Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B5A78C5AC28D11EC8AB577EBF1222468.roa
File: B5A78C5AC28D11EC8AB577EBF1222468.roa (raw, json)
Hash identifier: 8F/z4NlI4ZjscloSiA+x4oOBOOaEyiBLtKudBxgVzpk=
Subject key identifier: 22:DC:44:61:51:2D:B9:6D:DF:CC:81:A4:B9:2D:B4:B6:68:90:F8:29
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0834
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B5A78C5AC28D11EC8AB577EBF1222468.roa
Signing time: Fri 22 Apr 2022 22:44:04 +0000
ROA not before: Sat 23 Apr 2022 22:44:00 +0000
ROA not after: Mon 23 May 2022 22:44:00 +0000
asID: 57043
IP address blocks: 154.16.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2100 (0x834)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 23 22:44:00 2022 GMT
Not After : May 23 22:44:00 2022 GMT
Subject: CN=62632fb4-68bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bf:0e:02:f5:8a:65:91:ec:11:6a:8e:5c:2a:
b0:5b:ae:7a:8f:10:9b:5a:81:b3:a3:59:d5:1e:a6:
2a:89:54:46:cf:d2:54:45:74:67:66:d4:4c:2c:5b:
e0:60:18:f7:c1:93:08:c3:bb:6a:de:a6:f3:32:30:
f9:b3:9b:ab:e3:f2:f5:2d:3f:a1:2d:3f:a7:67:a0:
2d:77:6c:81:d0:b8:ee:d6:c9:38:fb:a6:16:b8:6b:
eb:c5:be:56:53:1f:ed:e1:86:81:b5:19:88:08:85:
b0:09:b2:b9:94:01:cf:d7:04:c1:d1:be:83:dd:f5:
e2:b7:38:9b:81:cf:7a:2b:11:72:a6:28:df:4e:d5:
3b:91:60:06:c2:1d:dc:2c:1f:f5:38:7e:2a:78:6f:
ee:a2:2b:6f:55:2a:e1:35:09:8a:f6:4d:7c:60:2d:
3c:15:b8:9d:ca:55:a7:6e:b3:81:7c:97:18:a5:2f:
e5:57:03:74:21:64:a9:34:49:a7:b5:b4:bd:83:89:
3b:7e:24:85:75:7a:0c:82:2e:c9:4f:e0:a5:46:db:
2f:e2:ba:3c:ef:0c:53:43:ad:94:aa:2f:4c:b1:a6:
e3:2b:16:33:27:20:6e:cd:8b:c5:68:b6:93:1f:20:
7e:3d:48:62:7a:97:c9:d2:2d:72:9c:93:17:3c:79:
58:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DC:44:61:51:2D:B9:6D:DF:CC:81:A4:B9:2D:B4:B6:68:90:F8:29
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B5A78C5AC28D11EC8AB577EBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.35.0/24
Signature Algorithm: sha256WithRSAEncryption
21:42:cd:04:a5:7c:a0:12:dc:45:82:06:ec:d4:94:96:e2:5c:
5f:57:33:25:74:b8:b4:ab:73:2a:46:78:a4:de:95:6f:25:74:
fd:1d:69:d2:39:46:10:b2:2f:63:70:65:a3:b4:09:bf:68:9e:
f3:07:6e:0a:78:e1:69:da:88:d3:30:fe:ce:85:e2:ea:2d:2e:
30:88:cf:8d:86:33:fc:e9:30:f9:79:e6:e2:7f:43:6b:83:62:
bb:3e:79:32:b2:54:47:5c:8e:51:c2:0e:90:ce:2c:f3:55:f0:
4a:f9:02:9e:d3:39:45:b6:16:46:70:10:64:c9:cb:e8:21:ab:
e8:f6:a9:6b:e7:9a:35:46:da:74:84:b5:0f:5e:d7:b2:0e:1a:
76:0c:99:e8:88:af:f1:8b:8e:be:c7:50:05:84:bd:1e:1d:b7:
99:49:77:2a:f6:11:34:1e:17:67:a4:c6:79:06:4e:3d:23:07:
e5:80:30:5e:47:79:5f:d1:41:05:4b:47:10:45:40:d5:54:a4:
6f:ce:3b:52:44:5b:75:64:d9:41:29:58:9e:4f:72:dc:8b:3b:
9b:29:66:72:92:3f:41:85:3e:be:f7:da:01:ff:3c:b8:87:aa:
ac:d4:09:d2:53:63:27:18:e5:de:56:9d:fd:ba:fb:dc:22:c8:
5f:17:66:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org