Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B84C4A5CE74211EC8DEFDD89F1222468.roa
File: B84C4A5CE74211EC8DEFDD89F1222468.roa (raw, json)
Hash identifier: 5HJYN1i/ylIGb+1Zwx/I4ZLZiq3H1/XlqbI4baU50T0=
Subject key identifier: A1:0A:2F:33:00:3B:57:3E:D0:EA:F4:B8:29:48:3A:BF:0E:D8:35:6A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0884
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B84C4A5CE74211EC8DEFDD89F1222468.roa
Signing time: Wed 08 Jun 2022 15:50:29 +0000
ROA not before: Wed 08 Jun 2022 15:50:25 +0000
ROA not after: Thu 08 Jun 2023 15:50:25 +0000
asID: 207459
IP address blocks: 154.16.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2180 (0x884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Jun 8 15:50:25 2022 GMT
Not After : Jun 8 15:50:25 2023 GMT
Subject: CN=62a0c545-7a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:95:d1:07:22:55:69:56:54:50:0d:f0:49:8a:
8b:d8:2e:e9:65:d4:0c:59:81:75:e0:48:aa:dc:a5:
75:65:27:b0:af:54:7f:ac:3e:0d:07:9d:b2:78:b6:
cf:a7:90:60:c9:c3:00:ef:d8:60:70:bb:ac:3e:59:
1e:63:c4:5a:1b:df:7a:e8:09:96:d3:69:67:d8:1f:
c3:59:df:0d:55:bb:60:82:d6:14:13:81:1d:fe:2a:
50:ee:d0:14:f6:d7:4a:59:90:bb:c0:db:8c:9e:61:
69:b4:dc:0a:9c:15:ab:1b:f1:35:6a:55:04:95:79:
0f:7e:79:e7:b9:7d:10:de:90:e1:92:72:3b:48:2e:
0a:4b:0f:f2:c5:34:e3:16:06:ec:c9:91:2f:20:04:
6d:01:fd:f3:8a:65:12:74:39:9b:62:52:81:60:ed:
dd:da:80:fd:f1:eb:e2:2e:66:4c:ec:55:0f:c9:9a:
d5:2e:1d:5a:39:c0:1e:69:a0:ec:ce:39:09:c1:8e:
c6:d9:8b:9c:8d:65:00:6b:6c:05:05:de:77:c1:f1:
5c:99:14:09:43:41:95:15:a8:99:33:b5:26:e3:ee:
56:09:1f:91:b0:07:50:2d:95:1e:8f:cb:e2:b0:dd:
8f:ce:81:5b:f4:fd:2e:70:61:82:b2:b9:01:29:01:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0A:2F:33:00:3B:57:3E:D0:EA:F4:B8:29:48:3A:BF:0E:D8:35:6A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B84C4A5CE74211EC8DEFDD89F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.96.0/24
Signature Algorithm: sha256WithRSAEncryption
42:b5:7a:df:4b:bd:db:31:d9:70:2a:e9:21:b7:c1:95:40:89:
84:6c:2d:d9:62:10:d2:1f:c7:a9:ef:93:92:bf:5f:61:7a:76:
8f:25:ad:4e:5e:cf:e5:cf:71:44:2e:a7:11:cb:08:6a:67:bf:
76:0e:74:c0:54:39:c8:57:07:f7:4c:01:e3:ad:d0:07:ff:8e:
8e:fe:9d:3d:ca:ac:2b:64:bd:fc:53:2e:a6:6f:d4:90:78:7d:
ca:f5:0e:d4:ee:c3:8a:89:0d:62:a6:18:8e:ad:55:63:4f:08:
85:1d:16:d7:0c:9b:73:e5:c0:54:61:46:cf:66:45:f3:8f:57:
0b:6f:04:7c:a0:b5:34:66:80:c3:16:28:3a:e1:17:5e:45:2a:
e3:9e:b1:e9:3f:67:0f:1f:33:e6:ff:9f:c1:0f:36:80:f6:40:
db:a8:6b:49:c9:af:89:55:d7:7b:60:b3:ef:5e:ab:4b:d1:3a:
6b:12:5e:58:99:d5:7c:87:06:41:9d:f3:65:30:38:7e:7b:e9:
83:70:ee:01:cb:ea:c5:ad:46:d2:88:c4:8a:72:a0:eb:8d:e2:
dc:71:e6:d4:9d:cd:6e:33:70:1c:f7:20:fe:65:a6:b7:eb:50:
cf:c5:11:fe:15:64:5c:9f:f6:0b:4a:ae:bc:55:7b:c2:f8:f8:
75:c8:d2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 15:03:21 2025 by rpki-client