Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AE53FDC0FF8811EC8C224FA7F1222468.roa
File: AE53FDC0FF8811EC8C224FA7F1222468.roa (raw, json)
Hash identifier: TYCxwKwjPMo+gfO6ke9ElRQ7htaVsPqE3oYq4jluhig=
Subject key identifier: 4A:24:0E:2A:AB:F7:D7:64:21:E3:38:3F:00:E5:76:F1:1D:9E:81:91
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 08DA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AE53FDC0FF8811EC8C224FA7F1222468.roa
Signing time: Sat 09 Jul 2022 13:11:45 +0000
ROA not before: Sat 09 Jul 2022 13:11:39 +0000
ROA not after: Sun 09 Jul 2023 13:11:39 +0000
asID: 19844
IP address blocks: 154.16.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2266 (0x8da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 9 13:11:39 2022 GMT
Not After : Jul 9 13:11:39 2023 GMT
Subject: CN=62c97e91-db5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:52:be:7a:02:c4:6a:cf:56:dd:36:b0:40:36:
97:2f:a7:4f:91:e9:c9:b2:a0:a1:70:62:d6:6b:1a:
59:ac:25:a3:a0:44:eb:be:00:c0:02:f9:78:11:98:
32:40:31:dc:30:3d:ab:68:6d:cf:6d:b9:f4:4f:72:
99:a2:e5:b8:73:3c:0d:9b:2a:fc:49:8d:2b:e2:28:
b8:85:0c:4c:f2:82:e2:c6:95:9b:6f:69:e5:21:43:
a4:47:40:b5:46:6b:a2:79:60:64:e7:f4:e3:f7:8e:
80:01:ff:67:39:11:3f:70:9d:79:30:82:1e:92:3b:
82:11:84:b1:66:e6:36:04:47:62:8c:1a:cb:25:98:
9b:15:3e:9b:a1:8c:5a:5e:32:c2:1d:b5:07:ec:13:
3c:63:c9:f5:0a:c0:80:99:22:78:cf:77:6b:c5:77:
55:dd:aa:41:13:7b:07:0c:4c:cd:d5:e7:bc:24:85:
7e:fc:60:db:88:3f:26:9f:62:07:4b:a0:de:18:7e:
aa:c7:82:be:c7:8a:44:b8:08:8e:a6:c5:db:92:39:
05:98:90:d7:57:c7:c6:76:06:a4:98:80:c5:a5:a1:
1c:ab:78:46:f2:41:54:32:d5:3a:ef:33:d0:12:77:
55:6a:01:0c:dd:0a:00:ae:ec:1c:ca:39:11:1a:41:
f7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:24:0E:2A:AB:F7:D7:64:21:E3:38:3F:00:E5:76:F1:1D:9E:81:91
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AE53FDC0FF8811EC8C224FA7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.245.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e6:f4:df:1c:5a:a6:22:54:4a:00:6b:41:bf:6c:5c:e3:34:
86:78:05:3a:31:61:07:3d:12:1d:e5:aa:b4:f9:51:ca:e4:a4:
92:c8:c1:5d:1f:fa:b4:a7:6c:80:47:ee:fc:40:39:a3:9d:29:
b8:6c:8d:27:6f:42:43:f3:6b:b0:a5:2b:50:2f:a8:50:67:4f:
22:43:7d:da:7e:1e:20:6b:4f:8c:5d:b3:ed:f2:d8:17:6e:ce:
ef:13:d4:8c:fa:48:15:1e:9b:af:0a:05:dc:ae:fd:81:d0:15:
43:78:85:37:1a:52:13:a5:5d:28:65:2e:c2:e3:ab:37:99:61:
bb:2a:1d:93:5f:ef:e7:c6:39:0a:0a:11:c6:73:b6:76:2d:7f:
19:c1:83:c3:85:0c:04:cf:94:bd:32:b9:65:76:62:7e:59:7a:
2a:d2:d1:e2:3e:60:6b:49:0c:76:64:34:43:76:04:60:ac:1c:
2a:43:1d:70:16:6c:df:1d:6f:1a:1d:d3:0e:1a:3b:85:07:fd:
73:e2:0d:39:9c:0e:2b:b4:4c:68:92:40:45:bb:d9:9f:70:cc:
3c:6b:15:4c:41:c0:d7:d3:70:b5:1a:81:d7:18:db:ae:38:0f:
1f:db:05:07:c5:84:4c:e1:9d:81:20:cb:14:ec:9f:67:50:ca:
16:32:78:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org