Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A2560E5E70A911EDB05787BBF1222468.roa
File: A2560E5E70A911EDB05787BBF1222468.roa (raw, json)
Hash identifier: eRScWq4c0q+oa9zFpSASFNXkjrUswl/m62a7q2llmWA=
Subject key identifier: 90:9C:48:45:32:35:BB:85:7B:A6:F2:45:8A:0E:C8:A2:E7:B6:39:B2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0ADA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A2560E5E70A911EDB05787BBF1222468.roa
Signing time: Wed 30 Nov 2022 12:22:19 +0000
ROA not before: Wed 30 Nov 2022 12:22:16 +0000
ROA not after: Sat 30 Nov 2024 12:22:16 +0000
asID: 62240
IP address blocks: 154.16.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2778 (0xada)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Nov 30 12:22:16 2022 GMT
Not After : Nov 30 12:22:16 2024 GMT
Subject: CN=63874afb-7d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:69:6d:1b:49:54:6e:87:3c:11:44:d0:0f:d0:
a0:0d:0d:50:8d:f5:62:43:28:52:99:de:13:fa:87:
14:91:b7:75:d9:8a:f0:4e:c1:a6:59:31:a0:94:40:
d9:8d:1c:7b:d4:1d:de:3f:1e:65:8c:62:28:db:7c:
92:9c:03:0d:0f:9a:8a:c0:54:e4:ae:3b:ec:b3:47:
7c:51:ac:72:17:ef:aa:ac:87:f7:4a:7e:dd:e7:40:
16:21:e4:c6:fc:66:2b:67:09:7c:50:70:f8:d6:cb:
2b:be:9a:b2:b0:c8:29:2d:0f:da:59:6d:12:c7:04:
68:89:9c:a8:c2:2c:3e:6d:f3:e3:27:eb:f5:a4:34:
8e:6e:34:99:db:71:81:01:04:ed:3f:5f:ab:71:88:
ed:38:95:9e:f2:08:bc:69:e8:d7:40:7d:e1:e5:88:
58:5e:a4:69:2b:ea:8c:3e:56:2e:ea:49:71:b2:6f:
33:80:47:c8:70:e1:e4:9c:7f:26:48:3a:c7:20:7d:
9b:9e:f0:1d:ef:80:d0:74:25:93:d2:84:db:ee:c3:
04:44:93:18:7e:38:b2:75:1c:46:d5:eb:b4:94:b6:
44:60:a4:bc:01:93:b5:4f:10:7f:60:1a:32:a4:c7:
4c:70:ad:6e:98:db:fb:be:a0:59:68:b3:69:27:63:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9C:48:45:32:35:BB:85:7B:A6:F2:45:8A:0E:C8:A2:E7:B6:39:B2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A2560E5E70A911EDB05787BBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.228.0/24
Signature Algorithm: sha256WithRSAEncryption
24:dc:99:55:1d:2f:9f:86:82:07:b7:f9:65:85:e3:4e:e2:76:
03:58:41:a5:1c:76:3b:ec:f3:d3:86:20:8c:5f:19:a7:f3:75:
60:77:25:9b:d2:de:f3:44:b5:6a:d5:e4:75:57:2a:86:90:2a:
4d:6b:e0:e2:cc:1f:4d:32:49:45:c8:69:70:d4:0d:ab:fe:cd:
d1:16:89:ec:85:0f:f2:41:db:da:90:be:29:10:0b:6b:77:78:
14:df:3b:b5:73:1a:a1:cc:92:72:7d:d4:b0:3c:68:e5:ab:98:
07:9e:e6:00:30:87:31:26:f1:c5:55:25:54:15:dd:cd:e7:5d:
f8:68:8f:78:92:65:db:cf:71:3e:15:13:5a:92:d4:08:5d:ed:
a0:a4:2b:ba:c1:d0:c1:f9:7f:ab:b0:4b:40:0b:52:25:b2:b7:
ac:7b:f7:b9:4b:41:4d:77:04:6f:1e:0b:91:3f:bb:e0:e6:96:
d7:a9:c9:c0:95:a8:be:78:11:0e:99:b8:b7:81:e3:45:85:03:
6c:b7:12:3d:80:63:69:b6:99:9f:5b:47:2a:f9:c1:b2:1e:12:
3f:5e:83:ff:48:ae:1f:29:fe:57:f1:b8:e1:78:4d:55:fc:df:
de:7e:ee:cd:d2:97:4d:01:35:09:95:80:00:34:c2:d7:06:0b:
a1:77:55:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:58:52 2025 by rpki-client