Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C6220D4A9AF511EC9BF2C8785A40D577.roa
File: C6220D4A9AF511EC9BF2C8785A40D577.roa (raw, json)
Hash identifier: R8FaL8F8O3V5l57M/8AaAjD/G/Zwphg024VjomL6UMc=
Subject key identifier: E7:02:3A:75:8B:02:39:C1:03:DD:4D:13:63:43:18:F1:EC:4C:92:C0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 07E3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C6220D4A9AF511EC9BF2C8785A40D577.roa
Signing time: Thu 03 Mar 2022 13:28:12 +0000
ROA not before: Thu 03 Mar 2022 13:28:09 +0000
ROA not after: Fri 03 Mar 2023 13:28:09 +0000
asID: 60781
IP address blocks: 154.16.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2019 (0x7e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 3 13:28:09 2022 GMT
Not After : Mar 3 13:28:09 2023 GMT
Subject: CN=6220c26c-e5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:91:5a:5b:37:da:80:de:a5:34:91:db:fe:d7:
95:3a:e1:72:62:d8:d0:fc:89:48:b2:19:63:5c:48:
ee:e6:63:80:3e:32:e6:41:b9:e2:4b:07:75:c2:93:
66:e2:71:a9:e4:9d:ba:41:5c:68:9f:b7:51:2b:4a:
57:6c:78:2d:54:b6:8c:83:cd:8a:ac:48:05:b8:b7:
ae:de:11:a7:36:65:8c:45:be:b2:2e:f8:c2:39:42:
5e:21:93:99:e5:e1:8b:d9:6e:e3:ab:5e:89:89:a7:
4c:32:44:c5:11:3c:fb:9d:c3:55:40:b0:19:39:df:
26:e0:4c:19:27:bb:26:f6:d8:94:01:60:7a:18:a6:
99:fe:c7:be:08:fb:05:b6:e2:df:38:25:89:a4:d2:
ff:be:86:f3:5d:cf:31:ad:a6:65:a6:4c:6d:10:34:
a5:a0:bd:c6:6d:ad:08:30:56:e4:8b:fb:ab:53:a5:
70:19:b0:a7:e4:ae:43:52:a3:54:be:15:61:a2:00:
b7:6e:9f:a5:55:79:13:c7:cc:ca:a7:38:83:c6:6b:
91:7b:58:d4:74:ca:4f:c1:23:f3:9d:56:62:4f:a0:
40:c6:c0:e8:e6:80:84:7c:4f:ef:0c:bf:58:9b:6c:
a6:13:a5:96:38:18:12:0f:43:c9:9e:74:55:f4:d1:
b7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:02:3A:75:8B:02:39:C1:03:DD:4D:13:63:43:18:F1:EC:4C:92:C0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C6220D4A9AF511EC9BF2C8785A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.104.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:da:9a:32:8b:a4:61:82:9f:b8:8e:aa:e8:23:33:a8:88:14:
a3:4f:d5:1a:78:a4:66:17:a8:df:2b:9e:1f:de:97:51:f7:2c:
d0:f5:bc:97:b6:11:8e:70:31:e0:94:0e:a3:cb:24:c5:a2:f0:
75:e9:c9:13:20:f2:96:f1:b2:4c:98:b4:bb:82:fd:6c:de:e0:
94:7d:7f:e2:c1:ef:a7:e2:ad:db:58:c2:5d:59:5c:b8:66:a0:
ca:84:da:db:91:cd:44:14:5a:c0:23:12:41:db:c7:51:88:13:
9e:c8:94:01:b5:0e:17:e7:ce:68:32:4a:8e:57:bb:8e:cf:4e:
71:21:32:b3:72:e6:1d:ce:61:4d:f8:a0:f1:9a:66:eb:66:38:
15:cd:11:d4:19:05:a3:ca:0d:af:da:34:bd:7d:d7:24:af:8f:
8c:21:a8:6b:13:18:b9:f2:d9:11:1e:fc:1b:cb:3f:be:62:68:
5c:4d:1c:67:ff:75:77:c7:5f:fb:8b:8f:7b:a9:66:a8:91:2e:
ed:9a:49:a4:38:5b:5a:ab:af:ac:1c:a5:f1:c6:98:ae:40:da:
17:32:60:e3:aa:05:09:0d:f3:88:5b:84:eb:75:01:9e:ab:f1:
e0:f4:a2:ab:b6:a0:e8:da:90:fa:c4:09:7e:59:8d:a9:d1:00:
ff:a5:3d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org