Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B37F901C834B11EBA6DBB248F8AEA228.roa
File: B37F901C834B11EBA6DBB248F8AEA228.roa (raw, json)
Hash identifier: 3VBRTXo+qsTnAeV1qVNJuCx+AGzjL1b6QA5/saNNI/M=
Subject key identifier: A2:1F:B5:69:96:0E:96:90:A2:84:61:10:1F:B9:A7:B4:57:5B:38:21
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 04D7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B37F901C834B11EBA6DBB248F8AEA228.roa
Signing time: Fri 12 Mar 2021 15:57:52 +0000
ROA not before: Fri 12 Mar 2021 15:57:47 +0000
ROA not after: Sat 12 Mar 2022 15:57:47 +0000
asID: 212336
IP address blocks: 154.16.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1239 (0x4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 12 15:57:47 2021 GMT
Not After : Mar 12 15:57:47 2022 GMT
Subject: CN=604b8f80-1017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:38:c8:0c:34:3e:88:4e:30:9f:85:ac:76:53:
88:b1:62:83:15:ff:75:de:5e:c6:7a:ce:67:09:dc:
1a:66:51:0f:18:99:f4:c4:c0:38:13:0c:c1:65:e9:
6a:b6:c3:9d:c8:87:de:c0:19:67:2c:06:31:fa:e5:
c3:1d:0e:b7:01:dd:83:5c:a8:c5:3b:a3:78:2c:8b:
88:5f:47:78:4a:09:bd:10:f0:09:a3:02:14:aa:1f:
97:5e:87:ba:0d:f6:f0:ee:33:cf:ad:dd:00:38:d9:
51:11:1a:58:d9:9f:9d:43:a6:27:0a:c8:22:a8:e6:
4c:76:ee:4c:5b:d2:63:36:8f:03:f2:d4:2b:66:af:
7c:5d:3f:4f:45:a4:6f:c5:ed:72:9b:46:94:b0:80:
4d:79:0c:ee:85:b6:cc:d9:59:39:93:38:10:54:ed:
d2:96:a6:f5:b8:89:c4:56:97:25:2f:84:de:cd:4a:
ca:92:ee:59:40:16:a9:20:91:9d:8d:3b:5f:bb:7e:
1d:68:3e:ef:c8:31:f5:41:6d:43:2a:7b:f6:2d:54:
3c:f5:89:eb:5f:27:99:8c:fe:24:ab:fd:dc:10:19:
05:08:d2:0a:39:2b:3c:99:1a:6e:41:e7:97:c7:2d:
3f:ef:8a:14:7b:0f:93:5b:36:14:4d:eb:6e:f6:4f:
01:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1F:B5:69:96:0E:96:90:A2:84:61:10:1F:B9:A7:B4:57:5B:38:21
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B37F901C834B11EBA6DBB248F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.3.0/24
Signature Algorithm: sha256WithRSAEncryption
68:13:38:1a:73:8c:3b:68:e3:03:4a:ae:7e:87:02:c4:ed:80:
06:06:c9:ee:21:2e:57:11:5f:ab:e8:04:66:33:03:96:26:5b:
5f:2a:e8:99:0b:fc:dc:c6:55:ce:4a:91:28:68:3f:c6:7a:ef:
0e:b1:11:dd:7c:44:fc:24:1c:d9:5a:2d:b2:f6:7f:f3:70:48:
9e:82:5a:aa:3b:e9:c8:1d:b4:81:a2:a8:aa:47:ab:40:e9:86:
31:48:96:20:b8:6d:0f:55:2e:2a:eb:39:27:eb:6f:96:6e:6c:
aa:cc:9f:26:45:1a:12:c1:32:cb:f8:08:d8:b5:bb:47:e8:d2:
28:23:73:3d:60:be:17:34:37:92:b1:fa:67:72:7d:86:0e:cf:
b8:d2:c1:38:7b:34:9b:39:66:8d:9a:08:f2:20:95:4f:87:ac:
ed:2c:88:82:b4:9b:4b:9f:e1:79:45:cc:69:3a:89:a1:f9:69:
5d:1c:f1:ed:dc:24:ea:50:28:71:18:ff:9b:f6:04:05:18:0e:
eb:eb:0b:48:80:0d:01:c6:4c:5c:d3:5b:11:59:b2:db:08:e2:
12:b9:0c:89:d2:3c:e0:94:dd:6f:ba:72:54:15:5b:e1:ba:88:
2a:c0:fb:f6:d3:ad:7e:dc:91:a1:36:95:63:36:31:70:91:2d:
33:33:a0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org