Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C2365A34DFF111EB8DAA225FF8AEA228.roa
File: C2365A34DFF111EB8DAA225FF8AEA228.roa (raw, json)
Hash identifier: xv744Ay+WHwqCuNaIi+0uSM598Jtoau6a1bA2K9V1Do=
Subject key identifier: C1:98:48:B3:50:3A:99:71:D9:3E:16:83:E6:B6:36:43:35:A0:2A:34
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 05E1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C2365A34DFF111EB8DAA225FF8AEA228.roa
Signing time: Thu 08 Jul 2021 13:38:20 +0000
ROA not before: Thu 08 Jul 2021 13:38:16 +0000
ROA not after: Fri 08 Jul 2022 13:38:16 +0000
asID: 142570
IP address blocks: 154.16.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1505 (0x5e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 8 13:38:16 2021 GMT
Not After : Jul 8 13:38:16 2022 GMT
Subject: CN=60e6ffcc-065f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:59:87:75:8d:b6:29:26:5f:57:43:a9:54:c0:
32:08:39:80:48:be:e2:c3:f1:0f:9d:00:a5:63:92:
59:bf:22:47:5d:1c:b4:71:79:20:69:2b:03:ea:30:
44:05:80:54:49:29:77:78:a2:a0:64:4e:f6:95:de:
0c:e8:ab:52:89:1f:f7:b8:74:6d:f1:b4:c9:ab:1e:
45:3b:b5:49:74:a0:3a:e3:58:49:59:dd:a5:3a:6c:
4c:67:33:2a:4f:2f:29:72:f5:e0:bf:0e:1d:e1:7f:
67:54:d8:b1:2a:42:fe:a7:d2:ac:92:7b:64:bb:63:
07:33:bc:26:0a:cb:6e:d4:6e:a2:4b:9f:ef:59:6b:
cd:c3:1b:39:5b:58:76:88:47:dd:a6:fb:91:2f:06:
2c:4a:00:d3:91:69:88:2f:e1:1b:b0:5e:b0:65:1f:
28:98:c8:5d:01:a5:47:e6:e2:4c:c6:d0:51:48:dd:
08:96:d2:fb:bd:c8:aa:13:8c:64:25:5b:77:24:26:
1b:98:24:23:62:a7:78:f1:fb:5c:86:ed:99:f6:38:
97:a9:5d:5d:f9:ac:65:96:96:04:1b:5a:61:c1:bb:
0c:6b:08:fe:b9:36:cc:9e:66:d1:e9:89:a0:8b:c7:
72:25:e4:bf:38:78:29:f7:61:f2:f1:31:3d:91:e2:
bc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:98:48:B3:50:3A:99:71:D9:3E:16:83:E6:B6:36:43:35:A0:2A:34
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C2365A34DFF111EB8DAA225FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.221.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:95:bc:ac:7b:20:fd:00:2b:2c:bb:96:7c:b1:cc:cb:1e:2a:
c8:0a:81:01:96:88:3f:58:16:68:23:8d:61:d4:a1:01:f6:20:
0e:e7:f6:5c:2c:bc:77:91:43:c8:96:d0:aa:ed:5e:56:6b:66:
01:c8:06:f9:4b:94:0b:c4:13:5a:82:4c:41:e9:f3:0e:4e:94:
04:13:10:89:9a:3f:0e:2d:db:91:00:a4:30:98:e2:e0:b9:2a:
af:56:ea:11:4d:7e:7d:32:e5:6f:5b:54:ea:7e:9e:07:53:48:
7e:3f:ea:6b:d4:86:9c:78:84:d3:6d:ae:96:5c:5b:ee:0a:c3:
30:e9:84:78:c3:98:39:3f:ed:3d:f4:34:53:37:c8:c7:ef:b5:
3b:dc:78:31:69:5b:9b:b3:42:b2:18:bc:b0:25:29:67:92:2d:
ed:2a:31:c3:da:3f:5c:31:cc:17:62:28:fc:47:04:5b:f1:e1:
21:7a:ae:65:c9:a0:c8:5e:72:46:93:79:ca:fd:9e:c5:3c:db:
38:8d:21:f3:1c:dd:fc:0e:f8:9f:0a:fa:f3:c3:72:26:29:e1:
b4:97:16:de:0f:01:22:f0:97:7e:54:af:53:52:ce:d3:89:67:
86:db:e7:18:14:80:a5:5d:46:56:93:4b:95:4a:f6:fe:67:8b:
75:58:89:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org