Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C2AE8E6A71C711EC84F2F7A65A40D577.roa
File: C2AE8E6A71C711EC84F2F7A65A40D577.roa (raw, json)
Hash identifier: 2A4G9xRY66vVE5RgNFhaBThTAmNA06+tHlbZUY8+0Yo=
Subject key identifier: 30:A8:F4:B4:69:C7:66:17:1B:A2:2A:83:EB:C7:8C:D9:5C:7F:F0:74
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0772
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C2AE8E6A71C711EC84F2F7A65A40D577.roa
Signing time: Mon 10 Jan 2022 03:45:32 +0000
ROA not before: Mon 10 Jan 2022 03:45:27 +0000
ROA not after: Tue 10 Jan 2023 03:45:27 +0000
asID: 19318
IP address blocks: 154.16.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1906 (0x772)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 10 03:45:27 2022 GMT
Not After : Jan 10 03:45:27 2023 GMT
Subject: CN=61dbabdc-7143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:6b:43:5f:1d:07:7a:58:b5:bf:20:d9:48:
be:cc:35:4d:df:1e:f7:2a:24:43:98:c0:f1:14:2d:
ba:34:8a:91:1d:8b:51:73:0c:55:b9:cc:cd:23:6a:
64:d7:91:e1:9b:d8:74:91:7c:65:ed:ef:e4:a6:e8:
fb:1a:c6:8f:bb:e2:5d:78:da:84:28:bc:e9:ba:97:
c0:ff:c7:35:d8:4b:aa:87:da:8b:46:54:e4:b6:57:
de:c6:4b:b5:e6:11:30:a7:b9:bb:c2:be:b4:5f:f2:
48:70:f4:9d:08:cd:5d:56:d8:df:33:af:df:9d:98:
33:56:e4:27:1a:7e:3a:a5:a6:2c:65:40:ef:c2:72:
2c:3e:20:bb:a1:6d:53:5d:f1:85:8e:69:e2:1e:65:
d1:22:4c:85:9b:3b:0e:08:97:bc:d6:3e:60:61:90:
0e:b8:41:b0:eb:79:a2:b9:e2:58:c1:02:74:d6:b4:
04:9f:26:24:2f:3b:2e:6b:ba:10:38:5c:c7:c2:65:
b5:e7:3f:79:45:0b:81:61:8d:03:fc:36:60:05:7a:
dc:a2:3c:43:21:3d:91:1c:b8:ff:ad:e5:72:78:08:
9c:74:9a:b8:df:2c:42:64:b8:03:00:91:9b:08:72:
10:a2:98:b5:1f:b5:bf:24:21:d3:ac:8d:e4:ea:6c:
04:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A8:F4:B4:69:C7:66:17:1B:A2:2A:83:EB:C7:8C:D9:5C:7F:F0:74
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C2AE8E6A71C711EC84F2F7A65A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.7.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:34:2f:ec:8e:23:94:65:e9:10:20:c9:ad:cc:89:bb:ba:a5:
be:1b:5d:aa:4a:93:f0:12:13:f2:09:2f:b5:af:27:a1:40:b7:
d6:60:32:f9:bd:98:83:cf:32:69:89:fb:54:5e:b3:fc:3e:1c:
ed:4b:f3:bb:36:b2:06:1d:f6:2f:39:02:bb:f5:9e:5d:b7:6c:
2e:95:29:87:2e:16:00:2f:43:d8:bc:f6:5c:fb:4e:df:f2:74:
0f:51:b7:d8:d2:95:b2:39:80:63:b6:89:99:b6:eb:b4:d0:3e:
14:8f:ec:54:41:d7:25:ca:39:57:2e:2a:b1:60:10:a4:ce:5f:
35:a9:6c:bc:ab:32:b7:9a:e7:09:55:cb:8d:4a:3b:9c:08:54:
af:86:c7:1d:5f:27:6e:4c:f7:ba:eb:04:58:90:d1:ca:78:a4:
65:61:51:cb:20:ea:91:ed:1f:20:25:f3:3b:74:ed:14:81:1a:
03:7e:d5:7b:da:31:be:3e:aa:59:70:56:7c:69:39:6a:fa:bb:
ae:3d:89:e7:85:ee:03:21:d9:32:f2:af:3e:9e:a9:f6:78:81:
e3:1a:ff:37:7f:9b:5e:21:f8:e9:00:f0:bc:a6:92:27:a1:9b:
00:19:24:27:5b:1e:8f:dc:10:b5:eb:8c:2e:e8:50:0e:ed:2f:
1c:9f:d5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org