Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C31E2EA22B8E11EC8FC29410D8A014CE.roa
File: C31E2EA22B8E11EC8FC29410D8A014CE.roa (raw, json)
Hash identifier: YWsyNBBn1YnoTWo4U4DXKPm39XpKKDSJfIcgKt+LkZU=
Subject key identifier: 0B:AF:52:A0:88:89:3E:D8:9D:20:3B:CE:EC:96:3E:4C:7B:FF:83:EF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 06BF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C31E2EA22B8E11EC8FC29410D8A014CE.roa
Signing time: Tue 12 Oct 2021 19:01:11 +0000
ROA not before: Tue 12 Oct 2021 19:01:06 +0000
ROA not after: Wed 12 Oct 2022 19:01:06 +0000
asID: 174
IP address blocks: 154.16.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1727 (0x6bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 12 19:01:06 2021 GMT
Not After : Oct 12 19:01:06 2022 GMT
Subject: CN=6165db76-6104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c1:24:77:87:64:17:24:26:2c:5c:ac:7f:6b:
f2:18:77:98:e0:46:fc:bf:2a:38:ba:19:cd:15:8d:
a9:a8:c7:71:08:fa:4c:20:ff:cc:e0:d5:d9:07:21:
82:d4:f6:df:5a:dc:f5:04:88:81:cb:f2:02:26:cc:
92:0d:d0:ab:61:c1:86:25:01:f6:c1:22:f5:87:67:
65:12:8b:0e:09:76:6a:69:c8:a9:73:7d:bd:f3:4f:
00:5a:fc:b0:26:3b:6b:12:d4:72:1c:b8:ba:52:f7:
56:e2:f4:cc:34:48:3d:6e:18:8c:30:7b:90:7b:89:
b0:5e:66:67:b2:ce:28:e4:58:42:a5:76:9f:3f:8b:
5f:52:e0:ed:81:8e:59:65:34:fe:64:80:2b:ac:e7:
1f:62:3c:fd:bd:62:00:61:d7:54:cd:1d:08:8e:3a:
7f:ad:64:12:88:78:6c:45:c5:aa:bb:0c:32:22:3a:
4a:4d:2f:83:a8:b4:b5:d6:55:65:09:66:5a:66:7f:
8e:f6:72:0b:71:df:61:f4:2d:5a:20:81:ff:e5:2a:
d3:b7:b6:ff:bb:97:c4:61:b0:cd:66:31:d4:f1:4d:
e9:19:ec:9b:61:41:de:02:19:00:b7:b5:fe:dc:ff:
17:a7:18:69:7a:ba:18:32:35:71:03:a5:60:b9:48:
8e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AF:52:A0:88:89:3E:D8:9D:20:3B:CE:EC:96:3E:4C:7B:FF:83:EF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C31E2EA22B8E11EC8FC29410D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.49.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:44:99:05:62:bb:08:52:5f:f9:47:62:08:4e:f9:a0:7f:aa:
c7:6f:17:12:92:d8:cb:df:d1:c1:ee:13:6d:96:e4:b0:a8:b0:
e1:a4:89:a7:ae:09:09:a6:96:b3:2b:27:eb:c2:cb:4c:ad:0c:
a3:d2:40:c5:9a:1b:3e:2c:86:fd:cd:fb:0b:62:d8:31:d5:6f:
f3:d3:53:4c:96:64:0a:c6:bc:21:74:da:47:35:df:8e:1b:8d:
62:c4:5d:d6:74:92:d7:95:f5:8e:e5:ba:50:cb:b8:2d:66:e1:
ab:bb:74:88:1b:81:e6:8d:c8:2a:bb:d6:b1:5d:5b:ae:46:3f:
37:15:7c:ea:30:71:74:da:9d:d2:cb:b8:33:cc:52:39:5e:fc:
1f:0c:cf:b9:0f:5f:c4:f5:2d:9e:eb:de:ce:de:e7:df:30:8e:
0b:54:d2:49:ed:28:3e:f1:97:40:99:3b:3b:71:da:ed:7d:3f:
b0:c1:0c:37:27:ac:1e:46:d3:42:d0:24:83:da:1c:d7:56:55:
02:d5:f3:a5:02:24:fe:4e:51:b6:63:24:27:e3:6e:00:98:23:
c7:c7:f7:fe:a4:a9:2b:0a:a1:9c:bf:e9:42:bf:63:a6:d2:55:
61:a9:12:79:d8:29:e7:9e:63:23:82:eb:8e:29:dd:ca:4e:91:
2f:bb:df:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org