d7:b9:7e:96:
71:a5:03:93:81:26:88:c1:db:d5:97:5f:18:22:cb:
14:2a:5a:4e:56:9b:8c:13:5a:cf:04:5b:41:90:56:
28:e1:af:0f:15:9a:a4:23:c7:c7:70:59:12:3a:3c:
b1:77:44:b3:62:b3:a1:01:60:ff:7d:39:b6:2d:ce:
10:a8:49:bf:c9:e3:35:e6:f0:23:83:10:c7:de:0b:
10:f3:d3:04:09:a4:72:53:dd:e0:c9:82:65:eb:ea:
44:63:07:2a:f6:6e:03:5e:32:d8:70:ec:9e:4b:68:
d9:36:f9:14:80:65:d9:61:32:f6:cb:a8:ac:7e:ec:
69:6a:08:0c:50:96:21:ba:a5:0a:c3:a0:ab:6f:34:
d8:1f:00:11:49:f2:e4:ce:96:1e:51:25:2d:57:b7:
58:92:20:4f:1a:03:3a:ab:37:60:b0:48:aa:a0:3b:
d3:26:d6:90:f3:f1:73:f4:2a:2d:ef:f8:50:18:e5:
0f:e6:bb:8a:99:c0:53:4e:49:aa:9b:01:7f:71:33:
10:9a:42:d1:99:fd:d6:07:74:f8:44:de:81:61:9b:
d1:71:b0:93:a8:6f:78:a4:3b:2e:05:63:cc:78:1c:
01:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2E:A5:4C:7E:82:CA:7B:50:37:93:C1:C4:5E:0B:17:87:C0:D6:09
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9D6F2540FCEF11EA9B9CAD4BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.49.0/24
154.16.138.0/24
Signature Algorithm: sha256WithRSAEncryption
88:71:89:fd:cc:40:26:bb:0f:06:14:f0:43:7e:fb:f9:f1:06:
b9:29:e7:a1:ef:b7:a3:2d:37:ee:ca:4a:16:a1:5c:b5:40:2e:
c9:fb:09:dd:e0:64:73:24:77:b2:bf:3b:84:7e:41:68:d9:a7:
09:c4:e0:29:84:05:b2:61:00:23:60:3b:87:f2:95:00:e9:24:
92:06:c7:51:8d:8b:a4:31:51:c5:ce:70:0a:f9:e2:3d:37:2c:
a1:9e:2e:89:5d:39:d9:a2:e3:c4:9a:3b:93:56:68:65:b5:46:
18:76:8c:19:e2:c6:db:b7:36:8f:cf:98:67:d6:9a:2c:0d:ed:
48:31:ac:86:98:66:16:90:d2:c3:4d:5d:03:6e:47:5f:b7:83:
4a:20:80:ff:dd:d3:6e:f2:49:04:db:be:bb:5d:23:61:48:b8:
ff:f8:c2:3a:94:ce:6b:96:31:c6:9e:a9:cc:55:4f:f9:87:3f:
15:e5:20:42:d4:ed:1b:7d:27:e8:53:8c:e1:bb:05:d5:d0:83:
35:b8:b4:70:a4:d9:99:10:f9:50:25:ac:79:45:61:9f:71:30:
e8:ef:cc:4e:3b:87:2e:2d:f0:01:2a:12:66:00:19:70:76:51:
fd:d9:28:cb:71:b6:a2:80:23:12:9d:5a:36:2f:d4:c8:4f:8a:
d6:23:b9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org